Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
File: s7a21-XdDDKPbOr36enA0cuMHSI.mft (raw, json)
Hash identifier: +qNrS1rANz+SGHiyquxL+WZrhPuYFCgWjnbcN2MlwDI=
Subject key identifier: BE:6B:8C:3E:9F:CA:88:7B:02:FD:67:E9:59:EE:67:B1:CB:EC:E5:DA
Authority key identifier: B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
Certificate issuer: /CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Certificate serial: 019E1F10B9DF010660F0551A2BF45AAFFB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
Manifest number: 16CA
Signing time: Wed 13 May 2026 02:00:50 +0000
Manifest this update: Wed 13 May 2026 02:00:50 +0000
Manifest next update: Thu 14 May 2026 02:00:50 +0000
Files and hashes: 1: 8vMvZJ6S4wIvSeidLWIqXdB2xEU.roa (hash: YSfZ6yHjbJE8NoHQ6iqadOGUmWSZLkJjEKtjGtKNsbU=)
2: s7a21-XdDDKPbOr36enA0cuMHSI.crl (hash: CEhqi8jxQY0jX4Y6Uw92Rs6KXlAXIBRt5TD3RafaJuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:b9:df:01:06:60:f0:55:1a:2b:f4:5a:af:fb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Validity
Not Before: May 13 02:00:50 2026 GMT
Not After : May 14 02:00:50 2026 GMT
Subject: CN=be6b8c3e9fca887b02fd67e959ee67b1cbece5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:36:eb:eb:81:7a:fe:6f:c0:0e:2a:51:15:
0b:c8:ef:3a:f6:c9:3f:4c:0f:13:a0:e9:86:ca:a9:
de:da:0d:ae:25:38:61:d4:73:4c:9f:06:23:4d:47:
6a:89:51:44:e3:f6:d1:ab:dd:00:2a:49:eb:24:97:
bd:d0:72:20:ca:f8:33:3e:17:4b:b6:3a:89:91:d5:
10:6b:4b:5c:75:bf:1d:3f:81:ae:5e:09:c8:81:2e:
e4:18:d3:b1:6f:9a:b5:f3:75:9d:dd:9e:5f:bb:f8:
20:1c:37:cf:7c:b2:e0:9b:4a:8b:1b:f8:14:78:80:
7b:5b:c7:41:2a:8f:98:b4:06:bf:9a:da:fb:24:c3:
26:fc:1f:24:27:b1:5d:66:5d:d5:8b:cd:75:92:7e:
3b:84:86:73:68:f8:41:80:38:07:fa:8c:42:c5:12:
65:26:f0:95:3b:a7:62:51:a6:91:ff:62:10:bf:12:
ea:61:4b:0c:37:63:1e:41:e0:2b:60:62:e3:50:d2:
a3:27:cb:1f:51:ee:16:f5:87:8a:f3:6a:97:58:69:
ef:b5:da:6b:a1:1c:aa:9e:28:be:a7:9e:bd:c8:60:
2f:c7:19:b0:03:bc:00:98:94:74:97:23:c6:d4:3e:
b5:50:db:d9:01:e0:8a:54:a1:16:5f:15:ad:c1:34:
ed:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6B:8C:3E:9F:CA:88:7B:02:FD:67:E9:59:EE:67:B1:CB:EC:E5:DA
X509v3 Authority Key Identifier:
keyid:B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:44:00:5c:71:42:dc:d9:16:70:a1:df:6d:f2:e8:5b:22:e6:
b4:9d:b9:c6:10:d7:bf:b6:c0:75:97:92:d7:e7:54:28:86:6d:
c6:6a:ec:f4:d0:fa:b3:e0:1f:61:98:65:7b:10:cb:16:56:14:
b9:f9:d2:90:56:d9:47:75:71:48:31:80:86:d2:95:a7:b7:07:
6c:19:35:f8:25:05:98:5f:7e:23:8a:18:54:69:3d:1e:17:f5:
1b:24:a4:18:6e:14:5e:49:f8:58:63:3e:b5:a2:47:5e:99:45:
c1:9e:a7:0c:38:47:8a:c4:99:c0:c4:25:05:44:92:f9:d9:d9:
c5:79:08:0f:3b:b4:5b:3f:90:8a:83:4e:c9:04:e4:47:08:13:
ba:15:53:4f:56:97:32:0d:68:15:f2:46:5c:59:b0:0f:f8:c3:
2b:06:b0:07:54:7c:ef:b4:d2:1d:fc:34:de:02:8c:6e:b9:b2:
3e:c1:b0:a4:13:63:42:5c:a5:6d:ef:29:4e:56:be:df:84:ac:
79:db:89:25:02:ef:8f:27:8c:d5:00:08:0c:86:7e:ff:2d:53:
03:e0:aa:b5:34:13:39:4c:b1:1e:3a:50:c7:e4:e0:77:0b:2c:
dd:65:39:f2:66:d7:33:84:cf:05:d6:56:1c:28:59:b9:db:5a:
45:e0:4e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:28 2026 by rpki-client