Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
File: s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json)
Hash identifier: jJwF8/e0IPpqgaLXbLuyDQh7aVb3P08AZseAWA6TmRE=
Subject key identifier: 00:E2:45:3B:36:C3:74:93:1C:4B:2E:A4:66:07:96:89:D1:EA:73:33
Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
Certificate issuer: /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Certificate serial: 019F19E88EF6E286463AB3C56D9A174AA4EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 19:01:39 +0000
Manifest this update: Tue 30 Jun 2026 19:01:39 +0000
Manifest next update: Wed 01 Jul 2026 19:01:39 +0000
Files and hashes: 1: BSBTdISOwUSk76V2qhorPXUYcls.roa (hash: gMCNavqIUpRgqrn5vcMqwPcSr1Q6xSaeOjz/QGd0jJc=)
2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: uOQpQUMfn+96qwhD+MzTlv9USe/a3Qu8na4S7w3f9D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:e8:8e:f6:e2:86:46:3a:b3:c5:6d:9a:17:4a:a4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Validity
Not Before: Jun 30 19:01:39 2026 GMT
Not After : Jul 1 19:01:39 2026 GMT
Subject: CN=00e2453b36c374931c4b2ea466079689d1ea7333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ec:15:42:d0:1a:b7:8d:1a:03:7d:4d:97:14:
6f:36:28:be:e0:c5:10:76:d8:e6:f0:54:fe:df:98:
63:7e:b9:25:4a:76:33:e2:0c:d6:c7:56:06:ba:0b:
93:21:4f:52:73:f1:f3:f5:c0:1a:31:58:ab:a9:92:
2b:95:a7:17:9c:a1:9f:78:a5:b1:ac:31:3d:1b:3e:
27:60:92:b9:ac:3c:da:e6:6a:a0:55:80:2f:24:40:
b3:37:e2:51:f9:66:36:97:89:6a:63:7c:c5:32:f0:
39:6e:57:20:47:13:e3:c2:8e:fb:36:68:56:9c:c1:
b6:62:11:ed:ca:3c:9d:14:4c:b3:a6:a4:90:68:60:
54:12:15:2c:74:ee:2e:16:13:0d:b9:4f:cc:b6:29:
f1:83:29:2f:80:50:98:ad:72:50:28:b4:b3:4e:dd:
27:07:b6:0c:11:7b:07:89:da:8e:8b:2b:7a:b0:35:
44:1c:7a:a4:65:81:68:c5:be:ab:6e:04:03:10:2a:
3f:d8:62:6f:16:f0:38:3a:48:5c:41:5e:ee:18:78:
6a:75:9f:2e:8d:2e:7b:07:93:8f:42:6d:9b:09:ce:
c6:69:e5:27:0d:1d:d6:32:64:2f:59:1c:5b:d2:98:
af:03:d9:4d:df:ce:3a:c2:e7:dc:c2:9a:a5:18:c1:
f4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E2:45:3B:36:C3:74:93:1C:4B:2E:A4:66:07:96:89:D1:EA:73:33
X509v3 Authority Key Identifier:
keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:21:ef:a3:aa:95:82:1f:5f:51:ba:4f:25:a0:2f:eb:ed:df:
c1:8a:26:82:f7:68:75:b8:fd:00:ee:68:75:dd:c0:6b:6b:3a:
2c:ad:74:17:a2:37:fa:ef:78:a2:8b:e1:0b:b9:0c:8c:1c:ef:
ee:00:1a:90:c4:07:be:c8:c0:50:94:d2:5d:72:d4:88:62:c2:
18:b4:7c:94:0b:57:18:92:06:b3:f6:21:43:0d:85:4c:c8:a0:
cc:b3:d3:40:fc:cc:e4:53:f1:55:7d:92:94:fd:4b:14:59:86:
27:c2:f9:f3:82:89:c4:a0:98:27:89:75:dc:32:e5:d5:61:07:
72:3d:78:2b:65:af:40:9b:9a:5e:bc:08:82:b4:09:9a:5b:68:
16:c5:56:df:ec:b1:4c:63:e6:3b:d4:02:ce:1c:83:d6:25:39:
06:4b:56:42:63:cc:5f:b7:63:d3:be:9b:39:73:fb:f6:61:07:
49:50:ee:c5:d0:c8:e7:ea:84:08:84:28:ff:d3:3e:52:24:0c:
52:a6:21:32:82:c2:e5:fd:47:bc:f5:d8:58:41:36:69:70:cb:
0c:ea:67:56:c7:5c:9d:0d:c0:3c:f8:0a:3f:fc:03:ec:d1:f5:
93:3b:68:9e:7a:cb:d3:ef:67:53:47:5c:18:85:4e:af:e2:53:
a1:e2:90:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:39:46 2026 by rpki-client