Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
File: 7-aRQnxuQYBvbOseIYp9xjIP3u0.mft (raw, json)
Hash identifier: ULbveDkMkNoopFgi4gD1n+6NxM0kw+H2Fyxep7RDoyc=
Subject key identifier: 06:8A:F4:39:B4:1E:52:21:17:B1:CE:C2:10:43:A4:65:D8:9C:AE:E7
Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
Certificate issuer: /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Certificate serial: 01A0EC65B214517AB19F3E7E92BEE3FB2A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
Manifest number: 1A7F
Signing time: Tue 29 Sep 2026 09:01:22 +0000
Manifest this update: Tue 29 Sep 2026 09:01:22 +0000
Manifest next update: Wed 30 Sep 2026 09:01:22 +0000
Files and hashes: 1: 7-aRQnxuQYBvbOseIYp9xjIP3u0.crl (hash: vxUqDY3QJ+wypsHp4YrzT2Yl4dnHn8GdZMBRtCvza8I=)
2: oUHh0fasEsq5w1CCMpfcHZtBRD4.roa (hash: UjTvz3EvpJQa3UXT8srfAji/9iKr5LpXON0y3SlaisY=)
3: y5NcApjS5_rDCgexUqkW-sOr7LA.roa (hash: iNlwoFrzX2UsLRpZnY8/tJMxzCRcasSdqgo0ouKBIzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:65:b2:14:51:7a:b1:9f:3e:7e:92:be:e3:fb:2a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Validity
Not Before: Sep 29 09:01:22 2026 GMT
Not After : Sep 30 09:01:22 2026 GMT
Subject: CN=068af439b41e522117b1cec21043a465d89caee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:e5:1b:13:63:cc:4f:d0:61:1a:56:98:4e:
62:2c:49:3b:a2:7d:0e:e8:23:7a:fe:87:be:5c:e2:
99:2b:2a:77:a0:6f:47:be:c0:3f:5d:cb:e5:3d:27:
5f:49:34:8e:28:10:f5:42:3f:59:50:95:53:95:f5:
6c:20:b8:e5:44:f1:39:27:6d:d7:05:9c:81:38:30:
23:88:c1:a1:1d:64:fe:20:12:df:b2:73:96:0f:27:
d9:b6:2f:e4:a2:9c:58:68:13:22:31:b2:6f:0b:d9:
2d:52:be:34:20:88:91:e1:79:31:7c:90:f9:f5:e2:
07:44:c6:7e:74:41:f8:13:6c:c4:6f:2b:05:e5:42:
34:8d:d7:ae:42:d1:6e:09:f4:71:db:a0:f9:e2:c6:
48:74:a4:33:64:1d:06:39:45:a2:57:d9:a3:7f:99:
62:65:eb:ef:f4:d3:1b:9e:63:b6:b0:9b:fc:58:64:
b0:93:c1:d9:5b:0b:2d:7b:a6:5b:74:20:54:51:57:
e3:f2:82:d9:1e:0c:ba:d1:e4:91:7d:ff:fd:d9:79:
87:8c:90:bf:08:72:b4:86:54:32:cc:53:a8:8e:24:
82:df:e3:5f:24:7e:89:c4:f7:98:60:c4:1e:5d:df:
ad:a9:85:85:3f:22:48:35:8b:4b:c2:8a:0b:75:3b:
e3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8A:F4:39:B4:1E:52:21:17:B1:CE:C2:10:43:A4:65:D8:9C:AE:E7
X509v3 Authority Key Identifier:
keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7a:22:86:2d:57:53:e9:5a:a4:6b:70:61:a7:48:a8:06:a7:
95:67:aa:b1:66:37:e0:bf:2f:32:96:65:fe:d0:96:f3:95:78:
09:5c:4f:21:ce:e9:2c:8f:3b:af:91:ed:04:8d:c0:a8:1d:dc:
23:16:7b:d0:9f:a7:43:13:d4:56:77:b4:42:3e:b7:02:7a:81:
1a:50:06:ec:0d:7c:f5:bd:de:1b:2e:1a:c2:c8:ff:71:dd:9e:
42:91:3a:58:e6:d2:6d:1a:6d:98:02:e5:84:18:77:4e:a4:23:
4b:c9:f0:0e:e9:be:89:a4:64:14:4a:a3:0b:c9:e9:7f:01:6e:
c9:15:10:6e:71:42:ab:11:f1:57:6c:45:88:c3:ac:5e:78:e8:
b3:7e:03:86:d6:8c:78:9e:1a:dd:98:99:09:e2:3c:51:58:ea:
25:0a:15:46:07:15:8f:f7:ab:4c:30:a3:c4:4b:a7:0f:d3:5a:
e9:4b:d8:e9:1a:f9:9f:8d:b5:37:9f:11:84:cf:8b:e9:14:2f:
e4:e2:e0:1f:51:57:12:1c:57:8b:40:34:2f:ac:7c:46:60:0d:
a2:30:89:70:6c:95:22:b0:2f:6b:4e:bc:68:63:0b:d4:59:68:
da:8a:75:4d:51:a8:42:35:a1:ea:4e:3f:6a:a2:79:c3:3c:41:
f4:dd:02:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:26:44 2026 by rpki-client