Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
File: 7-aRQnxuQYBvbOseIYp9xjIP3u0.mft (raw, json)
Hash identifier: F/hb8upVmkpNlje493XTDhiN4ZArJ/QeWj1/GQ24QKU=
Subject key identifier: 50:43:1B:E9:01:56:BA:F6:59:C6:EF:CA:F7:0E:2C:FC:79:B6:2F:97
Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
Certificate issuer: /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Certificate serial: 019D28BB7166AE64D56A8BFDBD9EF0780F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 06:01:06 +0000
Manifest this update: Thu 26 Mar 2026 06:01:06 +0000
Manifest next update: Fri 27 Mar 2026 06:01:06 +0000
Files and hashes: 1: 7-aRQnxuQYBvbOseIYp9xjIP3u0.crl (hash: cZjz060b3Y1QW/2DcYKrfrT0T32isjRzk63x6vVJfBE=)
2: oUHh0fasEsq5w1CCMpfcHZtBRD4.roa (hash: UjTvz3EvpJQa3UXT8srfAji/9iKr5LpXON0y3SlaisY=)
3: y5NcApjS5_rDCgexUqkW-sOr7LA.roa (hash: iNlwoFrzX2UsLRpZnY8/tJMxzCRcasSdqgo0ouKBIzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:71:66:ae:64:d5:6a:8b:fd:bd:9e:f0:78:0f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Validity
Not Before: Mar 26 06:01:06 2026 GMT
Not After : Mar 27 06:01:06 2026 GMT
Subject: CN=50431be90156baf659c6efcaf70e2cfc79b62f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a3:e9:1e:a3:c0:e1:1e:a1:1b:93:8e:09:15:
83:6a:31:84:bb:4b:0f:33:90:f0:e1:22:1c:6a:57:
ab:f5:e7:9e:50:f4:fb:5b:61:95:cf:6d:bb:33:a9:
68:5d:8a:d9:d7:9e:51:10:11:c2:57:b1:ad:91:21:
38:f8:df:7b:7c:25:51:91:2c:73:b0:a8:6f:2d:50:
8b:f9:bf:3a:eb:4a:04:43:5f:55:9b:5d:0f:9d:6f:
ea:a9:2d:22:f6:df:4e:75:5c:2d:36:2d:d3:8e:5a:
d3:04:45:fc:4a:a2:9d:bc:f5:18:99:49:0b:bd:70:
fc:31:9f:59:48:9c:5d:81:ce:89:e5:75:44:e3:bb:
ff:db:88:77:02:27:e3:e1:ca:4a:5a:3b:cf:b3:92:
d4:36:b1:67:ec:db:69:79:90:c4:04:0b:fd:ed:4b:
09:12:04:5e:d6:c3:fa:99:d6:b8:00:b7:7b:68:b9:
5e:aa:87:46:49:d9:65:79:40:8c:eb:6f:d6:43:0a:
d4:dd:5c:61:c7:43:3f:ea:6c:39:d6:43:a4:d8:a6:
90:18:e1:32:f4:17:26:84:f2:14:06:6c:01:57:48:
9c:6f:ae:e6:c9:64:15:41:c2:57:89:4c:b7:ac:5a:
56:55:63:22:5f:a5:4d:fe:1d:9c:da:e3:bd:1d:d2:
be:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:43:1B:E9:01:56:BA:F6:59:C6:EF:CA:F7:0E:2C:FC:79:B6:2F:97
X509v3 Authority Key Identifier:
keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c5:01:07:ab:2e:90:f9:2a:a6:1c:c6:38:bf:c8:e6:d3:2b:
d8:e8:cc:77:44:5d:b0:a1:bf:91:cd:59:cf:42:07:77:e6:16:
22:42:ad:e0:68:d6:f4:61:f9:5e:52:1b:21:55:80:e9:d9:d8:
68:62:9a:1c:57:5c:a5:cf:3a:36:a2:04:87:76:5d:ed:5d:1e:
20:32:94:c5:10:5f:10:f7:c0:56:27:59:3b:0f:14:7d:a1:c5:
75:b2:db:8b:b7:54:4b:31:5c:2c:e6:77:dd:96:b2:1e:70:13:
22:ed:21:71:c2:78:d6:f9:38:9a:e6:90:12:a6:47:2e:5c:6b:
85:04:f6:ac:40:22:6b:ae:5b:7d:b0:e3:c5:06:5f:d8:16:3e:
27:35:5d:47:f8:e9:d7:0a:f0:3a:2c:e2:16:ac:7d:56:74:1d:
37:0d:d6:7c:91:f8:05:80:b8:7d:4d:37:fb:3f:59:e8:a1:9f:
b9:bf:39:a5:98:5f:03:c1:0b:49:39:d3:1a:4e:d3:ad:f3:85:
f6:8f:37:91:a6:28:75:85:40:7e:2d:7c:86:10:26:39:4f:07:
8d:b2:48:65:3d:75:05:96:b9:0b:e3:d3:fa:46:6e:50:f1:92:
b5:24:07:94:c7:18:78:f1:43:05:87:b7:1b:09:e6:3a:38:d0:
a3:a5:e4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:00 2026 by rpki-client