Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
File: 7Sj1d0agBa51qPX56S99ItYcjTQ.mft (raw, json)
Hash identifier: skbCGHYUEHO8Sqbrp1WZRLe5Zr+ECiEq34/6oITj6DM=
Subject key identifier: AE:C1:18:69:FE:C6:66:59:09:D7:07:F9:61:38:6B:76:4E:50:D7:0F
Authority key identifier: ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
Certificate issuer: /CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Certificate serial: 019D999922F1ACF21A296B8E4B8459BEA327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
Manifest number: 0A00
Signing time: Fri 17 Apr 2026 04:00:43 +0000
Manifest this update: Fri 17 Apr 2026 04:00:43 +0000
Manifest next update: Sat 18 Apr 2026 04:00:43 +0000
Files and hashes: 1: 7Sj1d0agBa51qPX56S99ItYcjTQ.crl (hash: nFNP18t27YRPIYy8SnKcLlJ9xOmY+s8smPA4JPfAY7k=)
2: UlZluMg72w3OGQ7yVXSws-uTL0A.roa (hash: ZbBL16EPSfeFJDsY/7W353hLaYPwOpiK4otGlBdRF9Q=)
3: r6bLmGYRXJA6GUfCZnH4ebCbXYU.roa (hash: Q+Z0jJyseu+MqQA03xeTfakfDGrq+7+0HE8bf99rEXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:22:f1:ac:f2:1a:29:6b:8e:4b:84:59:be:a3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Validity
Not Before: Apr 17 04:00:43 2026 GMT
Not After : Apr 18 04:00:43 2026 GMT
Subject: CN=aec11869fec6665909d707f961386b764e50d70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:60:f0:3c:06:63:bb:a0:16:81:9d:7b:89:4a:
9e:f2:0e:2e:5d:7d:15:c1:65:01:5b:4c:58:4b:6b:
06:bc:72:e4:26:41:7b:ac:d1:f7:72:f0:4d:d3:65:
af:e3:3a:52:5b:e1:66:5b:73:f9:cf:39:d3:99:3d:
8e:4a:46:c7:90:2f:48:21:ef:b6:47:72:5b:32:29:
6b:2a:a6:01:ac:42:5a:ed:26:81:5f:b8:e2:57:a9:
99:20:8a:15:fc:9e:68:25:d6:81:8f:b1:8e:91:a4:
d6:a7:92:73:64:61:1b:8b:a5:2f:9e:3f:e6:40:ea:
e7:eb:f5:c1:63:49:72:f4:19:e8:82:2d:65:d7:49:
83:86:22:1a:95:96:f3:74:25:df:1b:9e:48:08:86:
7f:19:9c:c9:8f:02:e7:1d:c7:9e:eb:d4:03:f6:4b:
3e:11:22:1d:9c:05:ba:df:ab:5f:88:0a:69:7f:6d:
d7:e2:2a:70:03:e9:d0:a5:1f:12:22:0c:f6:26:62:
b2:94:ff:16:3e:03:15:5d:d6:90:ab:6e:df:33:ad:
30:ea:8d:d9:90:2e:55:bd:c5:f1:7f:6c:f6:24:d9:
81:0d:10:f7:fc:06:32:42:fa:07:35:a8:ca:a2:79:
08:aa:1e:49:15:fa:15:45:63:74:f7:13:57:80:17:
ea:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C1:18:69:FE:C6:66:59:09:D7:07:F9:61:38:6B:76:4E:50:D7:0F
X509v3 Authority Key Identifier:
keyid:ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:6e:83:96:5a:10:70:0a:a0:6e:a3:46:7a:c1:36:b9:a0:f8:
4b:8b:df:f8:25:8f:25:bc:e2:bb:e9:b3:6f:2b:7c:0d:03:38:
19:1d:70:41:b9:ee:fb:84:d5:2a:e0:d0:ee:96:20:0e:33:84:
6b:cc:d4:e5:d0:c9:27:c4:2c:6c:6a:8b:56:02:c5:99:66:d7:
02:55:01:bf:8e:d3:be:6e:1c:c2:7b:a9:07:28:d2:ee:1f:a7:
8e:4a:68:c6:b0:fa:9a:b8:3f:a0:2e:12:0f:05:bb:44:b9:c7:
c2:21:f8:a6:6f:48:1a:87:cb:e2:63:ca:36:e5:78:e8:99:cd:
aa:01:b1:39:47:7f:fe:51:1c:77:cf:39:f8:84:b0:c1:16:72:
6d:7a:3f:7b:b3:12:30:d7:83:a8:0b:d4:c3:92:49:3c:77:0f:
12:3b:ca:45:2e:93:cb:1e:d5:33:11:9c:f9:28:e2:2c:1d:68:
d7:7f:7e:3d:e2:48:fb:df:cb:2b:63:9d:38:3c:5a:c0:21:93:
e1:4d:65:fd:85:e4:d5:3b:af:65:86:04:2e:db:1b:d7:e6:af:
c2:fb:de:d0:a7:d9:be:6d:a8:7d:7a:e6:2f:c3:1c:3f:6e:41:
76:85:b7:93:20:1e:43:f5:78:b0:0e:d9:f1:67:9f:c0:fa:68:
00:78:a1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:03 2026 by rpki-client