
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
File: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft (raw, json)
Hash identifier: Bu0YfOXBEN5DY6eoZqEjKbIhm9oDvl970fIlyn7EIPE=
Subject key identifier: B3:21:5A:E3:4C:80:8D:7C:5D:74:19:33:9C:DD:97:87:5C:CD:7E:8C
Authority key identifier: EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
Certificate issuer: /CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Certificate serial: 01A0C21F390841ABFA67857DBF9A92EE899C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
Manifest number: 15A9
Signing time: Mon 21 Sep 2026 04:00:21 +0000
Manifest this update: Mon 21 Sep 2026 04:00:21 +0000
Manifest next update: Tue 22 Sep 2026 04:00:21 +0000
Files and hashes: 1: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl (hash: V0Ccje+EKDEfLpeJf7JAUBwHA6fjU89cmJw7xuosDZk=)
2: 88NWVToLEwKK_Mpgeyzi5wA0xpo.roa (hash: l2cWTge/R/tklyYKEf8+fIr98gBT5pBqi6tErfFhBF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:39:08:41:ab:fa:67:85:7d:bf:9a:92:ee:89:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Validity
Not Before: Sep 21 04:00:21 2026 GMT
Not After : Sep 22 04:00:21 2026 GMT
Subject: CN=b3215ae34c808d7c5d7419339cdd97875ccd7e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3d:8b:81:1c:89:1a:38:da:17:e3:51:be:c1:
6a:d3:c5:15:5c:57:76:ec:91:33:d1:68:89:8f:24:
5a:43:1e:99:cd:c3:6f:cc:e0:10:75:11:df:17:87:
c4:03:99:6a:30:c7:3b:5b:0c:0d:21:03:f0:18:1a:
02:e1:90:26:e4:de:1c:15:16:80:c7:63:e4:8d:b3:
53:61:47:c5:95:df:3d:91:70:42:f2:1c:b2:2a:97:
cb:1c:2b:16:1a:13:7c:fa:3b:ef:04:14:95:87:57:
70:10:41:cf:49:95:bf:c2:87:65:5c:da:48:d2:1e:
63:8d:ba:d9:cd:6f:ce:b9:a2:96:2e:bf:cb:d0:55:
f0:24:ab:7c:b3:6d:74:4e:fe:b4:27:07:d0:d4:d9:
d4:48:e4:d8:f3:19:d7:26:f8:8b:8c:7b:f7:42:cd:
d0:73:5f:ed:51:e6:cb:02:9f:52:e9:0a:4c:7d:5b:
40:be:46:df:37:bf:3b:7d:ec:00:d1:92:8c:3b:17:
94:48:5e:3c:6e:9b:28:86:0f:64:fc:47:6d:ff:7e:
36:dd:cf:ee:d7:64:c7:4a:02:44:a5:3d:f0:f5:f1:
eb:91:59:5b:b2:5f:87:8c:3e:6f:d6:53:2d:6c:63:
e4:1f:bb:dc:87:79:53:db:a9:f7:8b:d8:1b:d5:e1:
bf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:21:5A:E3:4C:80:8D:7C:5D:74:19:33:9C:DD:97:87:5C:CD:7E:8C
X509v3 Authority Key Identifier:
keyid:EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:25:45:c8:4c:c7:9d:96:49:50:39:e1:94:6f:0a:7b:94:94:
d4:8e:25:19:ea:2d:0d:27:00:05:e0:9c:39:1b:9d:31:3c:2f:
fa:36:21:9e:21:8e:b4:57:79:3c:cd:fa:5f:1a:23:d9:2b:e5:
10:a4:04:77:aa:6c:72:1c:e3:5b:bc:8c:1a:d1:13:c7:a9:c0:
f1:e6:2b:63:0e:95:e1:16:ce:87:1b:87:93:30:31:2f:ec:81:
e8:ce:fa:af:7a:d5:6a:21:35:7b:48:56:94:00:00:c1:86:a0:
4e:9f:b3:dd:51:12:83:3d:f2:e7:ee:dd:e5:5e:27:b2:7a:f3:
f4:99:ec:1a:88:f0:dc:23:2d:2d:02:9e:84:d8:96:ea:eb:29:
85:ab:e9:0e:c6:ae:db:f8:a3:9e:52:80:ab:1d:21:4c:d7:53:
32:74:4f:83:6b:dd:37:e2:90:29:25:5f:99:0e:c1:49:20:9c:
c3:e8:a1:7f:06:f1:66:0e:7b:ed:66:53:18:bf:c7:98:b5:5b:
f5:52:f8:28:a1:0f:7a:65:72:4b:d4:f2:87:eb:8c:33:ee:f8:
93:20:41:3f:ff:3a:4e:b3:e9:e3:9c:93:c4:63:85:17:74:89:
a7:ee:e1:b2:71:0c:59:2e:c9:df:ad:a9:c6:af:e0:a3:a7:a1:
a5:ff:21:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:35:10 2026 by rpki-client