Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
File: s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft (raw, json)
Hash identifier: jPq5YBjki7UQeGAgrdSMnjsyDv9cTWR70xl3z37zMv0=
Subject key identifier: E9:AD:1E:CA:28:F1:12:BA:3F:90:3A:2D:4D:FF:93:C4:45:BB:61:E3
Authority key identifier: B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25
Certificate issuer: /CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
Certificate serial: 019DA2D37A8893425FBC6FA7C963AAD61EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
Manifest number: 0E1F
Signing time: Sat 18 Apr 2026 23:01:01 +0000
Manifest this update: Sat 18 Apr 2026 23:01:01 +0000
Manifest next update: Sun 19 Apr 2026 23:01:01 +0000
Files and hashes: 1: h5TBAsD0PIrK8ZbXvXzmuZYvjfc.roa (hash: vh2mYfpn9jYyEFKZRDPA3enKaVdAJO56xPGBRHR7x4E=)
2: s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl (hash: 7kUMVJankAfz37d9Gf+MLQp1GgZi7QqUWAT/vEP30T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:7a:88:93:42:5f:bc:6f:a7:c9:63:aa:d6:1e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
Validity
Not Before: Apr 18 23:01:01 2026 GMT
Not After : Apr 19 23:01:01 2026 GMT
Subject: CN=e9ad1eca28f112ba3f903a2d4dff93c445bb61e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:4d:1e:2f:87:e8:bf:a3:d1:39:26:0c:80:
ec:1f:26:9f:c3:bc:e9:c3:0f:d7:7c:ae:2e:12:fa:
33:11:be:5a:10:e8:8f:7a:17:ba:c5:ef:1a:ae:03:
31:db:43:85:bf:72:3e:f1:ed:57:2f:4c:77:96:10:
81:e1:33:27:c6:1c:44:10:22:58:4e:42:0f:74:79:
e8:46:6f:58:df:4d:e5:15:e0:c9:03:81:cd:56:ef:
51:d4:36:91:21:c3:00:87:85:04:37:53:9e:4e:8e:
00:e1:e2:19:2e:ea:bc:2f:ed:31:c6:67:29:b6:aa:
fa:b1:49:64:9a:62:37:df:4b:d2:91:11:30:e1:c5:
ee:a0:94:54:c3:e9:30:b8:bc:28:a8:78:a0:95:34:
d0:d5:3b:f8:ce:1f:34:42:34:b0:d2:ce:28:d0:d5:
7e:ca:3d:7d:4e:4a:78:50:af:d7:b5:a5:4c:bb:fb:
77:8e:d0:d7:e3:55:f4:a3:3f:97:9e:77:6a:40:ab:
eb:8a:3d:c2:ed:70:17:25:4c:e9:42:10:55:56:49:
76:26:79:50:33:7b:bf:d1:4d:40:ad:d1:15:62:6b:
f7:11:83:aa:38:97:1b:83:b2:58:4b:44:46:83:50:
3a:ee:e3:18:d0:10:43:f1:f6:52:0e:e4:dc:b1:13:
03:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AD:1E:CA:28:F1:12:BA:3F:90:3A:2D:4D:FF:93:C4:45:BB:61:E3
X509v3 Authority Key Identifier:
keyid:B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:19:8b:90:14:21:a0:df:dd:fb:91:47:de:aa:2a:23:dc:03:
5f:29:58:a9:3c:db:bd:ea:7e:69:f3:3f:5d:b5:1e:04:a6:ca:
33:4d:06:45:06:35:15:4a:30:da:f4:ed:bb:65:3f:c5:21:71:
7e:4e:6c:2c:9a:b2:b3:49:cc:88:37:27:9a:47:91:d3:dd:ba:
a0:16:cf:90:07:7b:61:29:a2:72:1b:91:ad:c2:98:25:06:a9:
16:d0:51:49:81:d0:56:74:25:b6:5a:7d:fa:46:ae:cc:9d:4a:
28:27:17:1d:cf:55:c5:19:f0:55:77:7a:9a:a8:82:32:f6:01:
fb:d5:fa:8b:93:3f:47:97:c9:ef:37:53:43:6d:e3:00:4c:42:
3a:78:91:0a:dc:e7:70:b6:17:07:a3:6b:21:a8:e1:fd:01:53:
d8:ac:fc:4e:66:00:1e:0e:2d:9b:be:23:7d:7a:8e:95:d7:61:
54:cd:0c:ce:fd:59:42:a8:28:f4:3c:81:cc:02:6f:62:b8:59:
61:5e:ac:12:c6:e5:30:fd:27:f8:1c:72:94:07:c1:42:ff:1b:
58:39:60:89:35:e8:17:b0:37:d1:9a:90:06:e8:0c:94:e3:06:
77:09:a9:b3:0b:65:0b:2d:ab:5e:bc:d0:69:9c:05:75:4b:90:
e9:0b:57:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:27:31 2026 by rpki-client