Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
File: 7-aRQnxuQYBvbOseIYp9xjIP3u0.mft (raw, json)
Hash identifier: DVrJus57lJJa8DmdLOH1eq71pPJsF5GD6gvw9s/QpiQ=
Subject key identifier: 13:6F:D9:C5:AF:63:84:8D:97:D9:57:E6:6E:BD:DC:FC:99:E2:BB:CE
Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
Certificate issuer: /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Certificate serial: 01A000CABED672A90A46E82865AD224425E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
Manifest number: 1A05
Signing time: Fri 14 Aug 2026 15:01:22 +0000
Manifest this update: Fri 14 Aug 2026 15:01:22 +0000
Manifest next update: Sat 15 Aug 2026 15:01:22 +0000
Files and hashes: 1: 7-aRQnxuQYBvbOseIYp9xjIP3u0.crl (hash: D+7wvzBpYEln9H1EchxEzAm1QSrSEmAOAn5lFURH4Us=)
2: oUHh0fasEsq5w1CCMpfcHZtBRD4.roa (hash: UjTvz3EvpJQa3UXT8srfAji/9iKr5LpXON0y3SlaisY=)
3: y5NcApjS5_rDCgexUqkW-sOr7LA.roa (hash: iNlwoFrzX2UsLRpZnY8/tJMxzCRcasSdqgo0ouKBIzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:be:d6:72:a9:0a:46:e8:28:65:ad:22:44:25:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Validity
Not Before: Aug 14 15:01:22 2026 GMT
Not After : Aug 15 15:01:22 2026 GMT
Subject: CN=136fd9c5af63848d97d957e66ebddcfc99e2bbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3d:e2:fe:15:39:d0:66:fd:94:aa:93:a9:00:
c7:8f:8b:ea:cd:93:f1:50:e7:e5:57:ec:6f:04:53:
a8:2c:25:7b:8c:a8:88:e2:34:99:9d:93:45:26:89:
a0:ef:bf:a9:84:c9:df:9c:db:18:a6:2c:25:88:a8:
0a:54:11:9a:21:fa:97:27:47:8a:1f:48:18:b6:82:
52:18:48:29:a8:1c:16:fa:d8:ec:9b:20:16:2a:ed:
7c:f7:8e:db:48:9a:25:49:f4:5d:43:3d:d5:fa:aa:
ff:72:9c:ee:6b:53:29:03:e0:48:ea:30:be:ca:6f:
a7:f9:52:fd:0c:63:7a:0c:73:1c:f3:8b:2d:77:4e:
ae:b5:32:92:c6:c0:e7:75:fd:5e:0a:4c:6f:38:b4:
d2:c5:36:43:52:59:50:04:b1:aa:e0:a7:53:8c:77:
23:a2:87:dd:51:b2:37:45:43:13:8d:f0:be:bd:5e:
bb:58:e5:34:94:59:5e:a1:99:bb:33:e7:11:4c:7e:
d5:64:52:de:7b:db:98:c9:98:f6:7d:8b:46:cc:b3:
13:fc:a5:d5:76:f2:07:ac:71:ce:fc:54:7e:a7:af:
2b:9c:7b:04:fe:fd:23:5a:0e:13:36:2f:24:8d:1e:
b1:a3:c0:35:d6:d6:71:a4:78:85:55:1c:34:13:40:
e9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6F:D9:C5:AF:63:84:8D:97:D9:57:E6:6E:BD:DC:FC:99:E2:BB:CE
X509v3 Authority Key Identifier:
keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b0:9f:a6:99:45:27:fb:b4:04:2f:89:5c:5d:76:d5:b2:10:
cd:d9:4e:51:fb:37:fc:31:54:19:08:37:d1:78:3e:2a:1f:a2:
6b:6f:eb:bf:d2:54:ef:5e:f1:fd:d3:4c:13:73:4f:39:d2:04:
f2:b0:f4:dd:30:f1:32:d3:db:a1:11:ef:82:85:68:2f:c6:31:
1d:65:0b:92:e4:15:60:72:28:ec:a5:7a:2f:0e:84:58:c5:9c:
de:f4:33:d6:d4:d1:f4:4a:86:f6:01:69:14:d6:c9:8b:ba:af:
8a:f7:28:08:8f:24:2b:d5:8d:2b:f0:f2:5b:69:83:0b:b1:f4:
84:c1:82:43:9b:96:04:6f:19:e4:3c:a6:bb:da:e2:f2:da:80:
3c:3f:a7:52:e8:ae:b2:ea:97:3b:ef:18:37:9c:f3:46:7e:d9:
82:c1:89:b7:c1:36:73:4a:d9:1d:2e:da:0b:96:c9:4d:64:12:
18:eb:6b:d9:71:7a:42:a9:e3:9b:2c:dc:9f:dd:b6:de:34:e1:
4d:e7:e1:bc:91:4d:38:f3:2c:63:a2:e9:40:5f:a3:2f:d0:5f:
97:5a:ff:a9:a1:7f:d0:73:91:8a:d4:4b:5b:d6:06:28:74:14:
6d:94:fa:68:19:da:b4:43:e3:98:2c:d4:23:18:fe:93:b5:89:
08:c5:aa:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:10 2026 by rpki-client