Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
File: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft (raw, json)
Hash identifier: uFdSu46MjovqRIdCZXVwz/Rc0YIwZ652GhSc3q4l0xw=
Subject key identifier: 7C:09:CA:26:5E:23:E0:E2:75:2C:1A:CE:E9:38:43:10:94:1A:5D:05
Authority key identifier: 69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49
Certificate issuer: /CN=690ae175fbe63b0e930469097c9492d42ed79249
Certificate serial: 019FA2294389327748F819F681F43AD8AE22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
Manifest number: 03B7
Signing time: Mon 27 Jul 2026 06:00:41 +0000
Manifest this update: Mon 27 Jul 2026 06:00:41 +0000
Manifest next update: Tue 28 Jul 2026 06:00:41 +0000
Files and hashes: 1: XCvwouQb8EHjnYaba0fCxCrBwa0.roa (hash: 7OCxz9+g4uYWDzH37RsGVsHV2ZDZWkC8HmqPtc1bvkQ=)
2: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl (hash: ruAPV7v1dR4RDJJwBQg5cq/EYxwtdmWo3q/kJyJR3gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:43:89:32:77:48:f8:19:f6:81:f4:3a:d8:ae:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690ae175fbe63b0e930469097c9492d42ed79249
Validity
Not Before: Jul 27 06:00:41 2026 GMT
Not After : Jul 28 06:00:41 2026 GMT
Subject: CN=7c09ca265e23e0e2752c1acee9384310941a5d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e4:29:f0:7c:e6:a5:68:8d:c2:8e:2a:f3:10:
4b:7d:e0:af:f3:d3:28:ba:d9:cc:54:bc:fc:c2:68:
8b:b8:5c:54:18:52:d4:7b:b9:4c:61:27:48:c1:5f:
64:bd:32:7b:56:a5:a2:1e:da:1c:d8:15:e9:21:e5:
45:3e:e7:42:fa:1d:b4:3a:81:18:bc:35:77:ae:95:
be:1a:39:2f:79:8f:d7:0a:09:5e:03:3c:fa:36:95:
c0:eb:8a:23:94:ab:de:f2:65:bd:34:14:e5:2f:27:
33:b5:46:1a:cc:42:22:dc:4b:ba:16:58:a0:c8:34:
2f:23:d7:72:f1:5a:a5:63:4c:45:35:bf:98:4a:31:
97:55:fe:7b:08:da:6f:a7:72:b4:b1:34:2e:d0:ff:
c1:93:5e:1e:bd:1b:2f:b1:4f:c0:4a:56:ef:92:68:
7d:4a:cd:02:db:60:0e:20:64:7f:02:85:93:dd:12:
15:33:7b:ba:4c:42:2d:0d:1f:ba:ef:86:26:74:03:
79:d8:27:79:cd:15:76:f0:94:c2:5a:96:4c:80:ee:
a9:a6:c0:91:33:52:d5:5a:45:64:06:fe:b8:ba:9f:
cb:cc:da:d6:95:86:e6:44:b1:85:8c:a9:0a:97:53:
98:dd:04:8c:7d:a2:6c:e1:a8:f7:81:5a:2a:cd:c0:
3d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:09:CA:26:5E:23:E0:E2:75:2C:1A:CE:E9:38:43:10:94:1A:5D:05
X509v3 Authority Key Identifier:
keyid:69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e3:66:91:b2:9c:85:bb:0a:2f:62:75:4c:09:95:23:db:0f:
98:8c:c9:1e:b1:e4:3c:98:f9:a6:61:19:2a:f0:87:d4:8b:58:
25:07:cb:ed:92:2b:cf:7f:10:9d:b4:6f:e1:5d:97:a3:a9:07:
77:3c:ff:c2:19:df:80:b5:0f:b3:d7:d5:28:c7:d5:62:a5:8d:
c0:9c:f1:43:2c:73:49:fe:1e:5d:5c:f1:d5:4b:98:04:dd:19:
09:55:74:58:25:9b:30:f4:ee:cf:24:a3:01:95:a5:7a:f8:0a:
8e:88:6b:99:4e:5e:fd:f5:b8:26:8f:d0:98:c0:96:d6:85:70:
f5:5f:b9:a4:2a:20:93:99:37:a7:b8:16:75:57:dc:14:8a:c4:
b9:9e:15:1a:6d:48:69:73:ce:7b:44:30:a5:79:c8:bb:0b:4a:
17:25:a0:8e:5c:9b:30:9c:35:34:a7:94:4b:a4:30:75:47:8e:
2a:cb:0d:56:1b:24:4b:9a:32:a6:83:ec:21:11:a1:00:b9:e5:
fb:8d:9f:e7:20:26:ef:9f:aa:6f:fe:26:71:47:b6:a8:dc:67:
ec:7e:c9:7e:6b:fd:5d:23:8f:8d:e9:1a:01:46:a6:ce:38:15:
fa:c7:51:de:4e:7e:77:bd:df:04:a0:e0:46:e0:09:a7:e2:95:
01:99:a2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:53:37 2026 by rpki-client