Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
File: s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json)
Hash identifier: wI6sgUAPN0Th92KkGSyTgor4pe6DSxBtIfN1kwqiPuo=
Subject key identifier: 41:DE:93:39:7E:3A:9B:DA:0E:7B:4D:33:7B:E7:CA:FE:59:06:61:1E
Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
Certificate issuer: /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Certificate serial: 019DA52F4B83AA99FE8F9EBEB5FA6244B519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 10:00:33 +0000
Manifest this update: Sun 19 Apr 2026 10:00:33 +0000
Manifest next update: Mon 20 Apr 2026 10:00:33 +0000
Files and hashes: 1: BSBTdISOwUSk76V2qhorPXUYcls.roa (hash: gMCNavqIUpRgqrn5vcMqwPcSr1Q6xSaeOjz/QGd0jJc=)
2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: +ofIx25ygSX5D+mKxeWNktkVLk/3Va3pgZgL+UuT+i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:4b:83:aa:99:fe:8f:9e:be:b5:fa:62:44:b5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Validity
Not Before: Apr 19 10:00:33 2026 GMT
Not After : Apr 20 10:00:33 2026 GMT
Subject: CN=41de93397e3a9bda0e7b4d337be7cafe5906611e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:0c:d9:79:2f:52:39:4b:82:38:e9:22:19:
92:c2:8f:f8:ba:63:87:eb:45:f4:21:7c:48:5b:c4:
8b:71:8b:ca:38:12:a0:e1:bc:44:ca:21:cd:84:fd:
ad:58:e4:1b:82:c6:17:59:6a:b1:6d:aa:83:b1:c4:
d3:49:76:fe:65:24:48:e3:86:db:d9:3b:64:36:f9:
e7:c8:81:0e:48:9d:ef:c9:e8:0a:7f:db:23:24:eb:
48:9c:1c:f9:fd:60:fb:8b:c4:99:c3:96:7e:03:f4:
82:86:86:1d:65:0b:a0:ce:4b:b8:72:2b:7e:b1:60:
2c:4f:00:b0:94:6d:3d:87:82:8d:73:c8:7d:9e:1d:
d8:2a:17:14:19:16:21:c8:37:3f:85:4a:49:d2:25:
c7:5f:2b:79:a8:0b:7f:62:34:cd:c3:c9:7e:61:a0:
ff:7b:28:a1:c7:71:a5:66:f7:bb:de:fe:61:ce:a8:
3f:a0:6c:b7:33:7b:14:55:01:d5:60:df:02:13:2e:
af:55:4b:39:d0:46:50:81:c0:99:24:0e:a1:70:49:
29:16:62:42:34:be:b7:28:c1:0c:b2:d0:ae:38:23:
8b:4a:31:79:8b:52:c2:92:82:20:44:6f:a9:7a:53:
4b:7f:9c:3e:93:9f:35:a9:ad:70:da:09:db:64:dc:
74:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DE:93:39:7E:3A:9B:DA:0E:7B:4D:33:7B:E7:CA:FE:59:06:61:1E
X509v3 Authority Key Identifier:
keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:88:62:e6:52:ea:3d:8f:5c:4e:f9:74:38:eb:4d:32:a2:0c:
94:7b:61:9e:e0:60:05:1f:4b:34:25:f7:2f:8e:83:90:e8:5e:
5e:fe:1e:5a:15:a6:cd:37:54:df:79:b3:d9:8d:b3:26:b4:6d:
92:52:b4:9e:e4:db:2f:01:5b:e6:5c:8c:7f:25:80:e8:e8:44:
51:a8:c2:0f:99:02:e9:80:f4:61:dc:90:29:24:7c:06:d8:4b:
1e:f1:eb:c1:01:8b:e8:fa:54:7d:bd:de:0f:16:eb:63:59:58:
6d:8e:46:26:98:15:42:1e:fa:25:ed:82:4b:99:4c:d4:69:83:
e9:82:85:74:78:3a:c3:6b:6d:31:c3:f3:52:ee:1e:16:c9:8a:
f2:da:81:e1:5e:32:52:83:9c:66:08:62:3f:0e:b8:b7:6f:2d:
aa:66:1e:9e:4c:69:a7:fc:f3:46:4a:f5:ff:f0:7e:1b:30:d0:
fd:8e:77:b6:fd:d1:97:78:d4:7e:13:3b:dd:cb:b6:4b:3e:76:
7f:2b:5d:69:a3:16:45:ba:07:53:ec:6b:a5:a3:57:23:b8:02:
4b:c8:8a:94:23:c4:d7:36:de:94:68:87:e9:58:b1:ad:3f:6c:
33:9a:e3:57:3c:15:94:82:dc:81:d0:99:73:bb:50:d5:2c:c5:
96:2d:ea:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:29:22 2026 by rpki-client