Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.mft
File: s7WnVE-7mHmAo_8ccevz-xz2rJ4.mft (raw, json)
Hash identifier: 5jL4YHEVvrqLjW5mORwgA6FiBHfboM/FcHdBNTczYfI=
Subject key identifier: 8F:B3:5D:05:40:28:4E:E3:D5:AF:5A:E9:62:17:46:3E:6F:97:3A:8C
Authority key identifier: B3:B5:A7:54:4F:BB:98:79:80:A3:FF:1C:71:EB:F3:FB:1C:F6:AC:9E
Certificate issuer: /CN=b3b5a7544fbb987980a3ff1c71ebf3fb1cf6ac9e
Certificate serial: 01A0E92DBF6D91DA7D0BBD887A4C1E6E66FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7WnVE-7mHmAo_8ccevz-xz2rJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.mft
Manifest number: F2
Signing time: Mon 28 Sep 2026 18:01:24 +0000
Manifest this update: Mon 28 Sep 2026 18:01:24 +0000
Manifest next update: Tue 29 Sep 2026 18:01:24 +0000
Files and hashes: 1: AlGAx9Fl6hfEZYbR82KN63CXdsA.asa (hash: dmP6VBHZrQsaHkli3FETSb10i/VF3suE+WLsSAtxktk=)
2: CJWICYUF8PQfPfv_l-YsbRABMGA.roa (hash: ckHVpf/nWip1+cSgGyvEj2vXDYp/OYjzyt+VU9SRBuw=)
3: s7WnVE-7mHmAo_8ccevz-xz2rJ4.crl (hash: ak593j+aK/IJZG8OWjRsfXGtb4mjQLvG177irL+7j6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7WnVE-7mHmAo_8ccevz-xz2rJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2d:bf:6d:91:da:7d:0b:bd:88:7a:4c:1e:6e:66:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b5a7544fbb987980a3ff1c71ebf3fb1cf6ac9e
Validity
Not Before: Sep 28 18:01:24 2026 GMT
Not After : Sep 29 18:01:24 2026 GMT
Subject: CN=8fb35d0540284ee3d5af5ae96217463e6f973a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a3:36:9d:9c:cb:21:1e:91:c3:05:02:65:9f:
f0:ad:83:02:40:f3:76:b6:d7:b6:8e:51:c8:30:c7:
9a:9b:05:9d:72:ae:ae:1b:23:5b:ae:74:99:7e:4b:
6e:d3:93:23:da:75:e6:8b:52:86:9e:c6:27:7a:c5:
b1:b5:fb:f1:17:12:f4:cb:51:3d:c5:4f:ea:89:26:
d8:b9:bc:76:59:0b:6d:c1:2f:d9:7c:c1:fe:2c:34:
b6:ec:f8:1e:18:58:0b:52:64:d7:f3:f5:83:a0:79:
ee:cf:29:ac:e6:17:b0:a7:bb:99:35:f3:26:a0:57:
8a:d1:5f:69:54:14:0c:59:a4:94:2e:66:02:99:27:
7e:53:9d:87:85:61:6d:89:50:00:13:42:7e:29:66:
48:c3:a1:34:f6:13:fe:ea:1b:dd:49:4f:b8:b7:39:
7b:07:e6:32:65:03:e8:53:fd:b3:1d:9b:96:69:08:
f6:de:66:d6:53:7a:7b:b9:4b:21:b0:df:b5:3c:69:
83:a2:55:13:c4:a0:1c:05:af:69:84:07:69:35:60:
4e:98:ca:52:cd:31:ba:ad:e2:63:9d:72:d5:d1:36:
57:51:28:82:16:09:cd:89:e5:9e:e5:52:f7:32:cc:
f0:54:4b:0b:67:af:08:99:71:38:13:3c:a9:ba:91:
93:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B3:5D:05:40:28:4E:E3:D5:AF:5A:E9:62:17:46:3E:6F:97:3A:8C
X509v3 Authority Key Identifier:
keyid:B3:B5:A7:54:4F:BB:98:79:80:A3:FF:1C:71:EB:F3:FB:1C:F6:AC:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7WnVE-7mHmAo_8ccevz-xz2rJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b8:f8:77:ef:bd:66:8a:94:b3:fc:09:20:c4:5f:72:1f:8d:
18:6c:fc:0d:f1:4b:ef:44:1d:47:03:a3:b4:22:f4:d4:d5:9a:
7c:c7:f4:80:82:c6:9e:57:52:4c:8c:9a:95:93:43:8a:62:f2:
06:10:37:87:7a:71:46:f2:ff:21:e0:a4:73:dd:44:ec:a7:33:
7c:42:37:15:6b:75:82:51:d7:aa:d0:b4:6c:51:71:fa:79:64:
52:e4:4c:32:dd:69:4e:30:80:8a:29:da:12:22:50:80:6e:4e:
8f:07:25:65:31:1d:7c:1f:a1:f3:f2:6e:5a:3c:e8:95:97:1b:
4e:91:9e:21:08:56:78:d4:e0:b9:d0:b5:ef:41:8e:db:d4:84:
94:91:fd:3b:30:91:cc:9d:5a:e4:c4:77:9b:16:67:15:86:3e:
5f:dd:58:d3:c1:64:fb:f6:75:3c:82:f7:45:73:0e:16:f4:62:
50:52:e3:ce:5a:23:93:cd:e4:3b:80:d3:98:28:56:de:5d:e8:
c0:4d:c5:9c:03:58:5a:65:27:6e:1d:ae:8d:88:3b:52:4b:ea:
db:b7:5c:d8:2a:74:a5:15:90:4d:bc:91:98:86:23:12:bc:33:
8c:fc:83:be:57:c3:1e:dd:6b:3f:31:63:26:86:2c:67:65:23:
fd:fa:8a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:31:34 2026 by rpki-client