Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
File: r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft (raw, json)
Hash identifier: sNvr+Uz9b+9lw6FR3chWQe+M8XgDR0FsKFRMjhHWdz8=
Subject key identifier: 2D:2F:94:7A:C7:86:8A:1B:08:B6:03:83:76:85:E4:F8:CC:04:D5:88
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial: 019FAC7710D10E2F010F15A83247161BDE4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
Manifest number: 0DFD
Signing time: Wed 29 Jul 2026 06:01:51 +0000
Manifest this update: Wed 29 Jul 2026 06:01:51 +0000
Manifest next update: Thu 30 Jul 2026 06:01:51 +0000
Files and hashes: 1: CmIJnjwGRsNcmhAutOTs4YMD2fE.roa (hash: Jua19yCeg1t/mfvLvJYnD0rI4VExJ2vBY7mPBdrmdaI=)
2: Iuaoq7xqZRoecZzyevNXwAMi3-c.roa (hash: SRPau6cxiFHTMpBCP5vvZIhkHG5VuskjK4s4tpPVTEM=)
3: aPz9jYSsAHsZtg1cdjuxCtxCBzk.roa (hash: N0uPovVPRwzq0UQVV7PxhoVVAuzDhOF3XOBQjYFpbpI=)
4: r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl (hash: 3fgUPIKpIMy32FaG+D9JGE/AfvrCdNpVMCB5PFt3zfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:77:10:d1:0e:2f:01:0f:15:a8:32:47:16:1b:de:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Validity
Not Before: Jul 29 06:01:51 2026 GMT
Not After : Jul 30 06:01:51 2026 GMT
Subject: CN=2d2f947ac7868a1b08b603837685e4f8cc04d588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:e6:b4:ca:38:a8:20:23:8d:71:2a:24:58:
16:8c:1b:af:26:44:b1:61:0e:46:70:a9:ca:76:d0:
0a:71:fb:6a:6c:45:3b:73:aa:d0:2d:08:d6:ed:29:
7d:77:7c:cb:b6:7e:cf:de:e7:39:be:69:eb:05:b4:
90:5f:06:53:a7:6f:39:91:bb:22:55:46:21:3e:04:
7a:8e:bb:a0:17:bd:ca:5e:a1:8d:62:63:d0:37:7e:
fd:1f:1f:1e:1b:0c:45:8a:ae:a0:5a:47:5e:c3:19:
39:f5:ab:03:73:e4:05:7e:9d:d3:14:0f:9a:e4:2a:
60:1f:29:f4:6f:e0:b5:f8:37:77:af:73:61:63:94:
0f:31:fe:d8:0e:40:5f:b5:f2:5a:8f:d2:3a:97:59:
37:70:14:d0:e6:a4:a0:ec:3a:3f:ee:22:50:f0:ab:
b5:af:a3:66:58:61:3f:60:33:ae:51:de:59:e3:23:
75:66:0d:5b:c3:25:7c:a7:30:7b:c6:16:4e:06:b9:
2e:0b:49:30:91:7c:71:25:e4:46:3a:65:3d:63:a6:
78:7d:00:74:7f:e4:5d:61:f6:e9:60:14:65:dc:9a:
fc:39:e1:be:c9:ea:71:04:f2:4b:62:bb:fb:f0:96:
1b:7e:ee:b4:1e:ea:e3:36:7c:7a:ad:bd:48:1e:5d:
7b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2F:94:7A:C7:86:8A:1B:08:B6:03:83:76:85:E4:F8:CC:04:D5:88
X509v3 Authority Key Identifier:
keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:93:1c:78:9e:ec:3d:01:d1:be:7b:1d:f8:2c:42:b1:aa:14:
c6:4b:ec:18:64:b0:40:36:4b:ae:59:10:97:9e:d8:66:a9:69:
e7:1b:2b:f0:a2:bb:40:fd:c1:97:89:e4:3b:b7:d2:8f:c5:49:
9f:af:13:96:0e:d6:de:96:d9:1e:32:44:30:a4:9f:08:f2:0d:
cb:c0:e7:43:86:fc:93:df:9a:22:3e:0d:c3:bd:8d:46:1e:f3:
71:72:c5:a7:54:c4:c3:90:d4:ec:92:1b:a0:16:13:1e:5a:d8:
28:35:fd:82:62:4a:55:c8:ac:03:23:d7:53:c8:cc:ee:41:86:
fa:37:43:8c:cb:b1:81:7f:56:25:de:ea:03:f3:4e:43:e4:81:
b3:58:d6:90:16:d9:6e:d3:b3:e9:d9:2c:2f:c2:cb:a6:44:89:
1e:e4:48:ef:ec:01:61:aa:14:84:8d:b7:63:67:12:4e:99:23:
76:e3:78:38:63:e2:e0:fa:3e:cf:45:aa:1f:ef:68:d4:78:98:
96:68:9f:40:01:56:ec:8c:71:c0:f3:75:b8:f5:d5:1d:80:eb:
be:c9:1b:ff:75:78:8c:33:8a:a5:fe:dd:f9:2a:33:59:3c:2f:
41:96:31:ca:a6:ef:54:21:79:06:00:76:5a:bf:08:ac:a6:41:
06:63:7c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:14:28 2026 by rpki-client