Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
File: s7a21-XdDDKPbOr36enA0cuMHSI.mft (raw, json)
Hash identifier: dSflmXbBfgloJT/taAINB6Az/PfpCke0oJ/dw4tQsUI=
Subject key identifier: 2E:DB:D6:3F:D6:E7:96:9D:F7:FD:C8:D9:2B:26:6F:77:C6:32:FE:F0
Authority key identifier: B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
Certificate issuer: /CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Certificate serial: 01A0DFF33A38327480EC9E5DFA909DD69FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
Manifest number: 1837
Signing time: Sat 26 Sep 2026 23:00:54 +0000
Manifest this update: Sat 26 Sep 2026 23:00:54 +0000
Manifest next update: Sun 27 Sep 2026 23:00:54 +0000
Files and hashes: 1: 8vMvZJ6S4wIvSeidLWIqXdB2xEU.roa (hash: YSfZ6yHjbJE8NoHQ6iqadOGUmWSZLkJjEKtjGtKNsbU=)
2: s7a21-XdDDKPbOr36enA0cuMHSI.crl (hash: 8hnHTX5yaNhjuZyCqhl9zYkqn+8TN27Ar1EmNf9n3KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f3:3a:38:32:74:80:ec:9e:5d:fa:90:9d:d6:9f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Validity
Not Before: Sep 26 23:00:54 2026 GMT
Not After : Sep 27 23:00:54 2026 GMT
Subject: CN=2edbd63fd6e7969df7fdc8d92b266f77c632fef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:55:61:c0:9b:01:80:8b:c0:46:77:07:39:17:
e4:f7:24:75:20:b6:5d:22:7f:0f:2f:c9:bf:dc:d7:
10:0c:18:8a:de:1b:f9:33:a9:de:1f:f6:86:4a:bd:
f5:de:b9:92:d5:a9:cf:b6:a8:b1:cb:58:65:fe:d0:
23:44:a4:c5:91:2c:0b:d0:a5:bb:6c:5c:da:10:05:
0a:8b:f5:3a:bf:e0:ff:21:bb:1c:f3:71:39:a7:7f:
98:81:b2:5c:0e:16:39:b8:58:ce:49:c7:85:e0:e3:
8f:e9:4d:08:2e:df:1e:c2:96:9f:37:96:9b:e6:57:
da:31:45:b0:12:56:d0:21:72:e9:d3:64:6d:e3:2d:
f6:47:db:db:18:b0:5d:35:85:29:63:23:9f:48:5f:
61:d4:9d:e0:46:86:a3:4d:7f:18:d1:91:1b:d3:54:
a3:02:e1:2d:b3:90:f5:4a:e6:53:a4:4d:ff:42:86:
5a:1b:11:5b:77:4e:ce:1d:e8:2a:7d:34:83:c6:15:
f1:79:a3:0e:13:bf:5c:39:2d:94:14:2e:54:36:a6:
46:34:4a:2e:9b:7f:1e:ea:02:a3:7a:05:2b:26:0d:
e6:61:43:66:05:83:1f:75:76:47:8e:dd:82:dc:c7:
90:f5:50:92:5e:28:5e:2d:4a:d7:63:c9:f8:d1:87:
f6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DB:D6:3F:D6:E7:96:9D:F7:FD:C8:D9:2B:26:6F:77:C6:32:FE:F0
X509v3 Authority Key Identifier:
keyid:B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2d:7d:40:2a:0e:29:44:70:3e:83:f5:a5:cc:3d:02:97:d4:
7c:ed:09:7a:4c:2c:ea:dc:e4:37:cd:fe:25:cb:e4:cc:62:d3:
0c:cd:50:f9:32:55:b3:78:93:e4:5a:cd:9e:18:de:d1:88:5c:
03:f8:07:62:4b:2b:12:af:05:a8:84:12:5e:94:62:ba:24:af:
77:c5:b0:88:0b:8c:2f:d6:fa:60:32:6d:18:ab:47:13:83:36:
85:70:39:ce:6f:ee:eb:79:94:5d:07:26:0a:a0:bc:1e:c8:5b:
9e:11:6e:62:9a:61:bb:2f:19:72:fc:33:83:62:ff:56:fb:10:
43:bc:d9:5c:24:0f:6b:c8:94:de:a4:54:86:e9:41:77:f9:83:
ba:cf:b0:91:8b:5a:ec:d7:62:3a:65:43:34:30:3d:7c:a2:f6:
e8:38:04:ec:28:f4:be:22:49:ef:88:df:9d:74:ef:f3:6e:da:
e2:1e:1d:00:70:e8:c9:35:0b:75:8e:15:11:0f:d6:c1:96:0d:
68:dc:91:d5:2e:f2:b4:23:b9:ce:0e:eb:08:00:e1:58:bf:34:
95:2a:36:dd:b9:32:9a:f8:46:22:2e:38:9c:65:6f:bb:56:6e:
00:c5:14:9a:f3:b7:08:af:f4:07:86:8a:73:78:51:f4:c6:3c:
fb:4e:92:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:11:13 2026 by rpki-client