
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
File: s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json)
Hash identifier: eSfiqqkCKRiG3AdhERzWlj0x6HeW2TUWVvpn/QKGrrI=
Subject key identifier: 82:47:12:DC:73:87:97:C3:3C:9A:24:03:FF:DC:E9:64:20:CC:7E:86
Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
Certificate issuer: /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Certificate serial: 01A0CE5A4C392F788D3B63A10D7CA0269429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 13:00:19 +0000
Manifest this update: Wed 23 Sep 2026 13:00:19 +0000
Manifest next update: Thu 24 Sep 2026 13:00:19 +0000
Files and hashes: 1: BSBTdISOwUSk76V2qhorPXUYcls.roa (hash: gMCNavqIUpRgqrn5vcMqwPcSr1Q6xSaeOjz/QGd0jJc=)
2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: Ksyo62y1OcYP7GFOjFuEyQgMdIG5fiTUg28W9z7pKoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:4c:39:2f:78:8d:3b:63:a1:0d:7c:a0:26:94:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Validity
Not Before: Sep 23 13:00:19 2026 GMT
Not After : Sep 24 13:00:19 2026 GMT
Subject: CN=824712dc738797c33c9a2403ffdce96420cc7e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e5:3d:41:99:77:fd:b5:07:f7:80:52:c4:30:
bc:56:7e:61:7b:ae:d7:cb:fd:7e:d9:1e:ff:82:05:
c0:e8:ef:05:cb:9e:84:f9:cb:bc:a1:5e:21:b2:cd:
f0:e4:c2:2a:30:bf:0c:e2:e2:92:46:74:28:51:19:
4a:6d:9c:05:f1:35:e8:ce:17:86:96:30:fd:4d:4c:
c8:94:96:30:b8:a2:32:e6:82:60:59:61:dc:58:11:
b8:15:33:ce:bb:27:a3:76:f1:04:5c:4e:7a:bf:95:
b2:60:1f:5f:f6:45:9b:20:9b:a7:a1:88:22:46:22:
7b:94:7a:c3:45:86:9b:4c:6f:7e:64:5c:56:0e:76:
41:88:15:80:55:9c:2f:6d:db:d1:5f:c3:59:94:54:
03:02:30:9f:3f:42:c8:6d:69:a1:0b:41:94:b9:6a:
d1:47:2f:71:9a:ba:01:1f:0b:e3:23:4f:aa:8d:0e:
3c:cc:68:bf:33:e9:53:06:cc:24:e8:ea:7d:32:8b:
02:cb:ce:6f:7e:54:43:21:10:a3:97:ee:88:34:c0:
aa:77:6e:7a:6a:fb:96:60:c3:da:6d:1f:5f:72:42:
65:41:5c:38:36:82:46:d9:04:f0:3b:0e:38:db:0d:
02:cc:bc:8f:36:11:ad:22:b2:4d:2e:a6:5e:d5:0c:
76:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:47:12:DC:73:87:97:C3:3C:9A:24:03:FF:DC:E9:64:20:CC:7E:86
X509v3 Authority Key Identifier:
keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d2:d6:53:1d:60:df:97:9b:e8:fb:3e:0a:eb:29:b1:5b:37:
32:be:9b:42:a3:97:fd:d3:0a:fe:a6:ca:14:7f:53:e0:af:4b:
c7:17:39:76:cf:72:2d:96:72:b4:59:8c:7f:49:de:c7:d5:a4:
a7:0d:8c:6e:0d:74:61:c0:cb:f5:72:b1:b7:d6:51:62:22:73:
b6:34:a7:1c:22:83:e9:f3:ca:f6:81:58:4a:8e:1f:6d:6a:77:
46:59:a1:de:ff:c2:dc:49:15:18:5f:e1:49:11:06:93:fe:7b:
e7:cf:2c:c3:f5:1b:00:2b:bd:bf:b3:9f:9e:79:8e:42:60:9e:
ed:b9:0a:4f:e8:fe:0e:f6:be:99:83:bf:82:fa:43:92:89:b2:
38:c4:3b:3e:8a:7e:38:39:cb:56:89:6a:8d:d5:f3:7c:9d:79:
0b:a4:60:16:34:8d:df:13:87:66:2d:0e:40:ca:06:a0:3a:80:
a2:6f:a9:d7:b5:98:7e:fa:67:fc:03:a4:50:93:5e:53:de:ed:
1b:68:41:76:6a:4c:af:80:75:12:ff:d7:cb:b1:b5:83:7d:c1:
bb:c7:8c:dc:f5:37:97:43:8a:1b:ee:ac:3e:94:95:85:90:dc:
9d:6f:a7:48:45:b8:b7:af:b0:cc:00:4b:4d:fb:45:0b:83:30:
7e:87:4e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:15:44 2026 by rpki-client