Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
File: s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft (raw, json)
Hash identifier: dZGrtX4aFCHgzqM0FhcyCE8iBR+0T6nDGBIjnFByV/4=
Subject key identifier: 4B:24:1A:D3:DA:82:67:CE:39:74:D9:E5:D5:74:3F:6D:BD:3B:79:98
Authority key identifier: B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25
Certificate issuer: /CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
Certificate serial: 019D32D0F168AD4452DF61272B4C2421F559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
Manifest number: 0DE5
Signing time: Sat 28 Mar 2026 05:00:47 +0000
Manifest this update: Sat 28 Mar 2026 05:00:47 +0000
Manifest next update: Sun 29 Mar 2026 05:00:47 +0000
Files and hashes: 1: h5TBAsD0PIrK8ZbXvXzmuZYvjfc.roa (hash: vh2mYfpn9jYyEFKZRDPA3enKaVdAJO56xPGBRHR7x4E=)
2: s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl (hash: X5N6j/zonSxmNLMy0jVi2nouGEItK3fW8IPPVvI9qq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d0:f1:68:ad:44:52:df:61:27:2b:4c:24:21:f5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
Validity
Not Before: Mar 28 05:00:47 2026 GMT
Not After : Mar 29 05:00:47 2026 GMT
Subject: CN=4b241ad3da8267ce3974d9e5d5743f6dbd3b7998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c0:45:92:03:5d:50:6c:fe:25:18:32:ff:b0:
3f:fc:2b:ad:45:50:ef:f1:d6:9c:78:8d:2d:e7:8f:
6e:23:74:cf:9e:9d:7c:24:69:a7:59:3b:c1:ba:a5:
b4:2c:d0:9d:c3:78:98:1e:bc:08:98:9a:5d:75:17:
76:b2:8b:bc:91:41:b2:a4:56:15:75:a8:3b:3c:42:
fa:24:11:e1:5b:2a:7a:d2:65:94:16:6f:ab:2f:71:
38:52:ca:3b:3c:92:94:23:35:35:94:89:53:ed:99:
97:90:d5:0d:e4:c5:f1:a8:0c:30:e4:9c:68:0c:f7:
40:1a:23:cb:85:6d:f7:b4:5e:c4:9c:28:61:5b:95:
2e:83:77:0f:98:91:90:21:6e:37:a4:28:f4:69:1b:
c7:78:d9:a1:63:76:14:97:3d:d8:04:a3:06:e3:36:
68:b7:f3:82:21:28:01:27:93:8c:93:55:e7:ff:b1:
72:a8:ea:92:4c:80:2d:8d:70:43:ec:37:a5:27:bd:
eb:b0:6e:88:ef:9a:b1:94:af:5c:07:3a:02:9b:43:
31:55:c1:35:0e:2c:30:6c:70:9e:35:a2:51:46:88:
ab:1b:95:b5:4f:b1:a0:f7:77:1e:9c:e9:a0:e5:52:
3c:b8:84:7a:09:1c:1a:4f:62:84:b3:94:08:70:7a:
57:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:24:1A:D3:DA:82:67:CE:39:74:D9:E5:D5:74:3F:6D:BD:3B:79:98
X509v3 Authority Key Identifier:
keyid:B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:09:16:a4:00:c4:b5:15:f6:0f:5e:92:58:c5:42:34:3f:07:
7f:a5:86:55:53:3b:26:3c:43:5f:26:79:f8:75:60:d3:2e:e9:
