Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
File: s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json)
Hash identifier: 1nXjLNXx5XsgkPAGBKd2Di79w+3GcHvAuj6Keo4oHvo=
Subject key identifier: 63:D1:27:3C:0D:64:7F:B1:BF:3E:40:CE:C3:35:01:48:B0:72:B4:DA
Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
Certificate issuer: /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Certificate serial: 019D299764BCB7C59904764C0421412E5D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 10:01:20 +0000
Manifest this update: Thu 26 Mar 2026 10:01:20 +0000
Manifest next update: Fri 27 Mar 2026 10:01:20 +0000
Files and hashes: 1: BSBTdISOwUSk76V2qhorPXUYcls.roa (hash: gMCNavqIUpRgqrn5vcMqwPcSr1Q6xSaeOjz/QGd0jJc=)
2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: s43scx8reVGkf9t9+Os29/OoRa4zZ6ye7qfivjHvJ80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:64:bc:b7:c5:99:04:76:4c:04:21:41:2e:5d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Validity
Not Before: Mar 26 10:01:20 2026 GMT
Not After : Mar 27 10:01:20 2026 GMT
Subject: CN=63d1273c0d647fb1bf3e40cec3350148b072b4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:27:12:f5:49:c0:17:f8:4e:80:98:d3:67:15:
8c:c5:b6:31:42:d1:66:e3:80:4a:22:af:66:20:7f:
a5:89:a9:de:27:c6:66:73:1e:ff:bd:d6:eb:52:ea:
4e:b2:3b:cf:d0:75:49:a6:fa:66:45:f2:aa:26:4c:
29:09:38:66:2b:07:19:a5:7a:42:31:67:4e:0b:a2:
ff:1c:9b:70:66:e7:0c:5c:3e:08:eb:a1:ee:83:7d:
98:28:fb:a0:6e:2d:0b:70:40:b0:3e:17:ea:f4:8d:
48:f3:2d:76:f9:57:46:b5:d5:2c:7e:ad:fb:32:96:
7d:c7:3b:50:55:62:8a:30:8c:4c:72:5b:57:b2:49:
e1:16:a9:3e:e7:39:dc:de:1b:67:ee:2e:db:65:c0:
55:b8:db:fe:74:8c:a8:78:90:2a:6a:99:f4:0c:85:
4f:a9:ac:27:31:78:15:20:b5:1f:ff:28:92:9f:76:
bd:89:e5:45:33:56:b0:92:85:0d:6d:b1:8d:e4:2e:
9d:9f:ae:01:4d:21:4b:42:16:8f:84:dc:3f:da:68:
c4:4f:e2:15:de:6a:f3:d8:f1:31:c2:2f:24:a8:a4:
0c:60:a9:5e:68:1a:08:f1:e0:ac:3d:46:4c:df:e3:
03:cf:53:f4:7a:9b:48:b3:6a:f1:cb:cc:d6:c7:96:
58:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D1:27:3C:0D:64:7F:B1:BF:3E:40:CE:C3:35:01:48:B0:72:B4:DA
X509v3 Authority Key Identifier:
keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:58:c7:a6:00:79:6d:13:d5:43:22:ad:db:cc:65:e9:93:19:
ce:46:ec:f6:05:a0:40:48:22:37:a4:42:92:23:66:11:65:3b:
1c:40:b8:07:e6:f1:58:ab:51:2a:67:2e:4f:f9:99:9e:3e:62:
94:8a:f9:18:0c:cc:ca:b6:80:f1:0a:36:29:e8:dc:a6:f3:18:
75:7f:98:4c:a2:6d:e6:1a:8f:3b:43:3e:46:5f:d7:8a:1f:90:
8c:3b:01:9b:4a:a5:33:8d:35:39:4a:0a:65:ee:4e:5c:a3:3a:
1e:35:4c:c1:68:fc:5d:7d:2b:5f:dc:c8:fc:86:8a:ae:b7:3d:
2d:f4:89:b7:8e:92:cb:09:15:46:8a:7c:4d:ce:a3:1d:69:fd:
4a:8d:3b:29:21:23:f2:59:c9:56:54:3b:de:c1:ad:a6:3e:40:
da:50:66:ac:ff:5f:c3:d1:03:7d:b1:bc:cb:a9:a5:b3:82:b7:
50:9d:68:d9:ce:4a:5d:0f:b9:e5:4c:b5:43:82:bf:0b:d2:00:
80:05:e9:29:c0:8c:57:75:f7:ea:44:65:46:a5:15:ec:f7:23:
69:0d:78:82:02:01:b2:44:fa:40:ed:54:4c:4d:e6:ed:9f:d4:
d4:ba:56:a6:fb:99:85:61:13:bb:0a:bb:71:3b:a1:31:8a:2f:
b6:ca:ca:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:57:40 2026 by rpki-client