Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
File: r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft (raw, json)
Hash identifier: lekLWNqsrqgHAEs6xoIXUYLD7feDpjWP3kSVNk2ffBY=
Subject key identifier: BB:CA:14:5B:A9:85:64:12:F6:A3:10:4F:60:6E:72:F0:D3:3C:36:A2
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial: 019CABD91BC55F838E9CAEC7010E4534F1B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
Manifest number: 0C6D
Signing time: Mon 02 Mar 2026 00:00:58 +0000
Manifest this update: Mon 02 Mar 2026 00:00:58 +0000
Manifest next update: Tue 03 Mar 2026 00:00:58 +0000
Files and hashes: 1: ASO-wECtUbDG1DckYZ24HiUg6DU.roa (hash: VgGdV7+deLKhr4gB8tleb/RqVtkbUSprjT1l2cEz5/g=)
2: CmIJnjwGRsNcmhAutOTs4YMD2fE.roa (hash: Jua19yCeg1t/mfvLvJYnD0rI4VExJ2vBY7mPBdrmdaI=)
3: Iuaoq7xqZRoecZzyevNXwAMi3-c.roa (hash: SRPau6cxiFHTMpBCP5vvZIhkHG5VuskjK4s4tpPVTEM=)
4: aPz9jYSsAHsZtg1cdjuxCtxCBzk.roa (hash: N0uPovVPRwzq0UQVV7PxhoVVAuzDhOF3XOBQjYFpbpI=)
5: r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl (hash: zIp5tTB6e4WeI9YMnAoeuM/BTmAy86gJ/w0oCowmb3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:1b:c5:5f:83:8e:9c:ae:c7:01:0e:45:34:f1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Validity
Not Before: Mar 2 00:00:58 2026 GMT
Not After : Mar 3 00:00:58 2026 GMT
Subject: CN=bbca145ba9856412f6a3104f606e72f0d33c36a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:4c:62:bc:e6:8e:17:d9:31:f4:b5:46:9a:
68:47:65:7f:02:4e:5a:31:b7:60:68:78:5d:5b:4e:
84:08:4e:d9:6e:90:0a:76:46:79:9e:b4:33:f8:49:
01:e9:4a:24:5b:7c:3c:89:82:44:0f:c3:f7:5c:ab:
92:3a:04:41:7e:29:75:e0:57:9c:6d:aa:23:87:00:
7e:db:1f:2d:c6:42:c1:2b:58:6b:a7:dc:0e:e4:98:
f2:96:0c:86:c3:dd:72:98:c7:ab:be:b1:db:71:e5:
0c:7e:14:09:56:58:d0:b7:72:af:74:4e:d5:2f:b0:
59:0d:51:2d:bf:9a:19:5a:54:9a:ba:ef:e6:3e:f9:
ee:83:fd:3d:62:59:6b:37:f6:c7:fa:a3:37:1e:1d:
c8:97:4a:11:73:6f:20:21:73:f4:56:d2:34:86:90:
b7:ee:f5:30:65:ff:21:02:35:10:d0:f8:1d:88:da:
48:17:3e:89:2f:1d:de:01:08:1f:f4:3f:ae:ae:26:
f1:32:f4:ae:8c:5c:af:f2:fe:fc:82:9b:d7:96:9c:
1d:38:50:24:4b:ec:2f:ae:47:fa:ca:2e:ee:97:b3:
3d:85:cf:d1:ae:f5:c7:cf:99:3a:37:cd:03:60:72:
0c:6d:a2:39:e2:a7:55:6f:44:37:fb:f8:63:49:07:
d3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CA:14:5B:A9:85:64:12:F6:A3:10:4F:60:6E:72:F0:D3:3C:36:A2
X509v3 Authority Key Identifier:
keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7b:c2:a2:2e:78:98:8e:85:6f:c4:79:b4:88:9d:d2:a9:24:
