Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
File: 7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft (raw, json)
Hash identifier: YNqDX3gIiUet/7kqT12FojR0bBfG+tcf3s+pHxbnaic=
Subject key identifier: BD:C1:BC:8B:15:6F:E6:03:BE:1B:EF:76:77:C9:18:40:43:E4:47:A5
Authority key identifier: EC:06:B5:60:61:45:7F:F5:C0:83:8A:F1:D2:53:5E:E0:D1:F2:B4:3C
Certificate issuer: /CN=ec06b56061457ff5c0838af1d2535ee0d1f2b43c
Certificate serial: 019D9AAC01D2F0A983CDB3E2E23E7B255EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
Manifest number: 53
Signing time: Fri 17 Apr 2026 09:00:57 +0000
Manifest this update: Fri 17 Apr 2026 09:00:57 +0000
Manifest next update: Sat 18 Apr 2026 09:00:57 +0000
Files and hashes: 1: 7Aa1YGFFf_XAg4rx0lNe4NHytDw.crl (hash: eFs02pK59nqqI9btwZU3P1+Ns/efIeXaTAyOEDYRhYI=)
2: Rubo6-NbY96YPObrTra-uq3P8fU.roa (hash: ky/M0LbnwTKBtipN4E15VVxICNF2Xh8wtPVIJDRLAKs=)
3: rBifEteMiJ25R5DQDU12NebJRS4.roa (hash: zud/trrJppI6pE83KUPt6r47Ql1iRfoDUPjneuGZTLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:01:d2:f0:a9:83:cd:b3:e2:e2:3e:7b:25:5e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec06b56061457ff5c0838af1d2535ee0d1f2b43c
Validity
Not Before: Apr 17 09:00:57 2026 GMT
Not After : Apr 18 09:00:57 2026 GMT
Subject: CN=bdc1bc8b156fe603be1bef7677c9184043e447a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:49:51:5c:d9:ff:af:41:fb:7c:c2:98:67:0b:
5f:82:33:8d:86:6d:45:24:ab:5d:fc:83:f6:19:21:
93:b7:dd:6a:9a:4d:d1:89:35:ad:bf:4b:f0:46:45:
81:7e:5e:3a:2d:e8:85:ca:65:66:c6:bf:96:1c:f9:
0e:83:39:70:76:0d:4e:b0:45:46:50:90:33:2d:54:
3e:fe:d4:c6:ad:b8:d4:8b:d4:35:0e:31:4e:c3:c5:
19:97:d7:8b:a2:a6:a3:75:a3:4e:fc:db:48:cd:7b:
9d:2c:05:ad:61:5e:81:cc:74:dc:15:a6:3e:91:54:
94:cb:fa:73:f5:d5:14:0b:e2:52:c6:a9:6b:61:f2:
81:b2:9a:ba:49:17:2a:e2:d8:43:6d:de:7f:3e:81:
af:70:32:96:ee:7e:38:95:d7:45:29:92:d5:86:a1:
54:8e:80:fc:11:a9:7f:9e:1e:8b:7d:1b:bd:4e:d1:
cf:39:49:f7:4a:2a:79:3f:45:07:15:eb:f7:57:d3:
d3:5f:fc:00:55:34:dc:e7:0a:2a:2d:b3:04:cf:51:
bf:20:28:b8:00:bf:00:1f:0a:e5:9d:3f:d0:3e:9f:
39:b0:fd:81:2e:31:a2:b2:86:32:28:c0:28:2c:35:
fa:07:53:00:29:45:31:06:fa:36:90:04:a0:8d:6e:
4d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C1:BC:8B:15:6F:E6:03:BE:1B:EF:76:77:C9:18:40:43:E4:47:A5
X509v3 Authority Key Identifier:
keyid:EC:06:B5:60:61:45:7F:F5:C0:83:8A:F1:D2:53:5E:E0:D1:F2:B4:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:94:2a:cc:72:01:b6:a5:8c:69:4c:c8:49:27:d8:a9:6a:10:
55:af:43:3e:a4:82:70:9c:fa:34:e0:58:55:b3:71:93:7e:17:
5b:f6:4f:b5:05:22:7a:5a:10:49:9d:fa:1e:fb:a4:91:28:21:
3a:91:63:16:db:c3:87:8a:21:af:35:70:d0:eb:af:c6:76:4d:
9f:e6:84:d4:34:46:ac:9f:06:79:fc:d9:98:d3:23:12:df:01:
d1:a5:a3:29:a0:d8:db:88:b7:6f:53:ce:c8:43:b1:6d:cb:ff:
d2:28:44:75:be:af:ba:2c:60:ce:5f:0d:c7:b3:91:07:8e:9f:
31:f1:b1:89:b5:69:c9:d7:32:9e:41:d5:67:3b:58:69:70:ba:
89:9c:1a:5a:b1:81:53:8c:3a:3c:84:25:53:0e:c5:19:33:99:
8c:d9:1d:6c:e5:e6:6e:c6:d7:2a:47:f8:8c:e5:a3:0e:50:74:
86:fa:30:d1:99:ba:d8:3f:9f:0f:61:da:17:5f:91:4b:e4:b0:
fb:c8:c2:c2:be:5e:66:7f:1f:09:5b:f9:06:9c:d0:73:f0:e2:
78:8c:e8:3a:9a:86:04:bb:28:c6:6c:25:47:c4:23:68:72:c5:
3d:92:d0:ea:56:d7:dc:98:7e:96:49:92:59:56:0a:20:9c:96:
58:49:28:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:26:51 2026 by rpki-client