Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
File: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft (raw, json)
Hash identifier: ZUTmRA5S4qvgOMH7GVSLUwNUSwZXbnntdXXLnKV3Jh8=
Subject key identifier: AA:65:84:2B:9A:10:52:12:68:E3:52:D4:00:89:A3:95:2A:82:3D:85
Authority key identifier: EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
Certificate issuer: /CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Certificate serial: 019E1ED9BB032E1261764EBC7909999557E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
Manifest number: 16AA
Signing time: Wed 13 May 2026 01:00:46 +0000
Manifest this update: Wed 13 May 2026 01:00:46 +0000
Manifest next update: Thu 14 May 2026 01:00:46 +0000
Files and hashes: 1: 2tKSrvE8w4OPUMtHHmn4NBgdIN0.roa (hash: xtQTDappKS+L7HJWwmh8B32VXucrBAKNvYHP3fwsAXE=)
2: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl (hash: 0IH7N1xjOVf+SAjPZBzqnF9/WHTc8dFC+7DUC2Ho3Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:bb:03:2e:12:61:76:4e:bc:79:09:99:95:57:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Validity
Not Before: May 13 01:00:46 2026 GMT
Not After : May 14 01:00:46 2026 GMT
Subject: CN=aa65842b9a10521268e352d40089a3952a823d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ba:c7:e1:a7:66:5b:2e:bc:8f:87:6b:a6:7f:
19:61:84:15:ad:fa:14:83:05:dd:38:fc:c2:f1:ce:
fd:cd:44:d1:f7:56:b7:b1:8d:11:18:9b:e5:ca:03:
ff:45:63:53:f8:a2:19:0c:d5:f5:fd:5d:5d:b9:53:
ae:14:8a:c0:98:70:41:3e:d3:bd:4f:f6:68:18:a8:
e3:89:8c:a4:f6:d0:1d:9b:9c:5d:6d:85:8d:96:c4:
87:28:6b:4b:44:d6:0e:e9:39:ff:ec:2e:fa:05:ef:
da:67:fe:ea:45:e5:e9:d0:4b:95:19:30:c7:a4:85:
7e:83:87:cb:b5:fd:9f:6d:43:0d:c0:41:c2:af:5e:
af:fb:4c:48:2c:3e:72:2f:3c:77:b4:3d:a1:1c:ae:
c9:9d:76:ee:fa:84:6c:8e:4f:6f:04:8c:77:9f:41:
93:bb:b8:a5:37:ea:98:8e:30:a5:11:92:90:f1:ea:
19:bd:af:12:73:94:a9:ca:11:9a:ca:59:9e:66:4c:
d2:24:10:ca:7b:a4:be:e4:93:ff:ff:8d:db:73:e7:
8e:23:ff:6d:96:fb:45:29:62:db:47:0c:03:47:7b:
bd:68:48:d4:b6:9b:b0:dc:43:d1:b8:8d:6e:cc:7c:
91:f9:db:9d:a4:71:d1:74:c0:ce:92:c0:9d:51:a4:
76:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:65:84:2B:9A:10:52:12:68:E3:52:D4:00:89:A3:95:2A:82:3D:85
X509v3 Authority Key Identifier:
keyid:EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:05:84:f6:5b:c6:25:6c:bc:e5:0f:89:be:64:e1:f2:6e:a8:
b0:fb:2d:22:15:33:45:f2:1e:c1:21:88:0b:cd:1f:9a:72:4d:
60:0e:e5:9f:10:bc:3e:f2:8c:05:e9:15:2e:de:f0:c7:96:2d:
e0:8f:9e:40:86:8a:e9:fa:e0:43:72:2f:70:c9:94:f4:87:b8:
58:7e:6d:5f:8c:4a:2a:12:0c:73:40:57:c5:8b:4a:81:49:24:
f7:6a:36:e1:4b:6d:14:56:18:10:7d:a4:e6:09:64:01:04:8a:
5b:59:d6:b6:3d:5f:70:b5:b0:b5:11:0a:21:59:f0:bb:32:15:
1e:b7:15:1a:54:c2:54:c5:4e:01:05:50:87:fe:ee:0c:9c:c7:
74:8b:21:c3:05:1a:43:4b:55:d2:51:19:92:78:e7:4e:e0:d2:
83:d3:40:f7:fe:30:de:0b:5d:d9:2b:a5:f4:0b:96:5b:23:71:
59:25:d0:5b:d7:da:1d:94:9d:61:ce:60:10:00:bd:da:15:b9:
79:1f:81:74:a7:11:9c:9b:b6:41:e4:23:21:f7:67:49:7e:8f:
c0:6d:db:71:73:9f:c1:0c:87:40:b0:9e:55:fc:10:a4:8a:26:
ac:6a:19:a2:71:6e:94:32:f3:c3:c5:2a:14:d0:f5:e2:6a:ca:
d2:05:ef:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:21:14 2026 by rpki-client