24:3b:6a:0d:1f:c5:08:e3:09:82:1d:72:9f:b8:e2:3b:4f:2b:
8b:8c:74:71:fc:28:50:67:df:a0:23:b4:46:19:4c:c7:3b:9b:
bf:16:3e:b8:08:81:8d:b6:3a:94:60:bf:58:c9:a6:8b:de:de:
84:96:39:c1:32:67:a9:af:0f:e3:2e:6b:e0:fe:f0:8c:40:dd:
93:3c:14:ca:4b:72:81:d1:8f:59:f6:f3:7c:07:ea:ab:7c:d3:
13:04:80:a2:80:8f:d2:d2:69:1e:fb:1b:7b:48:7e:4f:b6:90:
d2:23:6f:3b:b0:96:2b:31:eb:b0:3a:97:a9:8b:52:f8:a7:28:
34:3f:65:ef:f3:09:f8:7a:43:66:3d:2a:e1:8e:3d:e5:c6:4b:
7e:2b:14:a7:b0:3a:92:71:b2:1b:7d:ef:29:09:a1:97:f1:4c:
9a:9a:de:7e:e6:39:26:8c:b0:dd:4f:dc:73:7d:bc:3a:3b:32:
7a:da:43:fd:97:26:40:d6:7d:6f:92:94:14:6e:9e:fc:ee:1a:
2b:82:ca:db:76:af:a0:d5:6f:bd:23:42:14:9d:5e:0b:bb:8b:
86:d0:e0:6e:d3:b2:16:4a:97:ab:81:5c:38:ef:85:0f:76:21:
fe:65:70:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2RvFX4OOnK7HAQ5FNPGwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYjRlMDRhMGVkMzQ0MTEyYzE4NTNjYWIwOWY1MmUxY2Q5
YWJhZjIwHhcNMjYwMzAyMDAwMDU4WhcNMjYwMzAzMDAwMDU4WjAzMTEwLwYDVQQD
EyhiYmNhMTQ1YmE5ODU2NDEyZjZhMzEwNGY2MDZlNzJmMGQzM2MzNmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHZMYrzmjhfZMfS1RppoR2V/Ak5a
MbdgaHhdW06ECE7ZbpAKdkZ5nrQz+EkB6UokW3w8iYJED8P3XKuSOgRBfil14Fec
baojhwB+2x8txkLBK1hrp9wO5JjylgyGw91ymMervrHbceUMfhQJVljQt3KvdE7V
L7BZDVEtv5oZWlSauu/mPvnug/09YllrN/bH+qM3Hh3Il0oRc28gIXP0VtI0hpC3
7vUwZf8hAjUQ0PgdiNpIFz6JLx3eAQgf9D+uribxMvSujFyv8v78gpvXlpwdOFAk
S+wvrkf6yi7ul7M9hc/RrvXHz5k6N80DYHIMbaI54qdVb0Q3+/hjSQfTywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvKFFuphWQS9qMQT2BucvDTPDaiMB8GA1UdIwQY
MBaAFK+04EoO00QRLBhTyrCfUuHNmrryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjdUZ1NnN1RSQkVzR0ZQS3NKOVM0YzJhdXZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xOWYyZTYtMWJmMy00ZjdhLTg4MTct
ODA5NWYzMjk3MTc5LzEvcjdUZ1NnN1RSQkVzR0ZQS3NKOVM0YzJhdXZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8xOWYyZTYtMWJmMy00ZjdhLTg4MTctODA5NWYzMjk3MTc5
LzEvcjdUZ1NnN1RSQkVzR0ZQS3NKOVM0YzJhdXZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKHvCoi54
mI6Fb8R5tIid0qkkJDtqDR/FCOMJgh1yn7jiO08ri4x0cfwoUGffoCO0RhlMxzub
vxY+uAiBjbY6lGC/WMmmi97ehJY5wTJnqa8P4y5r4P7wjEDdkzwUyktygdGPWfbz
fAfqq3zTEwSAooCP0tJpHvsbe0h+T7aQ0iNvO7CWKzHrsDqXqYtS+KcoND9l7/MJ
+HpDZj0q4Y495cZLfisUp7A6knGyG33vKQmhl/FMmprefuY5Joyw3U/cc328Ojsy
etpD/ZcmQNZ9b5KUFG6e/O4aK4LK23avoNVvvSNCFJ1eC7uLhtDgbtOyFkqXq4Fc
OO+FD3Yh/mVwlg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:33 2026 by rpki-client