Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
File: s7a21-XdDDKPbOr36enA0cuMHSI.mft (raw, json)
Hash identifier: hlG6rMUY6uKJG/GDiBPckJ5IUi7IQGY9/bZSDe9sq3Y=
Subject key identifier: C9:C5:7A:11:0D:97:A3:24:23:1F:23:5A:7F:C0:DA:FB:E7:F0:F5:59
Authority key identifier: B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
Certificate issuer: /CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Certificate serial: 01A06E03359C5B2144D8359852FFB612B1C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
Manifest number: 17FC
Signing time: Fri 04 Sep 2026 20:01:39 +0000
Manifest this update: Fri 04 Sep 2026 20:01:39 +0000
Manifest next update: Sat 05 Sep 2026 20:01:39 +0000
Files and hashes: 1: 8vMvZJ6S4wIvSeidLWIqXdB2xEU.roa (hash: YSfZ6yHjbJE8NoHQ6iqadOGUmWSZLkJjEKtjGtKNsbU=)
2: s7a21-XdDDKPbOr36enA0cuMHSI.crl (hash: fJP+MYEHz5wFGVsBFA0rUuTAcBnGYeHCt8ZRwm+tc/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:03:35:9c:5b:21:44:d8:35:98:52:ff:b6:12:b1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Validity
Not Before: Sep 4 20:01:39 2026 GMT
Not After : Sep 5 20:01:39 2026 GMT
Subject: CN=c9c57a110d97a324231f235a7fc0dafbe7f0f559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:1e:a4:b4:19:60:ff:24:70:6c:13:28:9d:
9c:b8:77:d9:89:b7:db:20:67:5a:19:93:56:eb:47:
16:86:30:5f:3d:a8:5c:cb:71:7e:8e:e4:6d:2f:b0:
69:1e:47:61:71:83:27:e2:9c:17:0f:dc:c5:d5:67:
71:54:ea:09:71:a0:91:9a:88:8f:69:2b:fd:f3:58:
20:43:8e:82:97:5b:2e:c9:4d:4f:09:78:48:fe:b7:
fe:ee:e5:06:8b:22:8a:c2:28:9a:90:e2:1e:e6:bd:
e4:83:04:3f:56:b5:a5:9f:34:35:a0:1a:20:98:60:
25:8c:de:c6:ed:0f:bc:87:e2:a2:32:75:4e:fd:72:
2b:26:54:33:71:7c:e2:00:2b:58:ee:4e:e9:db:12:
f0:09:61:43:80:75:2b:84:ed:57:86:b9:73:45:18:
d9:f7:e3:33:48:f0:c2:a4:de:78:1d:8a:f5:0a:ea:
fc:69:b2:a4:84:c6:09:7e:59:15:e0:07:07:fe:c1:
bc:cd:94:1e:88:70:ae:bf:d0:94:b5:7c:76:70:d0:
72:6c:d4:39:5f:48:c7:c9:96:b2:58:06:73:8b:16:
41:cf:26:0c:0f:27:a8:81:23:26:16:41:78:b0:76:
e4:03:ef:8b:71:23:99:91:2e:28:27:30:e0:dd:8b:
5d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C5:7A:11:0D:97:A3:24:23:1F:23:5A:7F:C0:DA:FB:E7:F0:F5:59
X509v3 Authority Key Identifier:
keyid:B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:cc:4d:75:f5:32:fa:35:be:30:5d:81:43:a9:1b:2b:d9:b8:
fb:27:bf:9b:ca:61:2e:d0:80:bc:2c:9f:96:75:ae:e2:9e:43:
77:49:8b:9f:01:07:96:87:5a:be:95:60:7f:a4:53:2f:e1:10:
50:eb:e2:2a:bb:07:0b:e7:34:eb:c2:cc:ef:25:84:0d:ac:07:
d4:23:14:74:90:62:99:4f:0c:b9:80:13:8d:76:69:5d:8a:76:
5c:76:31:d6:b2:3e:c0:5d:f0:4a:0e:86:84:e6:19:04:c6:5d:
78:8f:f7:74:ea:38:6d:f4:9a:42:61:65:b7:83:2d:49:df:cb:
7e:6f:4b:b4:a9:7f:1f:6b:83:a2:8f:90:9c:17:c7:73:b2:9e:
e8:77:55:1f:5a:06:b8:4b:2b:6c:08:20:b9:af:4b:fb:9c:fc:
6e:30:2a:5c:c1:e5:0a:92:44:d2:18:b4:a3:6b:e9:0c:d2:cd:
0d:0a:db:a3:3d:0a:17:4a:63:be:d7:4e:5b:17:5e:fb:b3:b5:
a9:32:f9:f8:2c:4c:87:96:60:5a:f2:d7:fd:b1:4b:26:89:68:
c6:cf:c4:6e:a8:d3:0d:ee:2d:c3:0d:fc:0e:87:46:32:06:97:
26:91:38:f8:8f:03:14:94:d5:f8:e4:69:39:60:20:d5:3d:cc:
02:ae:c2:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBuAzWcWyFE2DWYUv+2ErHBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYjZiNmQ3ZTVkZDBjMzI4ZjZjZWFmN2U5ZTljMGQxY2I4
YzFkMjIwHhcNMjYwOTA0MjAwMTM5WhcNMjYwOTA1MjAwMTM5WjAzMTEwLwYDVQQD
EyhjOWM1N2ExMTBkOTdhMzI0MjMxZjIzNWE3ZmMwZGFmYmU3ZjBmNTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8sepLQZYP8kcGwTKJ2cuHfZibfb
IGdaGZNW60cWhjBfPahcy3F+juRtL7BpHkdhcYMn4pwXD9zF1WdxVOoJcaCRmoiP
aSv981ggQ46Cl1suyU1PCXhI/rf+7uUGiyKKwiiakOIe5r3kgwQ/VrWlnzQ1oBog
mGAljN7G7Q+8h+KiMnVO/XIrJlQzcXziACtY7k7p2xLwCWFDgHUrhO1XhrlzRRjZ
9+MzSPDCpN54HYr1Cur8abKkhMYJflkV4AcH/sG8zZQeiHCuv9CUtXx2cNBybNQ5
X0jHyZayWAZzixZBzyYMDyeogSMmFkF4sHbkA++LcSOZkS4oJzDg3YtdQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnFehENl6MkIx8jWn/A2vvn8PVZMB8GA1UdIwQY
MBaAFLO2ttfl3Qwyj2zq9+npwNHLjB0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczdhMjEtWGREREtQYk9yMzZlbkEwY3VNSFNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yZDc5NDYtZGI4Yi00YTU3LWE3MGIt
MjA3MTU0NmI3MGY5LzEvczdhMjEtWGREREtQYk9yMzZlbkEwY3VNSFNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yZDc5NDYtZGI4Yi00YTU3LWE3MGItMjA3MTU0NmI3MGY5
LzEvczdhMjEtWGREREtQYk9yMzZlbkEwY3VNSFNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcxNdfUy
+jW+MF2BQ6kbK9m4+ye/m8phLtCAvCyflnWu4p5Dd0mLnwEHlodavpVgf6RTL+EQ
UOviKrsHC+c068LM7yWEDawH1CMUdJBimU8MuYATjXZpXYp2XHYx1rI+wF3wSg6G
hOYZBMZdeI/3dOo4bfSaQmFlt4MtSd/Lfm9LtKl/H2uDoo+QnBfHc7Ke6HdVH1oG
uEsrbAggua9L+5z8bjAqXMHlCpJE0hi0o2vpDNLNDQrboz0KF0pjvtdOWxde+7O1
qTL5+CxMh5ZgWvLX/bFLJoloxs/EbqjTDe4tww38DodGMgaXJpE4+I8DFJTV+ORp
OWAg1T3MAq7CxQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:31:31 2026 by rpki-client