38:fb:d0:a9:41:80:95:85:7a:46:89:55:c6:70:8f:2c:f4:0c:
37:36:07:dc:9d:85:05:5f:77:c4:2d:78:5f:d8:4a:e5:42:69:
9e:f9:ef:b5:95:1e:d0:5a:fe:a2:af:19:61:18:13:5d:6c:d4:
1e:d5:c1:82:98:c9:23:15:f9:b1:ff:f1:2e:23:2c:0b:b4:57:
72:b5:b6:c0:64:ea:f2:49:55:68:48:5a:91:74:e4:f2:83:c3:
04:28:86:eb:e7:ee:04:42:12:f8:9d:c8:69:b8:31:34:61:9b:
b8:4c:e2:ac:8c:bb:62:57:d1:14:34:c6:21:62:0c:69:ed:a7:
46:66:9c:bc:2e:1d:3c:e6:ed:79:5e:2c:ad:a1:bd:b1:c9:0f:
41:89:77:ed:dc:d9:6e:d0:e9:dc:da:ca:8c:3e:e2:48:da:c7:
92:44:56:0d:f3:6e:25:39:ee:ae:3e:70:9e:ae:df:84:65:c7:
3c:74:83:a0:8a:13:e5:17:b0:fe:15:50:99:71:88:c3:5a:7c:
99:27:84:81:a9:7c:d1:35:e9:c3:a1:b8:1a:99:2a:11:ae:49:
f3:5b:63:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0y0PForURS32EnK0wkIfVZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYjVkMmI0M2FjYzBkOWYwN2FhMDBhYTkwZjAyNWM5NmQ1
Y2VjMjUwHhcNMjYwMzI4MDUwMDQ3WhcNMjYwMzI5MDUwMDQ3WjAzMTEwLwYDVQQD
Eyg0YjI0MWFkM2RhODI2N2NlMzk3NGQ5ZTVkNTc0M2Y2ZGJkM2I3OTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsBFkgNdUGz+JRgy/7A//CutRVDv
8daceI0t549uI3TPnp18JGmnWTvBuqW0LNCdw3iYHrwImJpddRd2sou8kUGypFYV
dag7PEL6JBHhWyp60mWUFm+rL3E4Uso7PJKUIzU1lIlT7ZmXkNUN5MXxqAww5Jxo
DPdAGiPLhW33tF7EnChhW5Uug3cPmJGQIW43pCj0aRvHeNmhY3YUlz3YBKMG4zZo
t/OCISgBJ5OMk1Xn/7FyqOqSTIAtjXBD7DelJ73rsG6I75qxlK9cBzoCm0MxVcE1
DiwwbHCeNaJRRoirG5W1T7Gg93cenOmg5VI8uIR6CRwaT2KEs5QIcHpX1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEskGtPagmfOOXTZ5dV0P229O3mYMB8GA1UdIwQY
MBaAFLO10rQ6zA2fB6oAqpDwJcltXOwlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczdYU3REck1EWjhIcWdDcWtQQWx5VzFjN0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wYTkyZGYtYzUwOS00ZTkyLThlMmIt
MjRiOGMwMmZhODJhLzEvczdYU3REck1EWjhIcWdDcWtQQWx5VzFjN0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8wYTkyZGYtYzUwOS00ZTkyLThlMmItMjRiOGMwMmZhODJh
LzEvczdYU3REck1EWjhIcWdDcWtQQWx5VzFjN0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtQkWpADE
tRX2D16SWMVCND8Hf6WGVVM7JjxDXyZ5+HVg0y7pOPvQqUGAlYV6RolVxnCPLPQM
NzYH3J2FBV93xC14X9hK5UJpnvnvtZUe0Fr+oq8ZYRgTXWzUHtXBgpjJIxX5sf/x
LiMsC7RXcrW2wGTq8klVaEhakXTk8oPDBCiG6+fuBEIS+J3IabgxNGGbuEzirIy7
YlfRFDTGIWIMae2nRmacvC4dPObteV4sraG9sckPQYl37dzZbtDp3NrKjD7iSNrH
kkRWDfNuJTnurj5wnq7fhGXHPHSDoIoT5Rew/hVQmXGIw1p8mSeEgal80TXpw6G4
GpkqEa5J81tj7g==
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:24:57 2026 by rpki-client