Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
File: s7a21-XdDDKPbOr36enA0cuMHSI.mft (raw, json)
Hash identifier: DP7ZONri1s6XV09R1+Jq/PxT6fVu2OJPYLMleRMLCa0=
Subject key identifier: D1:6E:BA:4E:62:BE:AA:1B:4C:D1:E6:17:E6:1F:2F:B2:13:7A:68:9C
Authority key identifier: B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
Certificate issuer: /CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Certificate serial: 01A1DCEFD5E805C2DF3537EC94DD95AA34BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
Manifest number: 18BA
Signing time: Sun 15 Nov 2026 02:01:07 +0000
Manifest this update: Sun 15 Nov 2026 02:01:07 +0000
Manifest next update: Mon 16 Nov 2026 02:01:07 +0000
Files and hashes: 1: 8vMvZJ6S4wIvSeidLWIqXdB2xEU.roa (hash: YSfZ6yHjbJE8NoHQ6iqadOGUmWSZLkJjEKtjGtKNsbU=)
2: s7a21-XdDDKPbOr36enA0cuMHSI.crl (hash: jAlZNCs6tiwMMJo9qvpV3IaMLYOFEMA8DhNfySlg6xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:ef:d5:e8:05:c2:df:35:37:ec:94:dd:95:aa:34:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Validity
Not Before: Nov 15 02:01:07 2026 GMT
Not After : Nov 16 02:01:07 2026 GMT
Subject: CN=d16eba4e62beaa1b4cd1e617e61f2fb2137a689c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b9:2c:ef:0c:1f:43:8d:a4:e2:d1:d2:d6:40:
24:ce:b5:9c:91:44:5d:73:ed:46:68:e6:4b:63:03:
f8:66:a2:54:85:9e:57:0d:58:a2:f1:7f:7c:81:9d:
39:41:d9:45:2f:31:98:80:99:f5:be:60:67:c9:1c:
8f:d4:94:9c:b7:1a:c4:a7:1f:ff:fb:29:38:de:c5:
af:26:9a:43:d8:3b:4c:29:d6:25:e6:27:3c:32:4e:
e5:db:29:0d:d9:22:c1:16:91:62:c8:52:22:39:ea:
53:86:50:6b:24:d3:28:35:e2:10:c7:62:d1:06:15:
64:71:1a:d6:d8:d6:b6:b8:36:86:dc:d4:3f:e2:f2:
19:e2:98:9a:23:ae:b0:3a:9f:15:fe:74:30:66:04:
a3:43:73:5f:66:6f:58:9e:ff:c8:19:b6:6d:ae:1d:
53:e5:94:60:d3:67:67:83:b2:7a:cd:4a:bd:9f:0c:
a5:bf:ed:39:7c:ac:18:a7:b0:ac:25:2b:80:bf:12:
e9:4c:6e:bb:68:12:9f:7d:28:23:82:ca:51:2b:c7:
4b:77:b7:fa:e4:fb:c3:af:b8:c7:c3:ab:1d:36:a1:
4d:9b:c8:57:b0:16:1a:d6:c1:26:dd:69:5f:be:83:
de:5f:62:33:e5:4b:c6:a6:24:ae:9d:60:ce:b5:26:
67:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6E:BA:4E:62:BE:AA:1B:4C:D1:E6:17:E6:1F:2F:B2:13:7A:68:9C
X509v3 Authority Key Identifier:
keyid:B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:dc:4a:a6:69:68:69:1f:b9:e9:07:98:10:dc:02:6f:13:8a:
0b:66:5d:da:01:2e:76:ad:97:5b:18:15:73:14:e3:db:0f:80:
39:f2:55:9d:57:05:58:f2:cf:d0:8c:04:a5:03:22:77:c7:68:
f2:4d:21:d6:bb:2a:e1:9c:68:f7:bc:19:16:d7:a4:91:d6:28:
87:07:79:a6:73:26:c4:52:90:0b:22:18:9b:5f:b5:b2:ad:45:
71:4e:36:ab:69:ca:ed:84:4b:72:db:9b:45:b2:26:37:27:a6:
ef:37:4b:27:8d:6c:19:17:38:f0:82:f8:af:c7:c7:a6:61:7e:
dd:88:0f:f9:f4:8e:41:fb:ab:28:ca:3d:79:77:0b:86:a5:d2:
ed:da:97:ee:6a:9f:67:80:a8:a8:5a:53:f8:df:ca:29:ac:b4:
ef:10:98:bd:bb:5d:32:d8:ed:bc:41:fc:ae:e8:5d:f8:70:fe:
3b:de:cc:c7:a0:1c:5a:34:36:ad:d0:6b:a0:d7:81:ec:cf:04:
0e:33:c6:9d:c5:75:b3:4f:ba:be:32:a2:3b:bf:91:a8:72:2a:
01:b6:a2:46:3b:19:58:38:ee:30:6d:7f:11:3e:5a:65:97:f7:
84:fa:a1:fa:07:46:c5:68:3d:a8:99:0d:84:44:bd:27:ba:a6:
38:16:cd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:50:58 2026 by rpki-client