Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
File: 7qq8oRa05zqZRKuXAs-YZleANYA.mft (raw, json)
Hash identifier: 6w6dlsC0TjoacbZcXyF0t+B9kAkMP4CyrA49Mzt90KM=
Subject key identifier: 9E:B5:19:18:7A:32:A4:9A:DA:53:26:60:0E:94:9A:74:20:14:32:8B
Authority key identifier: EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
Certificate issuer: /CN=eeaabca116b4e73a9944ab9702cf986657803580
Certificate serial: 019CF3F2476F64968431479C18DC42F912FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
Manifest number: 04B5
Signing time: Mon 16 Mar 2026 00:01:07 +0000
Manifest this update: Mon 16 Mar 2026 00:01:07 +0000
Manifest next update: Tue 17 Mar 2026 00:01:07 +0000
Files and hashes: 1: 7qq8oRa05zqZRKuXAs-YZleANYA.crl (hash: ZV97GSQ8r6jdcktmO3HqccuMp0+Jhoyfr3r1udCpMxI=)
2: QsP30C5AyyrplhJOQtwBFKHc2pI.roa (hash: 1rl1zPT5VgUb8N7x1I4JvxDOw2OsxnlXtnTYVUm9hGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:f2:47:6f:64:96:84:31:47:9c:18:dc:42:f9:12:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeaabca116b4e73a9944ab9702cf986657803580
Validity
Not Before: Mar 16 00:01:07 2026 GMT
Not After : Mar 17 00:01:07 2026 GMT
Subject: CN=9eb519187a32a49ada5326600e949a742014328b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3f:4d:0c:75:d4:49:32:1b:31:5a:54:68:7c:
7f:e5:57:db:d3:86:6e:46:e6:0d:d0:32:0a:a8:6b:
6e:d1:1c:e6:d4:83:2d:df:06:b8:72:f9:05:ab:b7:
bf:c3:7e:25:f2:e0:2f:03:82:0a:85:f6:31:5c:55:
1b:3f:f6:7a:d9:57:8b:84:a4:e5:b8:c8:1b:fe:b3:
7d:5b:0d:55:94:ff:39:18:fc:fb:b7:f0:73:4c:ef:
b8:57:c8:a8:4c:03:01:be:44:bb:e9:a1:34:69:cb:
11:a0:d5:3a:3e:7b:0e:f0:a5:69:2c:d1:62:fb:d0:
7f:c0:e5:d7:98:63:ca:ea:1d:d8:ee:b4:b2:5a:af:
f5:50:4b:28:3f:61:a9:0d:b2:19:0e:98:f3:a8:ba:
34:af:5d:6e:85:66:0f:3e:f4:93:60:3d:f1:f3:4a:
a3:87:43:7b:26:7c:ce:75:3a:6d:02:f9:91:09:f1:
fc:64:cc:17:26:c3:ba:f7:b5:30:32:03:8a:6b:4a:
e7:fb:be:74:c7:4d:12:6f:c1:da:b5:31:fc:7a:e4:
a3:5a:e6:dd:b8:89:be:2e:d2:c6:a0:e9:f2:18:45:
a2:62:fc:75:29:28:3b:bb:66:8c:c0:34:70:e3:51:
cb:a1:fe:9a:c0:ca:24:77:d8:8e:5b:3a:a0:55:d2:
3c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B5:19:18:7A:32:A4:9A:DA:53:26:60:0E:94:9A:74:20:14:32:8B
X509v3 Authority Key Identifier:
keyid:EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c6:d7:f9:ec:c3:fd:0d:6d:c5:6d:69:42:7b:4f:0f:f4:8c:
85:96:64:69:f7:d0:54:33:0d:86:5e:ad:2a:9a:fe:06:49:4c:
d5:94:55:26:02:c0:40:e8:1b:cd:b5:0b:39:6f:2f:11:2d:b9:
1e:8c:78:e4:8e:0b:0c:d9:71:05:9d:a1:b7:99:09:86:70:3b:
41:f2:fb:04:d8:ea:4d:dc:6e:c3:39:2b:65:45:7b:2a:e6:63:
0e:19:0c:92:fe:81:f0:b6:23:fb:cc:f2:42:8b:c9:fb:5b:af:
76:20:82:2f:ce:30:0f:1e:dc:5b:67:e5:52:74:b5:c3:ac:d2:
91:b8:b0:b5:1e:c3:6a:d3:29:61:f7:a8:e1:af:73:ab:48:45:
e0:c8:a9:e2:df:f4:23:e1:75:8a:90:80:72:b6:54:bd:b0:0f:
68:f5:6f:f3:ad:ab:31:a5:bb:73:a5:61:36:16:8b:37:f6:f2:
b0:3f:60:13:5b:a8:2e:88:a8:6b:95:79:29:7d:6a:6a:b5:e0:
90:b6:3a:05:53:5b:59:e3:9c:ed:77:64:27:8e:83:25:47:4e:
06:c5:5e:f1:b1:f1:7c:e3:07:80:ca:5b:3d:f1:a9:c2:2c:ca:
91:d4:eb:de:bd:07:65:c1:55:59:3f:33:3a:4a:29:d5:7d:a2:
c7:7c:6d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 03:22:14 2026 by rpki-client