Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
File: 7-aRQnxuQYBvbOseIYp9xjIP3u0.mft (raw, json)
Hash identifier: hqs+FJ9KErFtItvGWUFshc/i0FAu41Ow/wP4AGMwU94=
Subject key identifier: 9B:6B:67:84:1B:35:A9:93:C6:FF:EE:EE:42:58:B7:84:C4:F0:80:9E
Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
Certificate issuer: /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Certificate serial: 019E1DFDE36CC47DB31044E420AA67FF1738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
Manifest number: 190B
Signing time: Tue 12 May 2026 21:00:38 +0000
Manifest this update: Tue 12 May 2026 21:00:38 +0000
Manifest next update: Wed 13 May 2026 21:00:38 +0000
Files and hashes: 1: 7-aRQnxuQYBvbOseIYp9xjIP3u0.crl (hash: RbIiYjUzGArIZWfVjwTBPElTdAhcKFoc2mdWPXdeTsA=)
2: oUHh0fasEsq5w1CCMpfcHZtBRD4.roa (hash: UjTvz3EvpJQa3UXT8srfAji/9iKr5LpXON0y3SlaisY=)
3: y5NcApjS5_rDCgexUqkW-sOr7LA.roa (hash: iNlwoFrzX2UsLRpZnY8/tJMxzCRcasSdqgo0ouKBIzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:e3:6c:c4:7d:b3:10:44:e4:20:aa:67:ff:17:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Validity
Not Before: May 12 21:00:38 2026 GMT
Not After : May 13 21:00:38 2026 GMT
Subject: CN=9b6b67841b35a993c6ffeeee4258b784c4f0809e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ea:62:d4:f1:be:f9:ac:4d:ff:c7:02:63:11:
a0:1c:7e:fd:db:07:77:c0:b4:ea:bb:e1:78:6a:78:
01:ff:d3:8d:4a:71:45:80:30:a3:ac:a2:7f:87:11:
40:96:e9:dc:69:de:45:a1:db:6c:43:72:9a:99:c8:
7d:1f:0c:13:2b:a7:6e:8e:82:a6:ce:a8:2b:d3:ce:
7f:91:92:a1:9e:b9:76:c9:0f:0b:ec:72:de:1a:a4:
9f:5a:51:d1:5d:78:97:5d:ef:7e:86:62:5f:74:4f:
00:69:1f:18:c0:f9:88:ed:d3:e2:74:0c:61:a9:60:
ae:e8:87:a3:5e:f7:67:a1:9a:3c:4c:d6:10:13:b3:
00:2e:0c:a4:4c:d8:9a:b6:96:77:6d:b4:85:26:f1:
e8:f0:a7:7e:b5:3a:86:0f:ae:0a:f6:4c:d1:52:bc:
d7:04:a5:fd:13:33:91:3b:74:36:18:1b:a7:f2:fd:
00:22:3a:39:05:f3:57:47:8f:89:bb:d1:37:06:01:
f0:62:08:54:3c:53:b7:3e:f7:e9:ac:58:a5:2d:fe:
a5:28:4f:1c:1b:ce:40:d4:04:7f:fc:b8:91:43:23:
09:76:9a:b7:0a:47:28:62:bc:94:aa:58:ce:c4:8b:
a8:36:fd:d2:39:4f:3a:f0:93:1c:99:a8:80:69:d0:
c2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6B:67:84:1B:35:A9:93:C6:FF:EE:EE:42:58:B7:84:C4:F0:80:9E
X509v3 Authority Key Identifier:
keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1d:4a:cf:a4:dc:36:a2:3a:e5:6d:2b:02:03:f2:3f:11:04:
98:07:b5:c0:85:36:4f:a0:ef:e6:aa:3a:41:03:5d:67:30:14:
b8:00:f8:87:ca:41:26:f8:ee:a5:41:09:b2:9b:9c:0a:3f:ff:
0b:20:4e:57:52:5c:55:f7:e5:c6:81:e6:86:ff:2c:59:93:af:
c4:79:19:b5:54:96:00:f5:ab:6a:bd:57:97:32:31:80:c1:33:
86:7a:db:6b:81:07:fd:20:0d:ff:44:46:57:c3:64:ef:f5:69:
79:7e:46:53:f0:2e:3d:c1:fa:3f:ea:2d:c1:c8:49:b3:75:9f:
06:ad:7c:4b:fa:19:c6:7a:28:18:3c:2d:63:b4:42:15:0d:7c:
83:15:87:7e:1c:80:a5:ae:d9:fb:03:db:12:bd:64:51:2e:98:
21:8e:e8:f1:3a:b3:e9:39:40:0b:35:b5:61:9a:60:e3:86:b0:
0c:84:82:0a:39:a8:5c:2a:ba:34:3d:49:3b:99:79:29:4c:39:
6f:f0:6a:d2:2e:12:0f:04:a2:a5:39:6f:e3:e7:90:28:a8:d0:
31:b1:7f:aa:cd:8c:06:3e:7f:22:4a:94:46:ff:6a:bb:e6:d8:
8d:49:f2:8c:5c:f2:82:fc:21:b4:97:ba:ec:d6:3e:e8:6d:c8:
49:2b:b6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:28 2026 by rpki-client