Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
File: s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json)
Hash identifier: H8jxAv3BNpm111R7fds9SXFUmWiR5EoMANQ+zH4leRc=
Subject key identifier: B2:31:16:D0:3D:3B:41:57:7B:F8:65:D8:25:E1:C9:96:C9:1D:DF:39
Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
Certificate issuer: /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Certificate serial: 019CAC10519FAB825567EC2D42CE74ADEF09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 01:01:16 +0000
Manifest this update: Mon 02 Mar 2026 01:01:16 +0000
Manifest next update: Tue 03 Mar 2026 01:01:16 +0000
Files and hashes: 1: BSBTdISOwUSk76V2qhorPXUYcls.roa (hash: gMCNavqIUpRgqrn5vcMqwPcSr1Q6xSaeOjz/QGd0jJc=)
2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: e8c8m1c6gutQPX7Qy1EuNkesp3PZ50QCueoK71r1cMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:51:9f:ab:82:55:67:ec:2d:42:ce:74:ad:ef:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Validity
Not Before: Mar 2 01:01:16 2026 GMT
Not After : Mar 3 01:01:16 2026 GMT
Subject: CN=b23116d03d3b41577bf865d825e1c996c91ddf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:06:34:c7:cb:0c:82:91:a1:04:03:55:a3:93:
e4:46:07:46:24:01:27:43:0b:ed:5b:21:e4:79:cd:
ae:0f:7f:7e:ad:e0:19:13:9b:a3:53:0c:8e:2c:84:
55:0a:69:eb:2d:e2:d7:4a:0a:05:2b:1a:42:81:79:
53:2f:1d:f9:6c:3f:41:76:1f:1f:28:2f:69:c6:73:
d7:5a:12:8d:84:2c:c9:75:8e:c8:a1:24:6e:12:34:
0f:75:c4:04:43:f5:97:5c:d9:46:9b:fc:fb:97:de:
f7:b6:73:c2:f0:dd:8d:55:40:d3:48:7e:ff:9d:0b:
9f:70:a3:17:8d:24:87:98:7c:e9:a3:d0:65:1f:93:
fd:46:67:cf:1a:3a:55:ca:40:59:71:12:df:a8:a9:
8c:19:54:33:ef:cf:d9:32:19:2e:e8:73:70:02:37:
c8:43:c7:73:52:e9:52:bc:72:32:9a:a4:90:31:a0:
5b:e7:cd:4e:1b:d9:20:cd:04:7f:2b:db:11:0d:e5:
47:9d:b2:c7:9d:b4:3c:8e:0c:ba:2c:4b:09:2e:00:
bf:f1:5c:39:a9:16:ba:11:6f:86:b7:1a:00:a4:0f:
bf:1f:0e:45:6c:11:44:b6:47:04:37:d6:a5:b4:78:
f7:9c:2b:b2:a8:36:f7:5f:c5:b2:48:f5:60:4f:ab:
20:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:31:16:D0:3D:3B:41:57:7B:F8:65:D8:25:E1:C9:96:C9:1D:DF:39
X509v3 Authority Key Identifier:
keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:85:b4:5b:1b:e9:b8:46:62:cb:78:69:0b:c3:bd:c4:21:fd:
af:07:f3:31:6f:cf:1e:5b:9e:af:fc:73:b9:d2:d4:b3:82:a6:
96:42:09:d5:b2:45:e7:c3:63:9f:f8:c2:09:ac:72:76:3c:77:
12:fd:4c:00:0e:62:8d:cb:2b:a3:fd:81:15:e1:d6:f3:3b:54:
33:dc:9f:b8:e7:4e:5f:5b:2b:9a:60:d0:80:87:83:dd:92:ed:
f2:96:dd:39:5b:f8:fa:47:85:a9:2b:0b:a4:e4:5c:c6:91:13:
7a:5f:f4:01:84:a4:0b:1c:66:57:5c:64:d4:48:99:92:be:32:
cc:da:86:49:50:57:f0:52:aa:9a:47:98:67:1f:0b:41:e8:a5:
93:d0:20:4a:4a:da:7f:41:3e:2f:94:66:22:b8:0d:2c:28:36:
61:9d:f8:31:e7:66:c7:87:f6:d0:f1:05:d7:a6:cd:eb:ea:d6:
86:57:14:17:26:c5:da:a9:b5:33:96:9b:0e:9e:d2:70:a0:98:
44:2b:e6:c0:e9:81:42:c1:bf:17:90:cd:71:b4:f9:5a:ae:9a:
d2:8d:88:18:23:85:9b:d9:a7:23:91:e2:df:05:96:c6:84:01:
2e:3a:40:f4:34:8d:7d:e0:57:78:96:d9:fa:34:6c:ef:d0:5f:
e3:03:db:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:59:12 2026 by rpki-client