
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
File: s7a21-XdDDKPbOr36enA0cuMHSI.mft (raw, json)
Hash identifier: p1hNLtLwWOgnpXzJG8mxZG6DcIHl2syTlEkxE3QY9vY=
Subject key identifier: F9:CA:EE:96:D5:F3:0C:37:27:AF:58:AC:DC:E5:1F:E3:D6:C3:4F:08
Authority key identifier: B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
Certificate issuer: /CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Certificate serial: 01A0C6D7FDC5F93CFC579C9F970A26198B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
Manifest number: 182A
Signing time: Tue 22 Sep 2026 02:00:39 +0000
Manifest this update: Tue 22 Sep 2026 02:00:39 +0000
Manifest next update: Wed 23 Sep 2026 02:00:39 +0000
Files and hashes: 1: 8vMvZJ6S4wIvSeidLWIqXdB2xEU.roa (hash: YSfZ6yHjbJE8NoHQ6iqadOGUmWSZLkJjEKtjGtKNsbU=)
2: s7a21-XdDDKPbOr36enA0cuMHSI.crl (hash: ZLT11MQ0QrdQWMW1YN6bfWwaI4jfv191CFuxNOr+nOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:fd:c5:f9:3c:fc:57:9c:9f:97:0a:26:19:8b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Validity
Not Before: Sep 22 02:00:39 2026 GMT
Not After : Sep 23 02:00:39 2026 GMT
Subject: CN=f9caee96d5f30c3727af58acdce51fe3d6c34f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:ac:ad:8e:30:ae:26:c4:fd:4d:8c:40:8d:
3e:59:71:00:b2:c5:fa:ad:8d:d1:ba:0f:21:87:c5:
47:0e:9c:1a:4c:c7:39:c3:3a:c8:25:f8:a3:9c:fc:
bd:41:1d:cc:8f:68:82:8f:2b:60:95:45:05:a6:60:
13:76:15:98:ca:a7:a1:91:37:a4:34:31:7d:4e:31:
ab:b5:31:8b:8e:5b:04:da:fc:90:84:39:8c:e9:46:
22:1b:ce:dc:e6:3b:9c:41:d4:63:eb:d7:83:41:ce:
3f:d9:a8:02:df:99:eb:9c:84:02:d6:f8:0d:41:1c:
51:d2:2f:1f:b7:7c:ed:b1:48:d6:8f:57:13:aa:24:
77:1c:ca:2d:00:55:1c:64:27:42:91:42:c3:6a:54:
f7:29:88:0e:24:86:0c:20:2a:a9:94:34:53:e6:5e:
ae:fd:f0:e9:78:7c:7a:a3:f9:9a:c5:86:1f:b8:f6:
15:f8:50:d0:5b:fc:f2:22:1a:7f:ce:53:9b:f9:b9:
f5:13:b6:24:6f:67:a6:27:f1:49:c4:ef:24:e0:89:
66:d6:39:59:e5:d8:ee:b8:37:46:23:5e:31:11:83:
15:b1:c4:d4:5a:f8:39:50:e7:0b:f2:db:80:76:a6:
43:fd:95:5a:45:2f:9c:62:bb:ce:00:38:51:1f:ed:
55:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CA:EE:96:D5:F3:0C:37:27:AF:58:AC:DC:E5:1F:E3:D6:C3:4F:08
X509v3 Authority Key Identifier:
keyid:B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e5:52:c3:e7:c3:b3:19:9e:2a:b8:36:d5:4b:c9:20:8f:93:
ca:4f:91:05:34:83:fd:6c:ef:b9:0f:78:ea:13:7a:aa:5e:e0:
90:93:08:80:53:a1:ca:ec:11:f7:e8:9e:ab:40:7b:d6:0d:bf:
64:a2:39:e7:da:26:a1:bb:6a:cc:ce:43:5f:f7:bc:a5:5a:58:
eb:36:d1:6d:27:33:4b:b4:63:af:19:1e:76:37:4f:aa:f1:a7:
65:3d:a1:b4:2d:30:90:60:39:8c:ce:01:85:06:19:4e:37:8e:
a7:25:9d:48:d9:0a:5c:8a:6e:7a:46:ff:3e:a8:a7:00:08:0d:
e9:28:2b:69:d3:80:7c:2e:fd:73:69:60:07:4f:25:9e:78:a2:
11:dc:55:32:30:a6:d0:ec:2e:07:44:55:9d:3d:d5:91:76:2d:
16:97:85:40:ad:71:29:88:60:48:63:89:f4:1e:8c:2c:06:3a:
74:2b:6e:3b:31:88:ae:7e:c3:8d:52:0b:ae:59:e2:19:83:02:
f4:21:cc:92:96:41:8d:84:1b:12:e2:78:1d:35:fd:4e:5c:f6:
62:53:10:12:84:e7:3a:24:d9:ba:2e:28:e3:9b:8b:7c:70:98:
e5:1f:d3:c5:4e:f2:95:8a:30:aa:16:2f:08:93:fb:5b:fb:68:
77:70:58:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:37:49 2026 by rpki-client