Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
File: r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft (raw, json)
Hash identifier: 50b5U67BzAJY1/HCrP20Wc0f9dORk8VbBCThJIB9ko0=
Subject key identifier: F7:8D:51:66:29:25:92:99:11:13:C3:9E:4D:71:6D:4A:39:8D:32:68
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial: 019D9B50787251DF95EA618DB97A07A907FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
Manifest number: 0CE9
Signing time: Fri 17 Apr 2026 12:00:35 +0000
Manifest this update: Fri 17 Apr 2026 12:00:35 +0000
Manifest next update: Sat 18 Apr 2026 12:00:35 +0000
Files and hashes: 1: ASO-wECtUbDG1DckYZ24HiUg6DU.roa (hash: VgGdV7+deLKhr4gB8tleb/RqVtkbUSprjT1l2cEz5/g=)
2: CmIJnjwGRsNcmhAutOTs4YMD2fE.roa (hash: Jua19yCeg1t/mfvLvJYnD0rI4VExJ2vBY7mPBdrmdaI=)
3: Iuaoq7xqZRoecZzyevNXwAMi3-c.roa (hash: SRPau6cxiFHTMpBCP5vvZIhkHG5VuskjK4s4tpPVTEM=)
4: aPz9jYSsAHsZtg1cdjuxCtxCBzk.roa (hash: N0uPovVPRwzq0UQVV7PxhoVVAuzDhOF3XOBQjYFpbpI=)
5: r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl (hash: BBPMZba+LhpcW+wb7tzahKs8L6yNerlfO8xu9244n44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:78:72:51:df:95:ea:61:8d:b9:7a:07:a9:07:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Validity
Not Before: Apr 17 12:00:35 2026 GMT
Not After : Apr 18 12:00:35 2026 GMT
Subject: CN=f78d5166292592991113c39e4d716d4a398d3268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:af:f7:a1:18:bb:10:b4:95:3d:eb:0d:e3:08:
db:3b:64:60:99:36:97:3a:bd:0f:79:9d:6d:57:8a:
c9:1d:61:3e:82:a9:86:48:e6:3f:83:30:d0:e9:6c:
92:03:b3:0d:94:27:9f:41:10:8f:90:1c:c4:9c:ac:
62:55:f9:01:e3:1c:a0:fe:85:71:a3:65:81:61:c3:
c7:3f:9b:70:e1:43:73:e2:de:b8:00:5a:4c:85:e1:
18:a4:d2:05:84:20:67:e0:6c:b7:c2:84:3a:5f:f0:
19:2e:20:2f:68:1d:89:46:55:d0:c5:c6:70:fd:ed:
30:39:f9:b6:dd:54:19:8b:d9:05:ce:90:83:63:de:
09:09:d6:6b:80:39:4d:fb:49:ba:64:cf:f4:52:a1:
ae:bf:10:db:dc:cf:74:12:07:7f:89:1f:95:a6:17:
af:2c:8f:9a:78:d7:34:84:8e:8e:3a:2e:68:6f:80:
cc:2b:63:c6:78:49:a3:dd:4b:ce:af:b4:86:64:0b:
a6:e3:05:e3:f6:3a:94:46:a9:f5:93:dd:f7:69:62:
5a:75:ef:64:c2:46:92:37:82:be:93:12:a5:dc:b3:
de:2f:65:4b:a9:3e:0f:98:6a:12:2c:b7:26:ad:4c:
35:48:67:5f:d3:0a:8d:66:bc:34:0d:aa:1f:08:8b:
4e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8D:51:66:29:25:92:99:11:13:C3:9E:4D:71:6D:4A:39:8D:32:68
X509v3 Authority Key Identifier:
keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ae:74:42:4f:76:d8:35:94:91:49:63:36:3c:4e:f5:69:ac:
ae:de:1c:42:ae:c7:0f:be:3a:16:08:98:38:1d:ba:06:66:6a:
47:05:af:35:5c:cb:88:3f:fc:37:69:65:e6:23:3c:6c:b0:73:
dc:95:6b:bd:59:e9:c3:56:ee:3a:fa:1b:67:23:7a:ca:21:da:
9f:9d:c6:40:e0:08:d4:de:c7:24:6b:bf:e2:1a:1d:58:c9:b6:
c6:c5:2a:1e:cb:3a:ec:bb:f7:0d:44:af:7a:b4:1a:1a:a0:9e:
08:df:75:c2:c1:59:c1:a2:0f:2e:7c:69:d6:aa:0a:e2:23:59:
c2:0c:77:9c:7b:c5:1a:db:b4:fa:3e:54:ee:1b:c6:d9:ae:04:
0e:9b:31:05:5d:80:f0:7b:7c:78:7d:c2:90:f4:ce:f6:5c:e8:
b2:6c:cf:21:e3:65:1c:f1:33:51:91:e9:b5:15:ea:69:4e:a9:
ca:e6:15:96:e2:bc:31:b5:e5:22:2e:e9:2d:2f:64:3b:ac:8b:
1a:6d:93:8a:de:16:a8:99:81:74:9a:88:8f:e1:3b:68:4f:a4:
0d:7a:0b:fc:df:1f:9e:c3:68:e7:33:b6:ab:8c:e3:26:ab:03:
fe:df:24:25:81:08:44:f9:73:04:94:17:ad:85:d3:16:c2:ba:
c5:b6:b6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:56:40 2026 by rpki-client