Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
File: s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft (raw, json)
Hash identifier: 9UslXqtOaj//gTp43Ia3R/c541hzvh6tyujfzeGGpQw=
Subject key identifier: 7D:AD:60:0C:E0:E3:62:72:C8:91:3C:5C:75:47:89:16:3A:05:E8:3E
Authority key identifier: B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25
Certificate issuer: /CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
Certificate serial: 019CABA27459C2ECEADB80566F9EBBAA2235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
Manifest number: 0D9F
Signing time: Sun 01 Mar 2026 23:01:16 +0000
Manifest this update: Sun 01 Mar 2026 23:01:16 +0000
Manifest next update: Mon 02 Mar 2026 23:01:16 +0000
Files and hashes: 1: h5TBAsD0PIrK8ZbXvXzmuZYvjfc.roa (hash: vh2mYfpn9jYyEFKZRDPA3enKaVdAJO56xPGBRHR7x4E=)
2: s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl (hash: GjAi0DEYH/PrKPBRXTOuWEdspPWWvjrZX7j0CYimszc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:74:59:c2:ec:ea:db:80:56:6f:9e:bb:aa:22:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
Validity
Not Before: Mar 1 23:01:16 2026 GMT
Not After : Mar 2 23:01:16 2026 GMT
Subject: CN=7dad600ce0e36272c8913c5c754789163a05e83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:41:41:e4:f0:f4:5c:ca:e1:05:d8:87:3d:5b:
24:23:d5:76:25:31:b8:56:f5:c8:33:c2:bd:4c:d9:
86:c5:29:94:c8:7a:32:7c:00:b6:3d:81:90:6a:b9:
73:42:e7:68:da:16:5e:34:b3:cc:9d:1b:40:d3:8f:
8c:f9:d6:84:94:4a:79:bd:b5:09:60:62:7b:a0:69:
a9:e3:12:a4:62:1e:e5:6a:b2:f4:e6:5b:0e:5f:56:
1f:3f:85:d9:e3:d1:be:0a:a0:31:39:d7:12:b5:97:
4a:3d:5b:1b:4c:38:b4:7c:cc:84:4c:c1:f6:fc:99:
0d:b3:7a:58:5e:fb:2b:71:18:b9:79:d8:96:f9:a0:
c3:84:b2:7e:5c:c6:e7:8b:e9:02:83:3b:de:f8:d1:
98:db:d0:42:8a:dc:aa:5a:01:7e:51:d7:9d:ad:66:
36:cb:f0:99:dc:3b:6f:b6:6f:8a:b0:fa:d4:44:68:
79:7e:a4:cf:0c:ad:21:5f:0a:bf:17:11:37:7b:99:
b7:88:c6:af:78:ee:f7:09:5d:e9:b4:ff:c0:d9:42:
01:e2:9c:73:71:43:e7:55:d4:b4:6b:bf:df:40:59:
9a:6a:88:10:2b:c2:40:0e:b3:d1:73:68:4d:e3:04:
08:c1:62:af:25:87:4e:b1:9b:c0:32:b7:5a:fe:bf:
f9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AD:60:0C:E0:E3:62:72:C8:91:3C:5C:75:47:89:16:3A:05:E8:3E
X509v3 Authority Key Identifier:
keyid:B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f5:9d:e2:f8:33:b2:65:fc:db:a1:ea:37:bc:7f:75:0b:1e:
35:7b:8e:bd:d2:d5:b3:7a:10:bf:54:29:44:91:ba:9a:88:93:
bc:bb:78:f4:20:a5:35:e0:c0:94:ce:23:53:75:04:93:36:60:
01:67:c4:e2:0d:3e:22:f5:f0:99:91:9b:da:47:5a:5c:e3:67:
91:b3:f9:77:63:c7:4b:ec:71:e0:77:ff:81:22:8e:c1:7c:87:
cf:d5:06:58:64:09:8e:26:8a:57:0b:ee:eb:f1:6a:7f:07:04:
fb:a9:e6:67:d3:c4:a7:20:c2:38:02:cd:11:33:8a:4a:e3:3f:
74:62:27:22:b6:0b:a4:7e:cd:17:04:75:34:68:b9:8f:5f:3e:
ab:eb:0e:e7:6e:7f:f5:c5:1d:bd:ec:c1:f2:a2:db:72:c9:e2:
00:aa:e0:e6:16:2c:96:a1:c1:46:b0:1e:b0:cd:cb:27:7b:a5:
25:22:5d:c0:00:39:dc:f2:03:1d:82:b6:a5:62:9a:a2:fb:e0:
7c:95:e8:e2:0e:2e:cc:51:e5:4b:20:c7:a7:7e:97:78:4c:43:
79:05:9a:f7:6b:0b:f9:ad:fb:03:a0:1c:b9:91:97:56:6c:8d:
83:8e:c3:5f:15:bb:90:a3:00:87:0b:92:bd:50:30:b7:17:27:
80:54:71:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:56 2026 by rpki-client