Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
File: 7-aRQnxuQYBvbOseIYp9xjIP3u0.mft (raw, json)
Hash identifier: VR4Dba+8ZGrNiOn1h8BdXJplHG9UntDKCYy3tiF6gO4=
Subject key identifier: FF:47:89:D0:55:C5:3C:85:9F:C6:3B:E1:6A:3C:B2:CB:F3:65:17:A0
Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
Certificate issuer: /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Certificate serial: 019D98BD32A4063D8651B5DCAE90A3FEFA6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 00:00:29 +0000
Manifest this update: Fri 17 Apr 2026 00:00:29 +0000
Manifest next update: Sat 18 Apr 2026 00:00:29 +0000
Files and hashes: 1: 7-aRQnxuQYBvbOseIYp9xjIP3u0.crl (hash: NUaFVOpqd0rpJzkxKsRia33pIseSGPrsKTZnw9qaTCk=)
2: oUHh0fasEsq5w1CCMpfcHZtBRD4.roa (hash: UjTvz3EvpJQa3UXT8srfAji/9iKr5LpXON0y3SlaisY=)
3: y5NcApjS5_rDCgexUqkW-sOr7LA.roa (hash: iNlwoFrzX2UsLRpZnY8/tJMxzCRcasSdqgo0ouKBIzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:32:a4:06:3d:86:51:b5:dc:ae:90:a3:fe:fa:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Validity
Not Before: Apr 17 00:00:29 2026 GMT
Not After : Apr 18 00:00:29 2026 GMT
Subject: CN=ff4789d055c53c859fc63be16a3cb2cbf36517a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:33:cb:28:03:d5:c7:51:e6:fc:9b:0b:9b:f7:
82:00:1f:7f:f5:f9:56:30:47:78:c6:f5:0b:e1:44:
47:9a:c2:f0:46:42:8e:95:f1:41:0f:d9:04:6a:37:
91:74:e5:aa:08:0a:ea:99:c5:48:86:00:ef:4b:76:
89:2d:c5:9c:8d:c8:13:14:3a:4f:89:45:bd:f7:01:
09:13:ea:84:88:91:f4:01:34:e4:3b:ff:cf:d6:fc:
bb:0a:ab:cb:08:7a:a1:1a:65:67:34:68:84:c4:2f:
e7:25:1b:cd:ce:e7:1a:b8:43:72:28:8e:8d:7a:83:
90:31:1b:7f:d3:5b:42:e0:c9:5a:49:4c:1a:ad:a7:
93:77:a7:ef:f5:61:8a:53:5e:8d:94:cd:6d:a3:e2:
f2:71:06:52:71:ac:13:30:32:1c:d8:8f:6e:7c:cf:
ef:c6:6b:23:01:f8:b5:34:f2:86:96:72:50:6f:ea:
4f:cb:a9:5b:08:46:a6:85:27:b7:16:47:29:fc:ff:
3e:2c:94:d8:ab:94:8d:00:23:20:fc:f8:8b:9f:9d:
d0:86:5f:ab:b3:4b:92:c5:b3:79:19:c9:18:87:64:
4d:48:b9:21:30:6c:f7:24:c5:55:30:47:2a:01:04:
bf:86:ef:0a:c2:13:64:08:8b:24:a1:f6:d7:45:3f:
f7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:47:89:D0:55:C5:3C:85:9F:C6:3B:E1:6A:3C:B2:CB:F3:65:17:A0
X509v3 Authority Key Identifier:
keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3d:fb:da:e3:aa:63:9b:34:21:d8:a2:22:bc:83:6b:50:9f:
36:27:1e:0d:3d:52:2b:7e:19:2c:34:b3:98:98:5a:31:dc:aa:
76:ff:3c:58:ef:97:3d:52:9b:89:5b:6f:5c:36:c5:08:10:59:
05:89:e3:5e:fe:f5:4f:73:b3:b0:30:37:09:2d:61:d8:09:2a:
80:20:8a:38:e0:2c:f8:10:d8:96:eb:f7:18:4b:89:6e:eb:e3:
97:8a:2f:3a:14:4f:60:46:e1:c5:53:ce:25:bf:13:30:58:8e:
66:36:9f:1d:29:96:19:08:a7:47:e3:63:69:bf:29:75:8c:91:
cb:69:ff:a2:ad:c3:4e:19:14:ea:e6:6b:d5:41:f9:9e:16:2a:
c9:5e:8a:5b:a3:cd:4a:ac:d1:1b:03:79:19:e6:a6:3f:a7:9b:
a8:64:d4:d8:0e:a2:e4:69:50:65:eb:e1:17:35:e1:ef:a8:1c:
95:1e:5a:05:b7:bf:63:fc:ee:cf:33:7d:16:10:2c:28:39:98:
a6:10:6a:af:62:4b:15:7e:ba:3e:db:4a:af:40:5b:5d:25:cd:
b9:1d:a9:2b:d0:e8:b9:e5:09:af:c3:00:e4:d5:92:55:0b:70:
9e:a3:b7:90:3b:a2:f0:33:87:2e:b2:e9:bd:73:c9:4e:4e:96:
ae:f6:51:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:48:39 2026 by rpki-client