Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
File: 7qq8oRa05zqZRKuXAs-YZleANYA.mft (raw, json)
Hash identifier: ZKHnVdYOPdzw+jL8lX0YWsvHfU5eGD63ZEcQ3wslYj4=
Subject key identifier: FF:14:59:4C:21:49:E9:E5:B7:B3:7B:5B:41:BD:0B:D4:65:47:AD:09
Authority key identifier: EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
Certificate issuer: /CN=eeaabca116b4e73a9944ab9702cf986657803580
Certificate serial: 019D262895088434AC70096ADBE12E9A6EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
Manifest number: 04CF
Signing time: Wed 25 Mar 2026 18:01:26 +0000
Manifest this update: Wed 25 Mar 2026 18:01:26 +0000
Manifest next update: Thu 26 Mar 2026 18:01:26 +0000
Files and hashes: 1: 7qq8oRa05zqZRKuXAs-YZleANYA.crl (hash: c9saMdNQnkgGAt9t4vN/tqj7RMBieYVIZzkW2hMwVcQ=)
2: QsP30C5AyyrplhJOQtwBFKHc2pI.roa (hash: 1rl1zPT5VgUb8N7x1I4JvxDOw2OsxnlXtnTYVUm9hGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:95:08:84:34:ac:70:09:6a:db:e1:2e:9a:6e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeaabca116b4e73a9944ab9702cf986657803580
Validity
Not Before: Mar 25 18:01:26 2026 GMT
Not After : Mar 26 18:01:26 2026 GMT
Subject: CN=ff14594c2149e9e5b7b37b5b41bd0bd46547ad09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c5:d6:d5:b9:95:c0:ac:69:ba:88:77:24:d3:
56:43:99:7e:39:31:96:3f:4f:4e:19:06:29:6d:2f:
b4:ed:4c:7c:fb:59:d3:53:a2:33:47:84:f6:2b:3b:
29:3d:aa:cf:7d:76:92:63:47:9f:02:86:ff:12:7e:
92:e7:f0:55:94:74:d2:c5:84:12:99:43:83:66:3e:
11:03:d2:e6:6a:c5:8c:89:23:f1:a8:6c:4c:ee:00:
93:36:cf:bd:ab:dc:b9:82:e9:1f:78:27:d2:d0:f2:
29:cb:19:b6:9f:13:71:15:a8:70:39:2c:7d:d0:47:
e3:d0:c8:db:01:22:5d:39:ff:23:b6:92:1f:5c:0a:
f1:9b:85:b2:c6:22:2d:46:26:65:4e:63:c2:06:94:
a8:b8:41:46:00:f2:73:4d:7d:c0:1d:0d:61:9e:39:
21:e2:3c:e1:65:25:b8:0a:c9:0f:c8:6a:d7:27:b8:
bc:62:28:ed:5e:d4:71:b9:b9:55:44:97:b1:d8:02:
d7:fb:fe:e8:75:32:d8:ec:0f:ab:45:2d:06:fc:a5:
a3:3b:fb:0d:54:2f:dd:75:80:b8:78:d9:33:cf:13:
38:d7:1a:45:39:81:5b:0e:3d:a4:24:c5:df:26:4b:
9b:5f:06:ea:87:c7:fe:04:0f:26:2a:c9:3c:a9:29:
7d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:14:59:4C:21:49:E9:E5:B7:B3:7B:5B:41:BD:0B:D4:65:47:AD:09
X509v3 Authority Key Identifier:
keyid:EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d6:df:d8:ba:c5:9a:5c:1d:18:ed:d6:0c:a2:75:6b:91:cb:
1a:a2:eb:22:92:a5:ca:89:65:3a:9d:39:69:b0:cc:ca:01:a1:
52:d2:61:cd:66:4d:85:5a:ad:4b:5e:6e:c8:16:8f:3f:c9:a1:
fd:d4:61:08:ba:e6:68:72:20:2e:e0:ee:25:1a:bc:0f:dd:58:
3f:e4:65:7a:ee:67:25:4e:d9:d3:3b:79:d2:b3:eb:e1:ff:26:
6a:b6:bc:8f:80:ba:71:5e:9d:a5:20:53:bb:d3:86:97:6d:41:
99:2e:fb:5f:cc:e2:11:a8:ff:2a:7f:de:29:4b:39:40:b7:a8:
55:a9:f2:1d:34:0b:41:24:ee:71:40:20:08:ba:de:db:c3:ee:
3b:eb:84:a9:2e:51:e8:00:37:48:c0:7e:55:f6:e9:7a:16:0d:
b7:07:48:c2:75:5e:4a:41:cb:c9:68:5d:07:9a:6c:fd:96:ad:
9d:d8:af:bc:be:c9:53:fb:23:db:32:b0:13:ab:0c:21:6b:65:
0e:c8:e1:ea:7d:33:56:75:75:57:53:dc:12:96:c3:7e:72:c8:
86:37:39:22:13:70:0b:47:ad:bd:00:3d:59:bb:b8:82:58:bb:
9a:4a:27:95:2b:54:e1:2b:3d:85:1c:3d:8f:c5:4f:5a:96:61:
ab:c2:e7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:30 2026 by rpki-client