Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
File: 7-aRQnxuQYBvbOseIYp9xjIP3u0.mft (raw, json)
Hash identifier: WGwds3jnIpLLW1trEm79hWMNkinOXUTyAD6FC1+4b2Q=
Subject key identifier: 41:67:EA:41:90:98:87:24:06:A4:5B:69:E6:4F:0A:69:26:28:14:A0
Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
Certificate issuer: /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Certificate serial: 01A13D810E7F0DDE57590B33C6D8B5628D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
Manifest number: 1AA9
Signing time: Thu 15 Oct 2026 03:00:30 +0000
Manifest this update: Thu 15 Oct 2026 03:00:30 +0000
Manifest next update: Fri 16 Oct 2026 03:00:30 +0000
Files and hashes: 1: 7-aRQnxuQYBvbOseIYp9xjIP3u0.crl (hash: XwZElnaF+kxHpKpivUO0ls3Th4pJLmjZrtLSF46RaW0=)
2: oUHh0fasEsq5w1CCMpfcHZtBRD4.roa (hash: UjTvz3EvpJQa3UXT8srfAji/9iKr5LpXON0y3SlaisY=)
3: y5NcApjS5_rDCgexUqkW-sOr7LA.roa (hash: iNlwoFrzX2UsLRpZnY8/tJMxzCRcasSdqgo0ouKBIzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:0e:7f:0d:de:57:59:0b:33:c6:d8:b5:62:8d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Validity
Not Before: Oct 15 03:00:30 2026 GMT
Not After : Oct 16 03:00:30 2026 GMT
Subject: CN=4167ea419098872406a45b69e64f0a69262814a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:9a:6e:9a:a7:a8:c5:5e:26:01:26:b0:01:
85:58:52:44:fa:fd:42:87:26:21:92:44:b3:5f:da:
32:96:9d:54:ff:86:48:0e:3d:ee:b8:c1:6c:b7:ea:
dd:18:bb:1a:1d:09:e8:b0:a4:a6:a9:37:73:a0:16:
1f:c0:0f:ff:dd:17:90:d3:57:ec:e8:14:6d:0f:44:
52:eb:42:6b:b9:db:62:62:be:65:4b:da:72:b1:42:
dd:40:24:17:16:04:7b:62:c0:a8:6a:10:ab:60:fd:
44:f2:e3:44:a1:8e:e6:06:00:37:2a:db:24:2d:92:
e7:6a:9d:05:b6:f6:0d:b6:07:62:62:e1:11:10:bc:
b0:83:b5:bc:f6:4a:95:59:d5:9f:70:f0:71:20:03:
fc:46:5a:1f:21:a0:f3:75:0b:cc:d2:97:99:9a:e3:
94:60:5f:78:99:42:ca:0a:e4:94:62:38:57:ce:fb:
d0:a5:cb:2c:20:7c:e2:8e:ca:6d:4a:5d:9c:70:c0:
87:6a:6b:d5:aa:fa:03:bb:1a:88:9d:72:f9:6c:d6:
d5:df:f3:1e:c0:b2:86:19:6f:52:d9:a1:b7:bd:02:
61:b0:40:28:72:cf:ec:3b:ad:df:dd:73:c8:65:fa:
35:7f:16:17:83:f4:02:e3:f7:96:dd:d5:45:e9:c0:
ef:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:67:EA:41:90:98:87:24:06:A4:5B:69:E6:4F:0A:69:26:28:14:A0
X509v3 Authority Key Identifier:
keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c9:22:b1:72:23:99:54:b8:d0:3b:eb:89:c1:7b:7b:78:d6:
b9:32:ea:d1:9c:85:54:e4:f5:27:88:55:5f:2e:b7:c7:5b:83:
9a:e9:e2:2c:05:8c:ff:85:f8:20:d8:f1:40:2d:6b:49:6d:fe:
53:d0:66:0e:7f:7f:2d:53:24:a9:46:1f:2c:20:66:a7:07:e7:
35:9f:25:45:ed:9b:90:0f:0b:78:b8:83:bb:95:c8:19:2f:3d:
04:d0:a0:79:c3:27:8e:60:db:4d:a2:f8:a0:c6:00:89:58:1a:
96:b6:10:98:5b:5c:33:45:6c:f2:3d:a6:ae:32:24:ad:4a:5d:
c7:d4:3d:fc:65:cb:b0:46:88:4e:ff:61:96:b2:7f:1c:d3:b2:
4f:05:03:57:01:65:82:f2:d6:9f:d4:47:5d:64:65:c3:7b:86:
8b:89:8c:b3:60:34:2f:1a:bf:27:2c:a5:98:be:54:8e:a3:90:
17:9e:5a:b3:a6:c4:20:49:97:f8:ac:2c:c5:54:34:f5:bc:d8:
be:41:7d:03:04:39:c5:02:f0:52:17:e8:69:7b:a8:0f:f8:64:
7b:7c:49:de:87:20:48:d6:bc:86:66:89:d9:c7:80:d6:09:b9:
95:39:93:cb:63:61:b8:71:ed:d2:5a:6b:a0:a8:30:02:eb:4f:
07:b7:68:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:36:14 2026 by rpki-client