Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.mft
File: s7WnVE-7mHmAo_8ccevz-xz2rJ4.mft (raw, json)
Hash identifier: Hhd2+JnGbqtlutM6fHvKplTlzA3Bpd6S/B4k04KjsXo=
Subject key identifier: 10:A9:B3:F3:B0:31:24:06:9D:98:B3:0D:66:E5:AA:4F:B2:36:A1:42
Authority key identifier: B3:B5:A7:54:4F:BB:98:79:80:A3:FF:1C:71:EB:F3:FB:1C:F6:AC:9E
Certificate issuer: /CN=b3b5a7544fbb987980a3ff1c71ebf3fb1cf6ac9e
Certificate serial: 01A0C47BA5DC0808F77C5F4D82924F42A7F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7WnVE-7mHmAo_8ccevz-xz2rJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.mft
Manifest number: DF
Signing time: Mon 21 Sep 2026 15:00:32 +0000
Manifest this update: Mon 21 Sep 2026 15:00:32 +0000
Manifest next update: Tue 22 Sep 2026 15:00:32 +0000
Files and hashes: 1: AlGAx9Fl6hfEZYbR82KN63CXdsA.asa (hash: dmP6VBHZrQsaHkli3FETSb10i/VF3suE+WLsSAtxktk=)
2: CJWICYUF8PQfPfv_l-YsbRABMGA.roa (hash: ckHVpf/nWip1+cSgGyvEj2vXDYp/OYjzyt+VU9SRBuw=)
3: s7WnVE-7mHmAo_8ccevz-xz2rJ4.crl (hash: dv6iaVzTpe5i+maI7wSsgryn0Tv8OOHHa2gOyto4UqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7WnVE-7mHmAo_8ccevz-xz2rJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:a5:dc:08:08:f7:7c:5f:4d:82:92:4f:42:a7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b5a7544fbb987980a3ff1c71ebf3fb1cf6ac9e
Validity
Not Before: Sep 21 15:00:32 2026 GMT
Not After : Sep 22 15:00:32 2026 GMT
Subject: CN=10a9b3f3b03124069d98b30d66e5aa4fb236a142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:cc:09:76:6d:a8:21:22:23:9c:12:00:e0:
c5:da:43:1c:c9:5c:8b:2a:af:9b:78:ad:a9:c2:fb:
d4:fc:2a:f3:89:c6:a4:86:5f:da:2c:34:e9:8d:59:
09:41:82:a2:09:31:c1:75:86:2a:0b:aa:4a:e2:80:
63:e8:df:c2:c1:67:6d:da:09:0f:c5:d7:61:df:77:
0f:2f:42:56:ed:ed:82:d8:62:a0:1c:ce:ff:95:b0:
0c:19:92:7d:8c:ac:18:08:04:58:f8:2c:09:bc:b2:
47:5e:2c:86:ef:52:83:be:79:81:6c:74:f2:23:a9:
37:fe:7f:a0:6f:ad:7d:be:58:94:f3:a9:36:8a:8f:
ae:6e:58:80:b5:b1:8c:57:aa:96:21:51:86:a3:d5:
b5:c8:07:0c:55:b6:62:77:10:12:91:fa:ba:bf:75:
6b:53:16:cc:87:b1:be:23:38:0f:1c:48:6b:95:1b:
79:2e:7c:aa:40:fb:42:0e:b3:5d:1d:1f:08:2e:ea:
e6:7f:39:87:47:a2:89:5b:2b:40:7b:74:31:77:0e:
9d:4e:47:d3:cd:fd:90:5d:c4:91:5f:4d:3c:9c:b4:
7e:00:55:a5:84:ed:59:c9:88:98:45:75:a6:37:98:
62:04:55:53:ef:0e:8b:87:c3:8e:ab:86:0a:4a:92:
a0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A9:B3:F3:B0:31:24:06:9D:98:B3:0D:66:E5:AA:4F:B2:36:A1:42
X509v3 Authority Key Identifier:
keyid:B3:B5:A7:54:4F:BB:98:79:80:A3:FF:1C:71:EB:F3:FB:1C:F6:AC:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7WnVE-7mHmAo_8ccevz-xz2rJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f5:18:e1:f3:39:f1:d4:34:5b:70:40:c1:a2:97:8f:90:f3:
58:0a:17:6e:4b:18:1d:be:58:c9:7a:47:31:69:66:cd:ae:94:
73:7c:ca:44:93:40:63:2a:c2:0c:60:51:8d:98:5c:23:00:0f:
53:99:12:fe:3f:ca:ac:c6:3b:12:ef:26:fd:4e:83:a3:a6:21:
b3:c9:c6:95:c6:d6:54:8d:88:6e:3b:a7:b8:3b:3c:1d:29:fd:
e7:ab:1c:eb:1b:7e:25:e8:35:7c:a2:e2:89:e2:13:89:2b:26:
7e:56:71:f7:fe:5f:a6:4a:df:78:b4:48:1e:37:61:77:18:d1:
89:1d:21:de:04:18:fc:54:88:28:99:79:fc:d0:60:d8:78:88:
65:4e:5a:dc:a5:10:6a:68:4f:84:fd:1a:99:81:9e:9e:04:b5:
3f:26:41:78:2a:3d:c4:c3:af:b9:b1:35:f1:2a:1f:3f:80:53:
45:a9:57:30:e8:3b:96:0f:39:3a:0f:be:13:a7:42:e9:fb:1f:
5b:fd:f7:68:a9:f9:18:4b:c5:70:7d:fc:36:4a:1e:25:2d:5b:
bd:c9:a7:17:15:c9:bc:70:b8:0a:1e:29:99:93:90:59:0d:1e:
6b:48:ad:04:0b:37:b0:73:63:32:c9:50:6c:99:46:f0:e3:e7:
40:a3:d6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:21:12 2026 by rpki-client