Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
File: r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft (raw, json)
Hash identifier: TxBvrYpzVtJ1/05akH+Nqz5+XRAYLCeWEQYBh9k8iW4=
Subject key identifier: 59:CE:AE:01:FD:2A:18:FD:EA:95:63:68:C3:30:59:B2:AF:31:F7:21
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial: 01A0C8588B5A4D4CB407385CAB8D194BEF4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
Manifest number: 0E90
Signing time: Tue 22 Sep 2026 09:00:41 +0000
Manifest this update: Tue 22 Sep 2026 09:00:41 +0000
Manifest next update: Wed 23 Sep 2026 09:00:41 +0000
Files and hashes: 1: CmIJnjwGRsNcmhAutOTs4YMD2fE.roa (hash: Jua19yCeg1t/mfvLvJYnD0rI4VExJ2vBY7mPBdrmdaI=)
2: Iuaoq7xqZRoecZzyevNXwAMi3-c.roa (hash: SRPau6cxiFHTMpBCP5vvZIhkHG5VuskjK4s4tpPVTEM=)
3: aPz9jYSsAHsZtg1cdjuxCtxCBzk.roa (hash: N0uPovVPRwzq0UQVV7PxhoVVAuzDhOF3XOBQjYFpbpI=)
4: r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl (hash: BVNSN780KdmXLaBapM8Hr+UL6f4nAbVyMTpn3byqGVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:8b:5a:4d:4c:b4:07:38:5c:ab:8d:19:4b:ef:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Validity
Not Before: Sep 22 09:00:41 2026 GMT
Not After : Sep 23 09:00:41 2026 GMT
Subject: CN=59ceae01fd2a18fdea956368c33059b2af31f721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:86:4e:94:11:d1:5c:fa:7a:81:2b:94:09:
94:13:80:7f:1f:b8:d5:80:a0:c2:e4:aa:65:63:46:
83:a1:e5:17:1a:91:93:7d:37:ee:86:26:48:e3:2a:
4a:d2:96:5d:23:68:8e:ef:05:9b:0d:9d:a4:e6:44:
65:40:c1:76:cc:fa:60:ed:96:be:99:64:c0:b6:1a:
a0:ef:be:93:b8:ac:b4:f1:b5:65:80:0d:df:3f:56:
28:be:2b:74:d6:6a:d0:81:39:82:91:b5:67:5a:19:
36:a1:e2:ee:ba:57:8d:44:59:dd:ec:b5:fe:dc:cc:
17:72:db:0e:81:1b:4b:79:6f:b1:56:ce:e4:e3:08:
62:32:c4:ee:6f:c2:51:a3:33:05:a7:76:54:e6:ec:
99:6b:5a:a4:23:71:91:d6:9e:51:78:c8:3f:bc:e6:
3a:6e:be:f0:23:f4:70:9a:20:25:d3:9d:9f:de:53:
59:85:fb:cb:c2:e3:26:06:1a:e4:a4:c6:8b:64:39:
6e:44:32:e2:29:00:69:7f:d5:ba:9f:44:c0:02:e4:
4c:6a:fd:74:06:ee:63:c2:41:4b:4f:0f:4e:da:1a:
e2:14:7e:bc:42:99:ae:f0:c8:7d:79:d2:e3:70:fd:
df:2f:c6:df:90:1d:8a:81:fd:ab:2d:af:f1:31:6b:
77:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CE:AE:01:FD:2A:18:FD:EA:95:63:68:C3:30:59:B2:AF:31:F7:21
X509v3 Authority Key Identifier:
keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c9:d6:cb:22:bf:f3:88:6a:12:54:ac:bb:5d:07:f4:19:99:
70:03:eb:fe:b5:d2:e9:0e:e0:93:69:34:20:56:18:f1:39:67:
d8:ef:37:7f:66:11:20:b2:60:38:8e:c9:84:aa:3d:10:63:a0:
29:e0:bb:2b:d6:f0:ee:0f:a0:3d:71:e6:e1:a0:d3:38:0f:cd:
d4:b0:c5:e8:52:81:6f:e5:ee:12:06:7d:26:d7:69:7d:d4:47:
79:41:18:e4:03:82:80:22:f3:62:88:55:05:6b:e5:c4:c3:24:
cc:5d:32:d2:30:a2:a2:ad:b7:58:19:3c:87:20:6f:ae:03:1a:
48:0e:1c:75:14:67:0c:ff:38:4c:30:48:4f:d4:87:2f:a9:06:
2b:c8:d2:f7:97:6d:56:90:07:73:84:31:5e:9a:3f:1c:9c:9e:
1c:89:5b:73:a2:25:3a:f9:a5:4d:47:fd:20:ff:d0:f8:64:10:
25:a2:fd:48:69:bc:39:a1:5d:ee:a0:08:80:ab:13:ea:6c:fb:
a4:79:ab:30:01:5b:55:64:60:10:1e:c5:21:cf:d7:37:d6:5b:
9c:72:76:f4:9b:02:76:4f:8c:55:73:4f:6c:7c:fe:4c:c8:0e:
a5:bf:1a:87:64:52:d4:a0:5c:25:bc:8f:e5:a2:33:9a:4a:c1:
51:3f:b9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:47:26 2026 by rpki-client