Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
File: s7b1TqmxWovU8zglOGyyd7A0Od0.mft (raw, json)
Hash identifier: zJYvLRqLsMTwhU/1vozvW2Rsa9dtc8Ijp2vUKSIRCU4=
Subject key identifier: 40:F6:70:67:8B:F6:CE:F3:43:47:08:6F:7D:AF:18:EE:BE:15:43:31
Authority key identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
Certificate issuer: /CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Certificate serial: 019E1D224B7F900FD57CB8D444BDCAEE4974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
Manifest number: 190E
Signing time: Tue 12 May 2026 17:00:46 +0000
Manifest this update: Tue 12 May 2026 17:00:46 +0000
Manifest next update: Wed 13 May 2026 17:00:46 +0000
Files and hashes: 1: 1--FRY1CjawLnslfsBcAkrouqU6s.asa (hash: NFM53UpFWBl2wcWeqeLFtEIb13ge6QGgn48A2dxQblk=)
2: aftA-bCSN_cfnaumewln08mRqyk.roa (hash: ewCgfj5ZHQWWUV5zhZ6e7KdXcICBairndqt6imFYbD4=)
3: s7b1TqmxWovU8zglOGyyd7A0Od0.crl (hash: gSM3Ye4ugiXhl23812dTjgAw8L5UM/OlH+ZSR49WN8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:4b:7f:90:0f:d5:7c:b8:d4:44:bd:ca:ee:49:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Validity
Not Before: May 12 17:00:46 2026 GMT
Not After : May 13 17:00:46 2026 GMT
Subject: CN=40f670678bf6cef34347086f7daf18eebe154331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e8:53:ba:f5:b6:16:f4:de:71:17:80:04:9b:
3b:07:1b:24:97:e2:d5:4c:3d:47:c6:18:b9:2b:af:
5d:e2:5c:53:b4:65:13:f3:3e:99:67:a1:8d:fa:88:
e8:18:9a:72:6c:a7:37:fe:40:72:00:46:d5:43:f4:
99:d3:c3:fd:16:3d:eb:8c:95:bb:75:fb:ad:d2:0f:
67:2b:f5:b4:39:66:7b:40:04:b3:da:a6:5a:ab:2d:
95:23:fd:aa:1f:e4:cb:87:93:89:01:9c:a6:bc:58:
0f:c5:45:2b:8a:f1:3f:f6:29:25:9c:a3:1b:d6:2d:
e8:24:1f:df:03:30:85:b4:43:cf:c5:45:6f:6b:00:
c7:8e:8b:5a:fe:61:ee:4c:3d:ec:63:3b:ed:86:64:
4f:2a:14:14:a9:58:de:f2:57:9d:0b:26:e2:ae:38:
54:24:e8:08:b2:e7:67:12:ce:9f:f8:f4:82:f7:ed:
1b:62:b4:31:23:12:f9:f0:be:d4:a6:be:e7:8d:e6:
0b:3d:72:a1:c3:78:92:ad:60:1c:aa:f9:18:4a:28:
38:0c:4f:8f:df:95:d0:82:84:18:30:d5:79:bf:9a:
5a:c2:1a:68:58:aa:64:61:0a:63:87:5a:58:19:0f:
4e:e1:53:aa:7f:6a:ce:e0:d3:c5:52:5e:36:32:11:
63:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F6:70:67:8B:F6:CE:F3:43:47:08:6F:7D:AF:18:EE:BE:15:43:31
X509v3 Authority Key Identifier:
keyid:B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c6:f0:16:b9:cc:14:03:05:51:ef:71:a4:e4:f7:9e:a9:51:
c9:07:4a:a6:57:1a:e7:22:52:fa:86:54:af:73:43:e7:e1:d1:
dc:bf:80:9a:8a:df:bc:90:f6:66:3e:55:ef:4b:d5:d0:70:01:
36:f7:3e:05:b5:ba:2a:83:67:07:ce:12:c9:69:be:17:25:bd:
e2:e3:52:6e:f5:e9:05:c9:76:65:ed:9b:7b:8c:50:72:f3:a0:
80:85:fc:3b:31:4f:ee:3e:d5:b2:b5:27:45:bb:f9:4c:eb:b9:
d0:18:63:df:17:f6:b4:fd:c4:4f:f9:25:b1:81:2c:39:20:41:
08:fe:fd:e6:cd:e0:7c:bf:68:f9:7a:84:74:b2:70:42:50:37:
8d:45:0a:9e:7b:99:e9:c4:5c:6d:0b:7e:b0:57:61:4d:3c:36:
bd:f8:33:cd:1c:28:45:1f:d1:87:8e:fc:ed:e7:cb:0a:66:02:
82:20:f1:3a:a9:a7:70:bc:e3:67:71:e7:6a:d2:b3:48:2a:de:
31:5f:3b:2a:26:1e:34:66:60:bb:00:55:86:ee:9a:bc:22:5b:
2c:bc:1b:59:0a:b9:f1:8b:be:23:37:fd:64:4f:2e:1e:de:0b:
c3:23:9e:4d:ff:20:c2:37:da:56:ea:1c:d3:78:37:a2:7b:48:
d0:ac:f9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:00:30 2026 by rpki-client