Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
File: s7b1TqmxWovU8zglOGyyd7A0Od0.mft (raw, json)
Hash identifier: KeO5QWiWMGqj4xLPnWF014DZuCczgkuHv4akTZCBHYQ=
Subject key identifier: FE:2B:2D:30:03:9D:9B:8C:B8:51:49:50:2A:93:92:9F:F3:37:4F:F1
Authority key identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
Certificate issuer: /CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Certificate serial: 019D254CA66FBA105F820F64BAF3780A2F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
Manifest number: 188D
Signing time: Wed 25 Mar 2026 14:01:13 +0000
Manifest this update: Wed 25 Mar 2026 14:01:13 +0000
Manifest next update: Thu 26 Mar 2026 14:01:13 +0000
Files and hashes: 1: aftA-bCSN_cfnaumewln08mRqyk.roa (hash: ewCgfj5ZHQWWUV5zhZ6e7KdXcICBairndqt6imFYbD4=)
2: s7b1TqmxWovU8zglOGyyd7A0Od0.crl (hash: uHw6V27mWyZ1LrSm19mJzBR/IkFSDirGeltfXFPapQs=)
3: sHSL6KeWD6muqNxIvHz053KucUs.asa (hash: Dii9+VgXhOO/o5gmGbq2K3cC3ucJXOQeg7Dp4dNWbSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:a6:6f:ba:10:5f:82:0f:64:ba:f3:78:0a:2f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Validity
Not Before: Mar 25 14:01:13 2026 GMT
Not After : Mar 26 14:01:13 2026 GMT
Subject: CN=fe2b2d30039d9b8cb85149502a93929ff3374ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:93:19:ae:ab:9d:70:ba:84:27:87:31:fc:72:
b9:c3:be:9a:d4:47:5c:34:7b:62:3a:df:32:16:ee:
45:ba:d4:6e:15:eb:37:bd:83:74:ab:2d:5e:b5:f2:
47:00:02:b1:21:ea:c8:0e:62:93:7d:ed:c5:6b:1c:
df:7e:70:95:85:db:61:50:67:82:92:80:51:8b:52:
5a:f6:d0:4f:25:91:a7:6e:5e:b9:6f:a7:bf:0e:d6:
12:e5:68:8d:94:f0:dd:42:8f:cd:55:1c:cd:b2:65:
73:80:dc:66:a1:a1:09:56:c4:71:4f:13:ef:be:83:
5a:87:7d:f1:2f:d6:69:63:a2:1b:0c:bc:fe:28:f7:
fd:b7:4d:b0:2c:c5:a5:74:4e:78:44:53:01:81:c9:
c6:2e:b1:3a:3e:94:40:16:ea:76:e8:99:7f:90:2b:
c5:6c:62:58:90:1c:ce:6c:96:62:88:08:44:5d:31:
62:28:4b:e2:cc:46:42:b7:a8:de:f1:f5:15:4a:dc:
df:bc:77:10:1b:b3:f2:86:ac:66:5c:43:e1:8e:be:
c7:b5:cd:56:2c:fd:74:7e:75:04:45:11:21:9b:05:
48:3e:a2:82:40:8c:49:f2:57:c6:66:d5:5c:27:eb:
8d:d8:f3:73:a1:5e:65:8f:94:86:4a:9d:33:06:38:
f2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2B:2D:30:03:9D:9B:8C:B8:51:49:50:2A:93:92:9F:F3:37:4F:F1
X509v3 Authority Key Identifier:
keyid:B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4c:4e:9c:8d:4f:3d:81:9a:bf:82:44:09:c2:7f:65:ad:48:
f3:c1:c8:d2:51:98:f0:74:c0:cf:ab:21:6c:6d:3a:c1:8f:30:
6e:77:9d:80:d2:5b:91:86:88:95:f3:89:65:a0:e8:75:4d:81:
16:e4:8f:b2:da:6a:56:46:06:c0:09:3d:3a:40:a1:63:e1:3e:
ea:d8:72:e1:62:d7:24:94:31:93:96:4a:81:00:53:38:8c:79:
c0:41:42:f7:fe:2e:2c:57:96:b4:94:63:b7:4a:b9:e5:67:61:
2d:02:8f:e1:00:8d:f9:f9:e5:9a:0a:09:76:b7:4b:b9:aa:7d:
e1:09:f0:59:29:c8:f0:8e:ec:0a:a1:40:c0:2f:7e:9f:e2:3f:
93:cd:8f:23:76:72:aa:86:1e:04:56:1a:65:da:fc:18:13:70:
7b:84:cb:bc:a2:26:94:70:f0:f7:68:61:6d:f4:95:b0:fb:b0:
77:e7:45:ed:7f:d3:4d:eb:9c:ed:b0:22:6d:8d:82:c9:c3:55:
1d:84:69:80:98:d8:f1:40:34:2a:2c:cd:d3:40:31:8c:6e:af:
13:3b:f9:6a:88:ee:2a:b4:cd:d7:bc:0e:49:cd:95:4a:b2:37:
6f:8a:20:3c:73:9f:fd:f8:25:fa:f5:8c:cc:20:d8:92:a1:a2:
e0:67:01:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:14:19 2026 by rpki-client