Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
File: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft (raw, json)
Hash identifier: fS+8nTjXBcg+EBNhuwZBFoRF5877oSb5qkhcE4NvBSs=
Subject key identifier: 63:CD:11:F9:B6:F3:82:10:E3:39:D8:80:13:C8:6D:7B:1F:33:E2:AC
Authority key identifier: EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
Certificate issuer: /CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Certificate serial: 01A13DEF1DFBE9E60C16B0B585EFA4AAECA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 05:00:43 +0000
Manifest this update: Thu 15 Oct 2026 05:00:43 +0000
Manifest next update: Fri 16 Oct 2026 05:00:43 +0000
Files and hashes: 1: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl (hash: odth8QKzteDK9MluiQYEYZAkQSfMs3lDMao85YNMGtc=)
2: R-TR2lMlqd-ajoqANh8z83K14Gg.roa (hash: LL4D//R1+/zSqsNzLuVii4RDHBXLV7iA5YOQo+LHbz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:1d:fb:e9:e6:0c:16:b0:b5:85:ef:a4:aa:ec:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Validity
Not Before: Oct 15 05:00:43 2026 GMT
Not After : Oct 16 05:00:43 2026 GMT
Subject: CN=63cd11f9b6f38210e339d88013c86d7b1f33e2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:00:bb:3a:2d:5f:b0:33:ab:be:0e:fb:34:
e7:29:fe:41:60:e5:5a:41:bf:62:9c:45:4f:bf:a5:
01:28:d6:4c:c6:77:b2:e4:67:93:56:c1:14:4e:69:
73:2f:d5:e1:63:de:1b:42:27:2e:22:7b:55:63:79:
99:14:2e:21:dc:ad:dd:64:65:e9:81:ed:83:6b:4d:
32:3c:37:93:12:b2:8f:fe:99:95:c1:09:e2:f5:d6:
5a:e1:8c:63:10:8c:32:a2:d5:2c:82:aa:ad:ef:d4:
bd:24:87:07:de:86:83:5b:ed:58:f4:f5:47:71:b6:
fe:26:00:1c:91:c9:a1:dd:78:60:b0:47:44:00:e2:
a3:d0:4a:51:9b:4a:ae:db:5a:49:67:33:fa:90:5e:
5b:9a:08:49:6f:35:d4:4f:3e:88:66:43:c1:55:fb:
e2:05:37:e1:b8:69:db:0d:ad:00:10:19:04:4b:62:
4d:68:03:d0:aa:d0:54:31:8e:c6:76:ab:de:63:3e:
20:5b:b7:46:6e:cc:ad:6e:4d:cc:03:e4:32:40:9e:
16:ec:a0:06:a0:92:8c:fd:4b:ec:1a:52:48:a3:e9:
20:70:b5:cd:7d:e8:7c:57:ad:38:9a:06:ea:c5:97:
2b:ad:d6:93:84:18:d2:33:62:08:c7:0a:5e:38:dc:
f1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CD:11:F9:B6:F3:82:10:E3:39:D8:80:13:C8:6D:7B:1F:33:E2:AC
X509v3 Authority Key Identifier:
keyid:EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e0:b7:13:75:75:0d:5b:d0:0f:90:e5:8a:b3:bc:bf:4c:a7:
36:07:fc:3e:6a:14:67:d3:a9:5b:db:7c:8a:25:f4:61:a0:76:
c8:ee:95:76:01:6b:5c:c7:d8:23:3b:52:32:72:4e:9a:3f:d1:
cc:2f:88:af:17:61:6d:93:45:75:de:07:4e:5e:98:d1:1a:91:
aa:d5:ad:72:bc:14:6f:ac:71:09:9c:d3:b7:92:53:3c:d2:87:
0f:01:99:4b:8f:17:c3:3b:48:4d:13:84:8a:92:f9:d3:10:bf:
4a:22:91:6d:04:c8:28:a0:94:a5:fa:54:92:df:99:51:b8:53:
01:6f:c7:b8:2a:ac:7e:44:5f:32:84:e5:dd:a8:67:6f:9e:46:
90:71:ba:cc:2e:8e:8d:47:c3:a2:28:d3:66:c1:7b:a1:6b:9d:
d9:1b:8f:e5:40:2e:69:1b:ed:d7:bf:d1:ce:8a:88:5c:f8:e9:
ab:a2:b8:31:b1:54:c5:b2:eb:ce:1d:82:82:d3:e3:e7:05:d3:
d2:f9:5f:c5:6f:36:81:81:28:a5:ea:3b:df:de:d9:8e:8a:4c:
bd:db:fc:2b:97:0b:fe:da:92:10:32:a6:ed:17:13:59:b0:4a:
85:6e:67:4b:c3:ce:b8:e1:20:2e:d4:43:53:9e:70:4b:f5:6c:
c7:7b:bb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:31 2026 by rpki-client