Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.mft
File: s7WnVE-7mHmAo_8ccevz-xz2rJ4.mft (raw, json)
Hash identifier: 03ISP4VGXh78KyZ3RZHnAxU36+rYGrgCb3tijTupNHE=
Subject key identifier: B5:1A:7A:2B:9B:80:D2:34:63:3C:A9:B3:76:E0:B3:9D:9D:DC:1F:1E
Authority key identifier: B3:B5:A7:54:4F:BB:98:79:80:A3:FF:1C:71:EB:F3:FB:1C:F6:AC:9E
Certificate issuer: /CN=b3b5a7544fbb987980a3ff1c71ebf3fb1cf6ac9e
Certificate serial: 019F8F7F5EA899C2555DAE029204BFB7639D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7WnVE-7mHmAo_8ccevz-xz2rJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:56 +0000
Manifest this update: Thu 23 Jul 2026 15:01:56 +0000
Manifest next update: Fri 24 Jul 2026 15:01:56 +0000
Files and hashes: 1: AlGAx9Fl6hfEZYbR82KN63CXdsA.asa (hash: dmP6VBHZrQsaHkli3FETSb10i/VF3suE+WLsSAtxktk=)
2: CJWICYUF8PQfPfv_l-YsbRABMGA.roa (hash: ckHVpf/nWip1+cSgGyvEj2vXDYp/OYjzyt+VU9SRBuw=)
3: s7WnVE-7mHmAo_8ccevz-xz2rJ4.crl (hash: KFYf4maOjiLlH2ovP8qsQE0eQXsdQVlFu/66uhyC0mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7WnVE-7mHmAo_8ccevz-xz2rJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:5e:a8:99:c2:55:5d:ae:02:92:04:bf:b7:63:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b5a7544fbb987980a3ff1c71ebf3fb1cf6ac9e
Validity
Not Before: Jul 23 15:01:56 2026 GMT
Not After : Jul 24 15:01:56 2026 GMT
Subject: CN=b51a7a2b9b80d234633ca9b376e0b39d9ddc1f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6e:98:90:3a:a5:8b:c0:f6:22:d4:7b:88:ca:
a1:a6:63:79:1c:83:31:ad:c0:55:b3:fe:3c:94:f2:
ac:4e:63:08:3f:8e:27:8f:89:df:d0:bf:85:bd:ee:
7e:eb:88:11:b3:e3:4e:92:4a:4d:72:55:46:6b:69:
3f:63:29:f9:2d:ee:c0:93:7e:1d:27:39:d2:c8:ff:
36:6b:cb:aa:dd:12:e3:ae:84:27:68:45:6d:d4:44:
fb:5a:ee:28:a0:1a:1f:01:72:d4:74:96:01:51:7e:
15:d4:4c:dc:3e:2b:79:e9:2c:8f:14:81:88:8f:91:
74:52:41:90:cc:3c:62:e6:aa:94:f6:27:17:bf:21:
5f:6a:24:81:31:7d:b5:a0:30:01:e5:0c:1d:d3:3d:
2c:cb:a5:b2:b2:74:f6:29:5c:60:5d:44:5b:bd:a8:
0f:9b:fb:b0:58:02:99:06:3d:f2:63:d3:a1:5d:ff:
8e:a3:6d:fa:df:b4:1f:94:29:5e:9d:99:2f:82:f7:
29:f4:69:b8:62:17:6f:2f:2c:91:a9:7e:c4:41:2f:
71:92:4a:47:8a:f9:da:60:c2:0d:6c:cf:20:e7:9e:
4a:b8:ec:e3:6d:ac:bc:8d:01:8c:bc:19:18:ab:ce:
c3:05:e8:f2:d0:95:71:69:d9:f4:ee:af:f1:98:87:
f8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1A:7A:2B:9B:80:D2:34:63:3C:A9:B3:76:E0:B3:9D:9D:DC:1F:1E
X509v3 Authority Key Identifier:
keyid:B3:B5:A7:54:4F:BB:98:79:80:A3:FF:1C:71:EB:F3:FB:1C:F6:AC:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7WnVE-7mHmAo_8ccevz-xz2rJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:33:f4:7b:0a:e4:e8:85:0a:f0:11:dd:ae:08:7d:47:7b:47:
cf:84:f9:97:b2:9a:d2:67:a2:37:84:4d:94:33:0a:0b:5c:42:
ef:22:28:3c:7b:37:97:b3:8e:31:1c:6c:16:ec:69:8e:69:c6:
9c:61:b8:eb:f9:55:5c:3f:dc:0c:33:1e:eb:ba:4c:fc:4c:24:
00:3a:6a:fb:d1:8e:53:99:23:50:d3:91:53:bf:3f:98:1d:65:
d4:29:71:dd:52:d6:93:19:b6:4b:8f:37:c3:48:d3:1a:ff:49:
66:85:ce:14:86:d3:c6:01:00:8d:42:93:6f:71:66:93:f4:db:
6a:db:28:d4:62:02:3b:1e:b0:0c:35:1f:58:c9:3c:61:8c:d9:
8a:d1:48:6c:9d:fa:9c:af:37:9e:83:82:f8:38:b1:09:f1:c2:
a3:f7:79:c7:54:db:5f:8f:4b:3f:c4:03:c4:a0:e9:f9:b6:c8:
03:5d:34:39:d5:73:40:ea:16:9f:6f:62:27:38:d4:5f:6c:c0:
d5:83:38:b8:af:49:ab:4c:5d:7a:a0:9f:03:63:2f:c4:90:aa:
37:dc:76:01:7b:cf:64:1f:db:8e:36:25:98:e4:26:77:bb:b3:
d3:e9:c9:22:91:cf:10:ef:fa:cd:34:e5:0f:a7:2d:ee:8e:a4:
98:f6:0a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:27 2026 by rpki-client