Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
File: 7qq8oRa05zqZRKuXAs-YZleANYA.mft (raw, json)
Hash identifier: dHXe7SbgMfO1lm93rzMC3jwT6DOt20SjzAldT0Y99Fs=
Subject key identifier: F4:DF:B5:77:80:D1:BC:30:EA:A0:49:9D:D2:65:2E:91:71:E9:E6:11
Authority key identifier: EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
Certificate issuer: /CN=eeaabca116b4e73a9944ab9702cf986657803580
Certificate serial: 019DDD9F0873051CFC19CE8B54A537AAFD6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
Manifest number: 052E
Signing time: Thu 30 Apr 2026 09:01:20 +0000
Manifest this update: Thu 30 Apr 2026 09:01:20 +0000
Manifest next update: Fri 01 May 2026 09:01:20 +0000
Files and hashes: 1: 7qq8oRa05zqZRKuXAs-YZleANYA.crl (hash: t4I9FVZtJkvh/nYU4fgFqhojwIR2nyouRoxB/ZZxka4=)
2: QsP30C5AyyrplhJOQtwBFKHc2pI.roa (hash: 1rl1zPT5VgUb8N7x1I4JvxDOw2OsxnlXtnTYVUm9hGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:9f:08:73:05:1c:fc:19:ce:8b:54:a5:37:aa:fd:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeaabca116b4e73a9944ab9702cf986657803580
Validity
Not Before: Apr 30 09:01:20 2026 GMT
Not After : May 1 09:01:20 2026 GMT
Subject: CN=f4dfb57780d1bc30eaa0499dd2652e9171e9e611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:7c:19:c9:a5:ee:7a:9b:d8:a4:9f:a1:6b:
30:04:2d:a8:99:ea:d9:06:53:52:b8:59:53:36:9f:
fb:c4:34:d9:36:20:e2:dd:58:bd:12:bb:2d:29:99:
13:ce:a3:cd:68:23:8b:9d:1c:58:29:a7:90:c5:ff:
da:46:6a:40:da:58:64:99:c4:8d:41:ad:5f:00:f2:
14:b1:4c:21:0c:21:51:83:c9:ff:39:c1:f2:98:e8:
50:54:41:21:23:2a:54:cb:dd:7b:05:43:b7:5a:65:
01:6a:4a:38:05:e4:82:b3:5b:8f:17:e9:c6:94:1a:
73:ed:88:78:34:55:68:c8:9f:27:78:c5:25:5f:ec:
28:95:5a:19:8f:38:d0:1e:db:43:22:29:7b:0e:a5:
3d:69:6e:18:ff:8e:5a:56:38:f4:fb:a1:5c:53:41:
10:2b:21:33:33:35:98:ab:1c:44:59:a4:4d:10:33:
74:b3:b5:dd:64:cf:3f:4d:56:5f:13:cf:6d:c6:92:
97:5e:14:d6:69:ba:8c:b6:de:77:22:4e:00:ea:22:
e7:b6:16:12:d3:12:df:a2:c8:9f:03:c5:6e:cb:ff:
1d:19:a5:02:16:5c:04:64:e0:39:fd:41:95:bf:11:
cc:c1:70:43:a6:5e:a9:92:9f:d8:cf:0e:f3:d9:0f:
ba:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DF:B5:77:80:D1:BC:30:EA:A0:49:9D:D2:65:2E:91:71:E9:E6:11
X509v3 Authority Key Identifier:
keyid:EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d8:aa:7c:67:e6:7a:ab:71:c4:33:01:80:0f:df:cc:34:5e:
70:70:d6:c2:b2:40:0a:a5:b1:b1:5c:cf:8a:6f:c8:fc:8f:95:
80:62:0e:6f:d0:d3:20:fb:3b:1a:38:36:b0:c8:e7:f9:31:2d:
21:a2:a6:82:bf:fd:61:84:a9:93:b6:b6:db:b2:a5:a8:83:7d:
0e:08:a1:a3:85:7b:6a:f9:38:64:e2:7b:c9:c4:74:46:d4:67:
8c:75:76:ef:e4:c1:bb:f8:a2:c7:57:de:26:09:54:1e:64:f5:
16:d5:43:5c:37:7b:93:06:d5:0b:da:24:b0:14:2a:51:e4:85:
e6:ca:e5:1d:42:d5:e0:80:b0:ee:fa:37:7a:bb:77:21:37:dd:
40:66:73:4d:86:da:e6:15:9c:00:30:2b:82:e0:74:f9:6f:ae:
04:34:06:8f:0c:6a:d5:48:4d:9b:f4:d5:88:d8:7e:c6:d8:53:
a6:87:f5:21:20:1f:60:9c:b8:fa:93:c5:59:4b:cc:6c:13:d4:
46:8f:9d:d2:f8:f5:1a:18:e8:86:bb:0d:71:06:9c:44:8f:e0:
be:f0:15:20:34:ad:e9:2f:92:42:76:44:e9:1f:07:88:6e:e1:
8b:94:0c:6e:e1:dc:36:88:cb:1e:b0:7b:c6:40:56:72:22:ae:
ed:8a:a7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:46:37 2026 by rpki-client