Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
File: 7-aRQnxuQYBvbOseIYp9xjIP3u0.mft (raw, json)
Hash identifier: GQkyAPsX39JaL0A0Uw4ELW2AxieRA/KGU0fqMC5gn8I=
Subject key identifier: 61:35:12:B3:C8:EE:AD:73:95:96:1F:34:6F:1A:B8:3F:0B:C2:98:74
Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
Certificate issuer: /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Certificate serial: 01A0D9170165594EAC06755E936FB6D34D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
Manifest number: 1A75
Signing time: Fri 25 Sep 2026 15:02:38 +0000
Manifest this update: Fri 25 Sep 2026 15:02:38 +0000
Manifest next update: Sat 26 Sep 2026 15:02:38 +0000
Files and hashes: 1: 7-aRQnxuQYBvbOseIYp9xjIP3u0.crl (hash: G22dwRPIXc8AP8ErG+GsG3qdwhAi0WHqmsmSfOmvGzY=)
2: oUHh0fasEsq5w1CCMpfcHZtBRD4.roa (hash: UjTvz3EvpJQa3UXT8srfAji/9iKr5LpXON0y3SlaisY=)
3: y5NcApjS5_rDCgexUqkW-sOr7LA.roa (hash: iNlwoFrzX2UsLRpZnY8/tJMxzCRcasSdqgo0ouKBIzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:01:65:59:4e:ac:06:75:5e:93:6f:b6:d3:4d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Validity
Not Before: Sep 25 15:02:38 2026 GMT
Not After : Sep 26 15:02:38 2026 GMT
Subject: CN=613512b3c8eead7395961f346f1ab83f0bc29874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ae:7b:71:d8:30:ef:0d:0f:6c:b7:9a:61:c9:
c5:65:41:eb:8f:f0:3f:80:92:8b:6b:50:28:c6:f5:
fd:5b:02:0c:f6:b6:de:7b:37:8b:01:01:61:ee:5c:
a1:4c:ee:75:f7:74:50:d8:1f:47:90:e8:87:b9:89:
b0:42:c9:54:f6:95:94:9b:8f:ab:22:ec:6e:21:6f:
4c:a8:34:e6:3c:3b:4a:64:f7:4f:83:55:5b:e5:6f:
84:41:25:72:1d:da:6d:bc:ba:2a:36:ba:07:53:1a:
73:27:b9:4b:68:e3:17:41:8b:fb:d3:e6:7c:9e:45:
91:c1:a1:4a:1d:33:b9:78:62:03:f6:d8:94:f2:3c:
ab:2e:93:35:53:6b:53:f2:a6:f8:63:8e:3c:d5:02:
c9:52:85:f2:c9:43:a5:92:93:52:f2:e6:8f:c1:0c:
bd:12:bf:d1:10:b2:8f:f2:18:f7:22:79:a1:c8:f9:
26:d1:83:81:bc:71:d0:55:e0:f2:0c:e3:b7:38:ce:
7d:a7:ca:e9:1d:d6:4e:24:44:14:8a:11:b0:ad:73:
3c:14:5f:65:23:1d:56:89:c2:df:52:ca:12:ab:d4:
1f:08:8c:a6:87:a0:e4:29:8d:97:a5:9d:5f:da:18:
01:e6:c4:dd:1a:cc:5c:b3:a4:ee:e6:22:59:41:e3:
b7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:35:12:B3:C8:EE:AD:73:95:96:1F:34:6F:1A:B8:3F:0B:C2:98:74
X509v3 Authority Key Identifier:
keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:79:d1:cd:27:6f:1b:59:ed:1d:77:49:6c:08:7c:6d:ee:c9:
3d:fb:9c:63:c5:96:3a:13:dc:7c:18:4b:5b:e7:1e:f4:71:9b:
b5:d3:91:93:64:7e:b3:00:88:9e:79:d9:22:4c:26:37:64:4c:
4c:ff:9f:cf:7b:13:c1:7e:ff:2b:81:a5:61:f0:f1:b2:9e:b1:
39:13:35:ec:d0:7e:0f:9a:ef:25:de:d4:17:59:27:ed:d2:12:
04:fd:74:5a:87:0a:ce:0e:a5:0e:7d:ce:06:f3:64:ef:ad:7f:
62:31:e0:3f:f5:24:38:1d:f8:33:89:0e:0b:71:c1:fd:f2:2b:
90:65:6c:7b:33:cf:a6:5b:53:4c:80:a5:97:ef:b9:b5:1b:ea:
90:a7:81:77:67:d2:47:70:3e:57:35:55:26:61:0a:21:3b:1a:
d9:48:14:8f:4d:74:c1:80:82:b8:9e:09:85:51:4e:13:f3:f1:
66:c7:97:ff:81:72:b4:66:c5:4b:55:57:59:df:c0:37:16:a5:
73:23:7b:d7:09:78:d3:b4:a5:9e:15:68:10:4e:31:af:4a:5e:
d4:82:a1:32:92:8e:f4:db:b5:ed:52:e0:b1:7d:53:fc:df:21:
4b:d9:11:8e:9a:09:1a:49:1c:95:de:91:ed:62:90:04:59:dd:
04:a4:3f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:41:26 2026 by rpki-client