Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
File: 7aJsQI_Ge3UnNMyZfzYw269vYG8.mft (raw, json)
Hash identifier: eqwiAC3Lz7sfoBzE1qLVOfXqxn90WityRbqvq4lZSVw=
Subject key identifier: 10:1A:B1:27:A8:8A:81:92:BF:8D:50:BC:34:20:B1:58:2F:8E:07:E3
Authority key identifier: ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F
Certificate issuer: /CN=eda26c408fc67b752734cc997f3630dbaf6f606f
Certificate serial: 019D25F11BD30CB20D587C18EA6B5281FB0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
Manifest number: 0CFE
Signing time: Wed 25 Mar 2026 17:00:51 +0000
Manifest this update: Wed 25 Mar 2026 17:00:51 +0000
Manifest next update: Thu 26 Mar 2026 17:00:51 +0000
Files and hashes: 1: 7aJsQI_Ge3UnNMyZfzYw269vYG8.crl (hash: WyMTcA2bi+3kjbNHTAH56lbTlQk7+Ojx6CZBN7W3KvU=)
2: FPqdZZMf-fAPrlSDgNZhOHhHZxU.roa (hash: 3JadQ2sVOsTDIpy9yP5IPOoHewm11RGCjoRS/5qYd6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:1b:d3:0c:b2:0d:58:7c:18:ea:6b:52:81:fb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eda26c408fc67b752734cc997f3630dbaf6f606f
Validity
Not Before: Mar 25 17:00:51 2026 GMT
Not After : Mar 26 17:00:51 2026 GMT
Subject: CN=101ab127a88a8192bf8d50bc3420b1582f8e07e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:9a:fa:7d:ef:6d:bf:4a:10:aa:c5:4f:b9:
05:36:78:3d:ab:11:a9:23:ae:33:41:8e:8b:df:e5:
4d:a0:96:41:84:cf:d6:2a:0e:ad:05:07:e4:65:25:
51:64:ee:af:82:3a:0b:b9:90:c5:f2:b3:95:a0:cf:
97:f2:3f:dd:34:54:9c:4b:f6:a2:04:88:12:64:4c:
d6:04:00:fd:9a:46:45:f4:e4:fa:e3:6e:29:3a:c5:
e5:dc:7e:e2:ee:38:88:be:d4:9c:6a:d4:88:7e:93:
07:36:bb:a9:ce:f4:09:92:b7:35:39:86:4f:09:4e:
98:be:9a:07:7a:47:d6:ce:1a:0a:c6:ca:4e:3b:ad:
40:5e:75:46:d4:c6:bd:73:02:c1:c8:c0:26:af:bc:
fe:f6:0a:29:f5:85:fe:96:68:01:7c:91:85:ef:69:
76:87:5b:78:f3:18:5d:af:c3:24:3a:fe:78:6d:c8:
73:09:9f:82:df:52:7c:7d:ef:74:a6:f7:55:da:45:
4b:a5:49:b5:5e:27:14:e9:6c:a2:4a:65:62:d6:c2:
21:52:a4:31:24:e8:91:66:5a:55:04:21:8b:a1:8d:
f2:69:15:07:1b:4a:e6:72:40:be:07:5f:24:ab:06:
42:f3:d2:a7:02:dc:3c:54:a2:85:dc:2e:c0:b4:61:
82:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1A:B1:27:A8:8A:81:92:BF:8D:50:BC:34:20:B1:58:2F:8E:07:E3
X509v3 Authority Key Identifier:
keyid:ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:9b:e2:a3:44:8b:14:8c:20:b6:60:22:cd:0c:bc:30:72:5a:
e4:6f:d0:8d:10:0b:4b:78:04:78:0b:f4:54:c9:9d:c7:3c:f5:
fa:1c:24:a5:3a:e6:8c:3a:32:7a:d0:b0:86:7b:1f:ce:87:55:
5f:92:32:6f:a2:68:c2:5b:8a:65:a3:91:f2:3c:4d:96:ea:ed:
ae:1d:89:14:9f:b8:5a:f1:11:2b:3c:d3:8e:5a:5b:23:a1:df:
88:c9:50:c8:69:a6:44:b6:d0:63:4f:e8:a0:90:2f:03:7f:79:
52:d4:b6:2e:09:01:f3:ea:16:91:14:ac:69:21:d6:df:a1:db:
be:ed:1d:0a:df:70:97:0f:91:45:f0:d3:58:c8:14:96:e4:5f:
3e:a1:35:46:22:8c:9c:7a:47:2a:5c:51:09:3c:c5:89:1b:74:
ae:74:e4:5e:59:90:f3:69:3e:7d:2c:fb:52:06:6b:15:25:d1:
56:cf:1b:19:bb:6b:7e:cb:6b:9c:20:45:47:6d:f5:a5:86:76:
71:1d:c0:37:56:68:99:54:c1:8d:18:0b:3c:ac:71:a9:27:63:
a6:89:1d:17:d2:77:59:26:d7:fd:7e:53:73:18:43:e1:96:e9:
02:57:bc:26:16:29:ab:62:f1:32:0f:0b:92:31:30:30:f3:f2:
ba:57:b2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:36:49 2026 by rpki-client