Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
File: 7qq8oRa05zqZRKuXAs-YZleANYA.mft (raw, json)
Hash identifier: TDXc9VhzF2Am/C5f83hS1mcAmAIPsN2JZFts97ENm08=
Subject key identifier: 09:7D:16:24:60:A1:2C:F1:2F:26:7E:D4:9B:ED:DD:C8:64:DF:C1:74
Authority key identifier: EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
Certificate issuer: /CN=eeaabca116b4e73a9944ab9702cf986657803580
Certificate serial: 01A0CEC825DA6D2F553B3163447056C7EEC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
Manifest number: 06B4
Signing time: Wed 23 Sep 2026 15:00:18 +0000
Manifest this update: Wed 23 Sep 2026 15:00:18 +0000
Manifest next update: Thu 24 Sep 2026 15:00:18 +0000
Files and hashes: 1: 7qq8oRa05zqZRKuXAs-YZleANYA.crl (hash: Y11QVTFXft3h7LWHY9NAXTeGEL7BPvAAfkTD0rSIQr0=)
2: QsP30C5AyyrplhJOQtwBFKHc2pI.roa (hash: 1rl1zPT5VgUb8N7x1I4JvxDOw2OsxnlXtnTYVUm9hGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:25:da:6d:2f:55:3b:31:63:44:70:56:c7:ee:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeaabca116b4e73a9944ab9702cf986657803580
Validity
Not Before: Sep 23 15:00:18 2026 GMT
Not After : Sep 24 15:00:18 2026 GMT
Subject: CN=097d162460a12cf12f267ed49bedddc864dfc174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:69:b5:cc:0d:63:cb:aa:94:c6:98:ee:e7:c8:
53:b9:2b:c9:85:85:c3:4f:08:05:a8:58:80:70:2a:
e2:f4:04:f8:65:44:c8:64:f9:5a:d5:86:31:63:20:
94:ba:9a:06:c5:c0:7f:cb:61:b5:c0:f7:62:07:09:
d4:97:4f:61:3c:07:5c:7e:82:24:fe:d9:34:2f:ea:
ae:33:4e:4e:a4:67:a8:e3:f5:d9:1f:ad:0b:b9:2b:
77:e1:80:d2:d4:91:02:6b:29:d4:81:bd:ea:83:f6:
d4:2a:f1:0e:fd:ef:25:1d:ce:de:d8:9b:b5:0c:bd:
d1:05:ca:97:98:b1:b1:ba:24:ba:dd:98:d7:2d:70:
cd:59:ca:f1:9d:7f:b6:cf:2b:4a:20:ea:52:f1:3b:
17:7a:a5:36:19:55:4a:7a:80:c3:3c:bd:1c:b4:f0:
1e:32:97:19:bc:25:26:71:91:6c:52:a1:44:6d:db:
5c:ea:26:58:3e:61:cd:e1:3a:e3:fa:9d:a9:f1:32:
e2:c5:8a:3e:0d:7d:0c:0b:10:5f:33:20:c1:54:d6:
60:dc:a1:c7:aa:59:41:1c:6b:1a:08:89:58:48:ae:
79:39:47:58:c4:2f:f5:03:6f:93:16:8c:0a:1e:47:
c0:1d:8a:07:ff:62:43:74:8a:29:ed:2c:89:b5:92:
d3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7D:16:24:60:A1:2C:F1:2F:26:7E:D4:9B:ED:DD:C8:64:DF:C1:74
X509v3 Authority Key Identifier:
keyid:EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0a:29:5a:f8:a7:b8:8a:17:d1:f4:90:b7:4e:53:29:74:40:
af:c7:cc:38:08:5c:71:f4:20:3a:05:36:08:48:d0:a1:f3:8a:
37:6d:bf:1d:ce:15:db:ab:26:3a:89:16:0b:30:55:a7:2b:70:
f4:83:f2:b3:77:c2:a2:10:f5:43:70:f3:26:e3:f8:3b:26:f5:
58:e0:52:46:68:4c:b4:de:d6:f2:a2:9c:b8:23:45:89:23:a7:
72:9b:3e:2a:f8:dc:a0:82:57:7e:53:b4:6f:9c:9c:da:38:4c:
80:9e:b0:3c:94:fb:fc:ce:3e:94:2c:49:e0:3c:28:44:81:df:
08:6e:90:70:d3:e0:9c:67:e8:ec:fa:2e:40:06:0e:6b:88:b6:
26:bc:d1:73:19:5d:73:6d:3a:d9:cc:3e:09:47:dd:c5:5b:6c:
a9:d1:72:51:de:50:35:32:70:80:5e:ad:27:81:44:09:d3:e1:
95:4b:39:f6:03:80:4b:3b:e7:d7:4a:6b:32:73:05:4a:c2:17:
83:cd:79:60:58:f8:88:8b:74:44:4d:6c:14:4d:12:4a:15:e6:
39:10:7d:13:ab:7c:1c:d1:68:3c:f0:7a:64:9f:7e:24:b1:5a:
bc:cd:75:f6:94:2e:b6:ff:51:f7:93:97:f2:01:33:02:e6:07:
93:20:84:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:50:13 2026 by rpki-client