Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
File: s7b1TqmxWovU8zglOGyyd7A0Od0.mft (raw, json)
Hash identifier: 2WltwF4Y/0TF5WK+lDFa0auooWqXuZj1Gitop8XJkts=
Subject key identifier: D5:9E:4A:27:FF:1F:97:31:CB:5D:39:43:F8:C3:F7:8F:9F:D8:E1:2F
Authority key identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
Certificate issuer: /CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Certificate serial: 019D273A9F75C0E202206BEE9629EDC781B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
Manifest number: 188E
Signing time: Wed 25 Mar 2026 23:00:46 +0000
Manifest this update: Wed 25 Mar 2026 23:00:46 +0000
Manifest next update: Thu 26 Mar 2026 23:00:46 +0000
Files and hashes: 1: aftA-bCSN_cfnaumewln08mRqyk.roa (hash: ewCgfj5ZHQWWUV5zhZ6e7KdXcICBairndqt6imFYbD4=)
2: s7b1TqmxWovU8zglOGyyd7A0Od0.crl (hash: FCh511OBMYJbyj0CzUkAzK5i5ssT7IDswXkXzs0BcWM=)
3: sHSL6KeWD6muqNxIvHz053KucUs.asa (hash: Dii9+VgXhOO/o5gmGbq2K3cC3ucJXOQeg7Dp4dNWbSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:9f:75:c0:e2:02:20:6b:ee:96:29:ed:c7:81:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Validity
Not Before: Mar 25 23:00:46 2026 GMT
Not After : Mar 26 23:00:46 2026 GMT
Subject: CN=d59e4a27ff1f9731cb5d3943f8c3f78f9fd8e12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:f0:cf:d1:1d:b5:7e:c5:5d:bb:ef:a3:a7:
15:f7:60:7e:b3:a3:6b:01:0c:2d:30:ce:dc:b2:f5:
2a:22:18:ba:10:49:44:02:ef:2d:1c:c5:1d:ed:83:
02:95:0e:79:a9:31:0b:d7:b8:44:35:0d:50:11:58:
83:b2:e7:fc:89:a7:e9:29:2f:ae:ab:b2:d1:6e:49:
0f:20:fb:d8:18:6f:b2:dc:96:47:9b:c5:1a:aa:fe:
58:3b:ef:4b:68:c9:ee:a0:a5:25:5d:6c:72:a8:0a:
44:f4:c4:6b:62:90:e5:a1:3b:e1:b8:38:b8:8f:d9:
ab:f0:25:77:25:d9:f8:f3:44:5e:b8:15:4a:40:43:
10:df:e2:0b:e2:18:a3:01:cd:eb:06:06:56:a6:ec:
85:42:35:2d:2c:7e:8b:a1:25:d3:8f:46:4d:17:50:
b8:a9:d5:04:68:7a:6b:0f:61:b5:77:f1:58:26:5e:
75:57:33:a7:c2:75:d7:29:37:cf:55:01:61:d1:0d:
ab:a2:e2:2f:19:a8:35:ea:e0:3c:96:74:81:75:38:
23:63:b7:96:2c:84:84:92:cc:c0:e8:a1:fe:c8:b8:
f9:d7:a9:14:fa:da:0c:fb:8f:90:05:c4:2d:1c:f8:
49:3d:c6:9c:42:03:ab:f5:e2:84:14:17:13:98:40:
29:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9E:4A:27:FF:1F:97:31:CB:5D:39:43:F8:C3:F7:8F:9F:D8:E1:2F
X509v3 Authority Key Identifier:
keyid:B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b9:20:7e:6c:33:56:75:4a:6b:d5:2c:c1:0b:24:0e:0b:b3:
55:0a:d1:fe:46:2f:6a:46:ed:60:0f:87:4d:2e:b8:1a:89:d4:
f7:fa:a7:09:b5:a7:b3:3e:35:cf:c2:5a:81:84:2a:ed:36:ea:
a9:9f:2b:14:a4:0a:04:af:21:08:fd:18:8c:92:5e:0f:55:7d:
60:48:56:0e:fd:ea:f4:93:e7:dd:a0:9f:18:25:d9:fe:6b:f3:
90:6c:02:1e:1d:a0:dd:cf:28:bb:92:35:86:4d:86:fe:32:a0:
b1:b8:f7:ae:e3:57:20:8e:27:d2:fc:7f:a5:8b:93:18:ae:db:
25:c5:9f:dd:25:2c:f7:e8:ff:df:e8:61:9c:03:1a:cf:f5:67:
4a:19:28:8f:f8:ac:bf:8f:d3:78:23:0e:bb:f4:02:5c:00:ca:
da:50:70:1b:c9:7b:0a:4e:3f:32:98:7b:4d:62:78:29:56:20:
e3:f3:ed:3e:f3:ef:f1:8a:f7:25:33:71:8b:98:aa:2c:7f:07:
52:37:ef:77:76:c8:00:ad:74:6a:03:d3:e8:4a:65:85:b0:95:
6e:35:d8:d4:fa:89:f4:37:dc:aa:27:ef:f4:39:9c:20:10:23:
bf:17:ae:45:b7:78:ad:93:28:f8:ec:47:f4:5a:26:0a:a6:b4:
07:67:eb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:43 2026 by rpki-client