Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
File: s7a21-XdDDKPbOr36enA0cuMHSI.mft (raw, json)
Hash identifier: FDBr0Bh4/KK3C8K6DBbb4mhHcZVrj4yySzU29Q/W4RI=
Subject key identifier: 2F:55:40:1E:7C:A9:E9:F0:38:41:11:45:FC:9B:48:70:94:28:51:23
Authority key identifier: B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
Certificate issuer: /CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Certificate serial: 019F95B6FB19677B13CBFC44BDF72E4AE6C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
Manifest number: 178C
Signing time: Fri 24 Jul 2026 20:00:24 +0000
Manifest this update: Fri 24 Jul 2026 20:00:24 +0000
Manifest next update: Sat 25 Jul 2026 20:00:24 +0000
Files and hashes: 1: 8vMvZJ6S4wIvSeidLWIqXdB2xEU.roa (hash: YSfZ6yHjbJE8NoHQ6iqadOGUmWSZLkJjEKtjGtKNsbU=)
2: s7a21-XdDDKPbOr36enA0cuMHSI.crl (hash: tX06kNosJfcG2xnfmFmSfW4ptO353Z18fjuJoGPYLUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b6:fb:19:67:7b:13:cb:fc:44:bd:f7:2e:4a:e6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Validity
Not Before: Jul 24 20:00:24 2026 GMT
Not After : Jul 25 20:00:24 2026 GMT
Subject: CN=2f55401e7ca9e9f038411145fc9b487094285123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:76:b2:65:18:fe:77:34:32:d9:42:77:c2:e3:
f9:92:36:0c:8c:65:da:24:29:49:57:5d:22:b7:c3:
02:1d:82:24:ef:0a:34:ed:fb:d0:f7:17:18:4a:f0:
d8:2b:16:10:fa:af:2a:6a:9c:44:f8:15:fb:77:0c:
a1:cb:30:1b:cf:e7:8d:56:69:95:ae:08:36:3c:b6:
63:cd:6f:06:0b:f8:b2:d1:95:d7:a2:af:cc:9a:2c:
b0:c2:e1:ba:6e:fd:a0:ee:45:6f:55:5d:ae:6b:7e:
50:f0:0d:31:92:99:57:96:45:2c:6c:91:ff:bf:42:
c2:70:de:18:d6:aa:70:ad:cc:e9:27:0e:e1:33:91:
d2:92:a4:f2:20:92:77:06:e7:f1:40:62:1a:df:8c:
be:af:58:4b:c2:55:31:34:d7:ef:c7:10:84:51:34:
72:3e:f6:bb:1a:b9:a7:0d:32:9c:a5:e3:84:fe:68:
75:64:e2:95:6b:22:91:f5:01:f0:2b:90:c6:d5:89:
4e:20:71:0d:cd:1e:15:77:b0:1b:4c:42:f9:65:d1:
ec:e1:fd:65:f7:1e:7c:29:ba:c8:6e:f3:f1:bd:9c:
80:6c:34:ab:73:52:d0:f2:d8:84:19:00:4c:f8:d7:
61:4d:b7:cb:79:41:4d:a2:99:bb:de:b0:95:47:48:
58:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:55:40:1E:7C:A9:E9:F0:38:41:11:45:FC:9B:48:70:94:28:51:23
X509v3 Authority Key Identifier:
keyid:B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:88:4a:ca:ca:c2:32:27:95:72:58:b5:db:a5:1e:74:12:f7:
32:32:44:2b:9f:97:dc:1b:3e:b6:94:ef:9d:50:a6:3d:ab:b5:
52:1d:07:7f:db:df:1e:21:12:8c:74:82:06:3f:61:c4:39:75:
28:bb:82:16:a2:14:5a:e3:15:12:b4:83:3f:e8:ce:b9:41:6e:
e7:2e:ab:3d:be:a2:e5:85:b8:16:ea:23:df:72:54:d3:dd:35:
21:34:54:60:a9:d7:c6:ff:bf:e2:b0:4f:a6:19:78:55:16:83:
cc:21:9f:d9:9a:8a:e2:15:c6:65:c3:c2:05:1b:ab:84:3f:05:
02:5a:54:33:49:8f:af:36:01:d4:1c:b6:f7:16:21:ed:90:87:
05:da:34:d6:cd:50:a2:a1:7f:e6:e8:90:5e:a0:bd:5b:fa:30:
54:1b:a3:26:23:83:76:46:60:3f:44:8c:14:61:68:68:85:df:
09:76:cf:1e:4f:6a:8d:99:ed:99:40:41:30:9b:20:6a:7d:99:
a5:a7:55:ac:6f:68:47:f7:1d:27:01:33:ae:c1:b6:6c:6e:cc:
88:0a:9d:76:ce:74:74:3e:a6:8f:42:4c:60:7b:e3:56:a1:71:
92:76:e0:05:b8:c7:28:3f:a6:bb:11:76:9d:0d:e6:73:1e:71:
3e:62:36:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:01 2026 by rpki-client