Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
File: s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft (raw, json)
Hash identifier: vv0AV30qsDDKzmR/z6HDNDHa9rqTRJ8UHsF8dJ9/S1Y=
Subject key identifier: 50:9A:CB:32:4A:D5:5A:DC:C1:DC:7A:1E:BD:CC:A2:B0:CB:82:2E:AF
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Certificate issuer: /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial: 019D29978B8CC8FD2C6765D46F6A90D5CB2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
Manifest number: 1891
Signing time: Thu 26 Mar 2026 10:01:30 +0000
Manifest this update: Thu 26 Mar 2026 10:01:30 +0000
Manifest next update: Fri 27 Mar 2026 10:01:30 +0000
Files and hashes: 1: 6k_8Ry46ufIMlLNL3Vyss6dmqJg.roa (hash: ckIzjsDp2tzcwJkmRuzZHNnhVct2HecFAgceUTxWQmI=)
2: F3O8-dZr8u4d-bBHpUAIaVdBxYs.roa (hash: nGzmqxCVgUOHa3kRFVvwgOvg2hHgbd0FVIdzBnCIcS8=)
3: LadvVkKu3wXT617aXlUlsKUiwvs.roa (hash: 5tkpntbZyp0kecx0i9/sz7tiG+x/tBJaYqWhzJ+ue10=)
4: bRgCnNYxProDC3XWcoK1RwC3iRo.roa (hash: TdmHYWnUww+1ilHLweinppnHuzhkh+7SLt4lxkgAHBM=)
5: gUsfRW5v6N4S4q5wR9juMArT4gY.roa (hash: 75aFyyp5OXyu2pt0nss+h3JtO3zNLiVM+h5iKxCtB54=)
6: maMxYhW9A6VAq_vow3Vq5mrJeV8.roa (hash: iGK/wAfndjwmPr7EChSqOCdboy0xOaABeT0HtMm54R8=)
7: s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl (hash: onD1DzSd7XRIExeWGVMzvSDB6/HyWzcafdjQjrFd/HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:8b:8c:c8:fd:2c:67:65:d4:6f:6a:90:d5:cb:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Validity
Not Before: Mar 26 10:01:30 2026 GMT
Not After : Mar 27 10:01:30 2026 GMT
Subject: CN=509acb324ad55adcc1dc7a1ebdcca2b0cb822eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:47:58:ed:35:c8:09:e3:f7:30:63:06:df:
d5:fb:b1:36:f1:fe:88:9d:a7:19:0d:2f:92:d7:05:
74:89:a0:50:7e:b7:39:d2:8d:51:d6:f8:87:dc:1e:
0c:00:f8:13:2f:35:4c:dd:31:9f:db:bc:21:06:89:
38:0e:b3:f0:09:6c:ad:69:3d:89:8d:5d:5a:17:0c:
8f:3b:54:af:13:c3:5c:6b:45:ae:49:e1:30:41:9a:
df:3f:a3:1c:93:01:02:4f:f2:bd:d3:9f:dd:e6:0b:
a2:49:28:05:7d:e3:b5:a0:0f:f6:fa:03:f5:d8:ea:
de:85:f6:0c:78:d0:14:fe:03:86:7b:19:74:73:85:
9e:96:4c:f5:13:09:bc:b8:fe:d4:f8:69:6e:56:85:
00:19:0b:6d:71:43:9f:1c:ea:74:07:a4:40:5a:d4:
00:23:6e:1d:b4:e3:e7:c3:aa:13:87:ea:ee:bc:1d:
ce:be:bf:e7:53:67:6e:59:92:90:5d:6f:d8:bc:d7:
54:59:aa:a2:36:5f:ba:6e:4c:60:76:8b:d7:30:5b:
9a:f7:2a:9a:a3:8a:80:c9:be:f8:f7:3c:f0:de:b6:
06:9d:50:fc:43:09:59:8e:b6:82:f8:3a:d3:bb:8e:
72:37:3d:a1:9a:c7:88:38:02:68:7a:03:ce:e0:3a:
31:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9A:CB:32:4A:D5:5A:DC:C1:DC:7A:1E:BD:CC:A2:B0:CB:82:2E:AF
X509v3 Authority Key Identifier:
keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3a:81:84:1d:99:63:6a:31:43:c8:de:47:46:21:4c:5e:5e:
50:24:75:a8:c8:ce:42:4f:69:e3:f6:b4:f5:fc:d8:76:2c:97:
d6:0c:b2:f2:30:2f:4b:eb:62:10:56:2d:dd:e5:54:be:53:31:
9f:d0:97:1d:f4:e7:60:61:22:d6:29:7a:b9:5c:45:25:c5:ae:
4e:f2:f9:08:dd:f0:79:d5:e5:e0:80:b8:09:d3:4e:44:01:f6:
5c:81:7a:b9:1a:64:88:31:69:a7:3c:85:f2:38:67:51:39:d5:
55:61:f9:62:2a:71:90:ea:4e:3a:89:03:80:ec:bd:8e:13:36:
90:2e:3f:0a:b1:48:e1:d4:cd:ba:9a:ac:cb:78:53:b8:91:d5:
2c:ba:76:87:15:73:b1:8b:21:08:3b:a3:90:c7:33:f6:44:b0:
52:a8:54:85:94:45:b9:02:ed:0e:4e:9e:99:1c:82:1c:ac:6e:
e4:c8:8c:90:60:b1:1f:0a:d6:86:b6:e8:e1:90:0f:f1:bb:ae:
cd:35:d1:22:e8:aa:2d:39:09:5b:0d:de:3e:f6:81:bc:b8:37:
4d:2f:30:7d:56:04:79:8d:91:98:cb:da:2f:d2:b6:d8:ab:b8:
74:54:4c:b7:e9:5d:56:aa:1d:ec:11:76:cd:45:27:09:77:9b:
00:2b:9a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:26:58 2026 by rpki-client