Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
File: 7aJsQI_Ge3UnNMyZfzYw269vYG8.mft (raw, json)
Hash identifier: 01sAe+pyjCxcZYDvTuKaSpgAyxuH7TzF9JXyG60Xe8E=
Subject key identifier: FE:24:6A:A0:D7:35:14:03:CA:E0:6E:3C:54:42:C0:3E:F4:A6:1D:FF
Authority key identifier: ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F
Certificate issuer: /CN=eda26c408fc67b752734cc997f3630dbaf6f606f
Certificate serial: 019D99D0E94E2F415128502DE124DEFC3DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
Manifest number: 0D3A
Signing time: Fri 17 Apr 2026 05:01:38 +0000
Manifest this update: Fri 17 Apr 2026 05:01:38 +0000
Manifest next update: Sat 18 Apr 2026 05:01:38 +0000
Files and hashes: 1: 7aJsQI_Ge3UnNMyZfzYw269vYG8.crl (hash: ZiOylqxBQZv4ZvRIIiJ+nl9eAzIPOkDj73kUCylKjVM=)
2: FPqdZZMf-fAPrlSDgNZhOHhHZxU.roa (hash: 3JadQ2sVOsTDIpy9yP5IPOoHewm11RGCjoRS/5qYd6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:e9:4e:2f:41:51:28:50:2d:e1:24:de:fc:3d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eda26c408fc67b752734cc997f3630dbaf6f606f
Validity
Not Before: Apr 17 05:01:38 2026 GMT
Not After : Apr 18 05:01:38 2026 GMT
Subject: CN=fe246aa0d7351403cae06e3c5442c03ef4a61dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2f:3e:ed:c5:b8:31:6c:cb:16:8c:e4:76:d3:
a0:77:51:0e:b4:de:8b:1d:3a:04:5c:6f:5a:a6:fd:
43:7c:47:a4:00:42:6b:b6:1a:49:bc:31:72:60:50:
2b:2a:96:5c:73:36:20:c8:e1:5a:80:bc:0e:b3:60:
b3:40:6b:2c:7c:8a:78:a8:0b:e3:f8:f3:61:2e:7a:
12:52:94:2c:23:7c:2c:13:43:8d:4d:fd:22:2a:f0:
a7:de:47:e9:0e:7c:38:12:46:5d:10:50:86:f1:87:
47:1a:3e:f7:16:b8:ee:99:ad:24:d8:f6:bb:78:fa:
71:38:f1:c4:12:4c:1e:91:84:ae:b5:63:3d:3f:1f:
6a:98:29:a7:de:c1:ae:1d:47:49:54:93:2b:0a:9e:
75:13:ff:90:3b:41:9a:f7:3a:32:a1:9e:41:b3:d1:
0e:b4:1f:5e:47:20:18:b6:95:84:f7:7e:1c:95:4f:
42:65:26:26:61:01:38:cb:2d:5f:50:b0:fb:6e:e6:
85:bb:99:86:b3:db:d1:9b:df:da:21:3d:80:ed:36:
54:f2:53:91:9d:b2:95:73:9a:27:7b:2e:e1:0f:a9:
dc:ec:0d:cb:81:b0:78:0c:ea:a4:6c:28:60:cd:7c:
f0:d1:83:07:99:b2:b5:0e:49:23:0f:98:75:2a:ba:
30:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:24:6A:A0:D7:35:14:03:CA:E0:6E:3C:54:42:C0:3E:F4:A6:1D:FF
X509v3 Authority Key Identifier:
keyid:ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:00:b3:9b:24:38:03:8c:35:3e:28:3e:a3:d1:57:b0:f5:0f:
1a:22:a1:b6:0b:68:54:4f:b0:e4:18:d2:8a:7c:c9:ed:13:3e:
55:3c:76:4f:f6:9c:0c:8b:d0:ee:ba:65:64:f0:72:c6:e0:96:
af:32:77:79:ec:f7:f8:6a:4e:d1:1d:6c:d0:89:92:fb:8c:3b:
74:ba:22:63:5c:97:5f:0f:dd:d3:c8:54:0d:7e:11:a4:c3:0b:
e7:66:df:21:12:14:b5:ce:2c:af:08:d1:1b:81:47:57:9a:34:
79:d7:d1:d5:66:a5:3f:55:ad:48:9d:36:d6:e5:5f:0b:c3:9e:
d3:e9:bf:4f:f8:8c:9a:ca:c2:c1:66:c1:da:08:50:28:ea:c0:
0a:78:5b:22:bb:1e:30:c8:1b:ed:28:73:07:98:c0:e3:ba:74:
8f:7b:c5:ef:85:4b:8b:ab:fc:6e:c5:6b:b8:4c:30:66:59:4f:
6a:2f:5c:41:79:67:a4:cb:7a:39:c8:ee:f6:d8:b8:01:6f:e2:
4c:ad:7a:86:2f:b7:29:d5:e6:e6:3a:a3:2c:b5:e7:8c:2f:dd:
e0:7a:83:cc:75:1d:94:47:a8:40:59:33:65:c6:96:80:b9:30:
0b:22:26:75:0d:e7:cb:76:af:a0:92:f1:aa:1f:18:5a:0f:66:
eb:02:b1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:29:11 2026 by rpki-client