Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
File: 7-aRQnxuQYBvbOseIYp9xjIP3u0.mft (raw, json)
Hash identifier: VBhizcWZ6P8cxT2LDVYgPP6fP8U0w8l+QtPuJGQr7vo=
Subject key identifier: 57:88:70:49:A8:99:D4:55:55:E8:3F:F7:AC:93:76:CB:F7:92:98:D1
Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
Certificate issuer: /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Certificate serial: 019D382E7A8112CDC6B50B18C382CEFDA5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 06:01:03 +0000
Manifest this update: Sun 29 Mar 2026 06:01:03 +0000
Manifest next update: Mon 30 Mar 2026 06:01:03 +0000
Files and hashes: 1: 7-aRQnxuQYBvbOseIYp9xjIP3u0.crl (hash: X+9DpWuV0GKWZ5nCRdH2bhSIRnNDNeQXnlLK5cu0Bto=)
2: oUHh0fasEsq5w1CCMpfcHZtBRD4.roa (hash: UjTvz3EvpJQa3UXT8srfAji/9iKr5LpXON0y3SlaisY=)
3: y5NcApjS5_rDCgexUqkW-sOr7LA.roa (hash: iNlwoFrzX2UsLRpZnY8/tJMxzCRcasSdqgo0ouKBIzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:7a:81:12:cd:c6:b5:0b:18:c3:82:ce:fd:a5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Validity
Not Before: Mar 29 06:01:03 2026 GMT
Not After : Mar 30 06:01:03 2026 GMT
Subject: CN=57887049a899d45555e83ff7ac9376cbf79298d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:68:8f:cc:60:66:f6:a7:a1:69:cd:7a:9d:8f:
75:96:da:30:3c:25:d1:68:c0:b3:d0:8c:e8:57:eb:
f2:5a:c1:d2:c7:95:e0:b4:8f:59:a4:f0:36:95:17:
a2:20:c1:a6:8b:84:1b:5c:55:cd:71:f9:3a:74:0e:
17:9c:e1:7c:80:d7:f3:45:7d:59:c2:eb:9d:e0:2c:
cf:9d:82:56:41:29:3b:f5:b0:90:5a:0d:99:6b:83:
97:75:2c:f8:05:1f:9d:7b:eb:f6:2f:b1:7f:a7:bf:
2b:9e:e9:0f:aa:06:b6:f8:6f:49:44:bd:6f:de:e3:
02:67:3d:6c:2a:a8:59:af:55:54:57:ce:6a:c4:b0:
34:6f:62:86:9a:d2:17:75:91:5f:f1:31:97:70:16:
aa:68:18:f1:ce:1b:4a:aa:5a:5d:b2:86:10:f3:30:
95:82:1f:85:b0:e8:c9:97:48:62:81:bf:39:5f:ad:
e8:21:09:01:91:bb:5e:22:65:5a:a3:50:5e:00:6e:
8f:1d:fd:2d:7b:05:67:91:b8:53:43:58:fc:49:ea:
cc:22:9a:c8:f9:21:03:3e:58:aa:07:52:44:3a:3e:
01:bb:bb:7a:ba:42:99:59:d9:1c:b3:a6:1e:29:70:
e0:ac:da:d9:52:c5:5c:94:34:b9:98:b0:b3:fa:4e:
8c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:88:70:49:A8:99:D4:55:55:E8:3F:F7:AC:93:76:CB:F7:92:98:D1
X509v3 Authority Key Identifier:
keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9e:6c:fe:c8:e3:7d:04:38:d0:ec:0b:4d:30:ac:91:1c:a0:
e3:0b:00:22:ac:f6:39:e4:5e:94:59:d1:f9:e5:43:ef:bf:d0:
8a:cc:91:72:41:9a:de:2f:46:2d:c8:6a:c3:d0:7a:b0:86:c2:
02:05:95:05:62:d0:d1:05:0a:b1:c3:d6:5d:10:df:45:06:cc:
99:e2:68:b3:88:f3:4f:ec:4c:65:4a:ea:5c:eb:81:39:08:9c:
58:8a:ca:ca:79:1d:c0:66:01:5f:30:33:c0:01:14:d0:1d:2e:
31:4f:93:8f:de:f4:48:60:47:56:08:1e:f6:ea:26:63:96:76:
ec:98:f5:ec:29:e4:55:81:20:8a:6f:49:1c:5e:99:e7:70:18:
e5:39:88:c5:bf:a6:05:cd:61:ff:df:c0:a9:f3:73:0f:9b:2f:
5f:9b:a4:09:7b:20:2c:3d:90:a9:fd:81:a2:81:10:a3:ed:b6:
4b:8d:52:c6:54:9d:51:d4:ae:ed:4f:61:17:8f:df:92:fd:57:
44:8c:cb:8c:d6:f4:55:65:26:f4:34:71:f6:c4:f9:cb:c2:f1:
6a:8d:d1:60:00:67:4f:93:52:d6:3c:f4:e3:a9:91:a5:bf:65:
a5:f5:cc:a6:f8:ff:a3:b6:04:b4:89:cf:d4:a3:be:a0:f5:08:
84:d3:77:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:26 2026 by rpki-client