
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
File: 7qq8oRa05zqZRKuXAs-YZleANYA.mft (raw, json)
Hash identifier: 58m2L6j+qzN/tXvSYMonpRlXEM3Hzu3ymUMW7OJaQJE=
Subject key identifier: 02:B1:24:FC:B7:33:76:C5:F1:EF:73:87:79:66:6A:7A:51:95:33:19
Authority key identifier: EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
Certificate issuer: /CN=eeaabca116b4e73a9944ab9702cf986657803580
Certificate serial: 01A0E218F385E388F309FA2C850F4C1A43D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
Manifest number: 06BE
Signing time: Sun 27 Sep 2026 09:01:20 +0000
Manifest this update: Sun 27 Sep 2026 09:01:20 +0000
Manifest next update: Mon 28 Sep 2026 09:01:20 +0000
Files and hashes: 1: 7qq8oRa05zqZRKuXAs-YZleANYA.crl (hash: IZIDHsGlOc0kZgAAmYSqJNKZWekx2GEwowM8LA5DK3A=)
2: QsP30C5AyyrplhJOQtwBFKHc2pI.roa (hash: 1rl1zPT5VgUb8N7x1I4JvxDOw2OsxnlXtnTYVUm9hGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:18:f3:85:e3:88:f3:09:fa:2c:85:0f:4c:1a:43:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeaabca116b4e73a9944ab9702cf986657803580
Validity
Not Before: Sep 27 09:01:20 2026 GMT
Not After : Sep 28 09:01:20 2026 GMT
Subject: CN=02b124fcb73376c5f1ef738779666a7a51953319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:b9:bd:12:2f:bd:46:01:1d:98:45:ce:f7:
65:40:b4:86:73:19:ac:80:e5:cc:34:dc:8b:e0:c9:
66:55:26:2a:11:40:d4:5d:f2:6a:0e:ef:de:81:14:
b5:92:2a:45:08:73:51:e6:2f:26:7d:1e:73:dd:59:
89:bd:0b:63:09:62:7a:fe:7d:56:16:5d:74:25:78:
90:21:93:49:22:8f:25:ce:8d:fa:c4:b3:fd:dc:9d:
a5:eb:fe:ff:40:c6:57:cf:91:c8:3a:c9:cd:52:c8:
ca:63:7b:7b:3c:e4:59:6d:23:91:7e:df:dc:35:e5:
28:af:a4:db:ad:c5:d4:37:06:ee:2b:60:f5:fe:41:
2f:27:da:58:c6:56:6a:ba:de:74:6e:f8:25:3a:9e:
f8:63:df:4b:50:28:c7:b7:f9:e3:1f:b7:bf:55:fa:
b2:d6:9d:ff:73:29:44:8d:cc:b4:ae:60:49:19:53:
03:ab:1b:34:81:a3:fe:9b:41:78:b1:5f:44:2e:bb:
22:8c:c9:31:2f:b3:97:e9:2e:95:0f:58:8b:11:d2:
ab:f2:cf:a1:59:1e:94:25:70:4d:8f:34:da:2c:c5:
cb:ca:dd:12:fd:d8:7f:f0:61:20:c8:d1:b1:c6:16:
58:81:e1:6d:c2:59:b6:5f:fd:15:4f:4b:f8:94:df:
82:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B1:24:FC:B7:33:76:C5:F1:EF:73:87:79:66:6A:7A:51:95:33:19
X509v3 Authority Key Identifier:
keyid:EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ff:19:6d:46:8c:30:92:2a:d7:b1:f5:db:dc:f9:79:d5:d6:
83:d5:fa:85:9d:fa:e0:08:7f:d4:96:f5:12:fd:f6:b7:18:50:
23:f3:0a:eb:20:ea:7e:f9:1d:aa:d4:cf:14:bd:c6:34:a4:e6:
2b:44:96:ba:ea:47:31:35:14:79:a5:e4:49:ae:de:e3:a0:7a:
7e:ac:3d:ab:cd:1a:a8:63:2f:e6:7b:30:7c:d0:1f:5f:d9:f6:
35:ed:cf:47:50:f7:a7:c1:da:f0:3e:ab:19:22:e9:b9:9e:93:
3f:9a:34:2d:1f:74:65:b9:63:be:7e:28:f6:c7:be:a2:2a:be:
a3:cf:c6:53:97:5d:43:4b:1f:40:6a:e6:07:4e:2e:61:fc:40:
08:6e:0f:12:f4:a3:5f:72:09:82:ab:6e:0d:20:08:fd:e2:31:
31:90:54:c3:97:f8:06:dc:18:13:5c:67:af:43:c9:ce:4b:68:
2a:a6:0e:c9:80:b9:bd:4b:62:b2:42:4b:3c:30:0c:24:4e:17:
31:5a:f9:50:bf:14:ac:f9:8f:9e:1d:e8:19:d5:2a:b2:f6:aa:
ac:d8:3e:d9:b6:b8:29:75:68:dd:ff:af:4b:ca:83:00:73:ee:
06:e3:96:82:b7:e8:16:db:5a:11:a3:e9:88:ea:ac:98:64:f8:
f8:98:bc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:18:43 2026 by rpki-client