Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
File: s7b1TqmxWovU8zglOGyyd7A0Od0.mft (raw, json)
Hash identifier: qoAlcDSLnlgY6YlKqVYO/DuXyuNwQsU8xPnjzj7TGwI=
Subject key identifier: 6A:B2:1B:69:C4:C5:8A:77:AD:D1:C4:86:8C:8D:AC:78:BE:05:68:93
Authority key identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
Certificate issuer: /CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Certificate serial: 019FA9079129A4811ED2F11B4FA655601074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
Manifest number: 19DB
Signing time: Tue 28 Jul 2026 14:01:13 +0000
Manifest this update: Tue 28 Jul 2026 14:01:13 +0000
Manifest next update: Wed 29 Jul 2026 14:01:13 +0000
Files and hashes: 1: 1--FRY1CjawLnslfsBcAkrouqU6s.asa (hash: NFM53UpFWBl2wcWeqeLFtEIb13ge6QGgn48A2dxQblk=)
2: aftA-bCSN_cfnaumewln08mRqyk.roa (hash: ewCgfj5ZHQWWUV5zhZ6e7KdXcICBairndqt6imFYbD4=)
3: s7b1TqmxWovU8zglOGyyd7A0Od0.crl (hash: 7TdbOUNSNgC6BZ8I7xKRIqkugxWQimlzIr0Faz/UAKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:91:29:a4:81:1e:d2:f1:1b:4f:a6:55:60:10:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Validity
Not Before: Jul 28 14:01:13 2026 GMT
Not After : Jul 29 14:01:13 2026 GMT
Subject: CN=6ab21b69c4c58a77add1c4868c8dac78be056893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:51:c2:dd:5a:5f:22:00:52:54:ed:8f:50:83:
36:cd:c0:51:9e:90:e5:04:ef:64:f4:c1:e6:1b:b1:
a9:71:74:d3:f9:2a:09:31:75:00:4c:b1:17:50:92:
80:52:53:1d:32:66:40:d3:2d:bb:cd:43:4a:9f:47:
c0:46:0c:96:81:29:fd:21:f9:10:04:3d:2c:17:4c:
a0:9e:97:f6:27:0f:6d:bf:f6:82:e8:6b:52:6c:3a:
3e:92:1a:de:64:72:39:58:f5:20:b4:48:03:29:8b:
89:ef:6f:65:a5:0c:d8:74:16:bc:b0:24:dd:cf:56:
24:51:8c:85:cd:67:8e:61:12:32:d1:60:81:9f:4d:
88:73:26:31:1f:1f:8a:be:f7:15:80:4e:91:40:cd:
84:8e:cd:06:34:c5:a5:41:ab:f6:35:39:c0:5f:c0:
a7:28:11:32:fb:ca:58:1b:07:0e:aa:c7:c6:4a:cb:
c8:b0:6d:af:19:e3:14:d2:68:8b:86:36:8f:57:2d:
2d:cd:8e:ea:4e:12:5f:be:82:e5:ca:5e:39:23:76:
c3:28:c6:a3:9c:bc:2c:d6:4f:15:91:4b:08:ab:0e:
aa:08:09:e2:74:6e:a1:bc:e9:ef:7d:0f:95:a3:0a:
97:af:ab:71:b8:d4:e7:aa:c6:d7:d9:2a:08:96:e2:
db:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B2:1B:69:C4:C5:8A:77:AD:D1:C4:86:8C:8D:AC:78:BE:05:68:93
X509v3 Authority Key Identifier:
keyid:B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f2:d7:71:eb:fb:2a:cd:f8:67:3b:41:be:69:66:31:c1:c1:
7c:62:8b:92:07:0e:6c:0c:e3:8e:f1:2a:e4:57:a9:5b:3d:6d:
0b:2d:8c:ed:b5:14:ca:88:f5:97:90:b2:7b:04:69:40:65:dc:
c1:24:ca:c7:d9:27:a4:7a:a4:7d:15:35:5e:d5:ca:c9:b0:42:
a5:f8:8e:17:17:a2:b7:ed:56:5a:b6:ec:98:15:08:0d:7d:7c:
a9:4e:63:71:df:14:9d:2d:f7:28:4e:c8:e1:25:f3:42:c3:fb:
d4:47:8d:cb:dd:e0:03:b7:c7:93:ec:55:8a:b7:c1:4f:45:1c:
48:88:3e:62:76:1e:9a:50:21:cf:05:97:16:48:b2:54:b5:be:
0f:bd:92:07:b6:cf:ff:89:96:8a:50:8f:fb:a9:94:46:74:73:
1c:d1:37:19:f6:2a:1a:e7:e9:09:db:c0:0c:f3:9a:52:35:b5:
b3:6a:ff:52:18:12:81:09:f3:66:be:f7:45:5d:bb:f7:42:d9:
1a:f0:83:79:3f:82:2c:ea:25:aa:a5:9b:f7:d6:c7:ff:ed:06:
26:5a:23:f4:ec:3d:19:15:3e:c6:aa:a7:c0:05:d7:ce:10:ba:
a3:97:f5:3d:ad:3e:36:5b:28:1b:43:3f:6e:95:61:14:8d:66:
41:eb:a3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:04:22 2026 by rpki-client