Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
File: s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json)
Hash identifier: 2Z0UxlPp4sK9TBQV/8B/nEr3r9MDpbuGeZGAmqFBg64=
Subject key identifier: 54:F2:16:2C:B0:23:60:4F:59:7F:2B:03:C7:05:69:B9:4C:D5:C5:ED
Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
Certificate issuer: /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Certificate serial: 019D390A5FC8E864B79FF9CBCE96222E6DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 10:01:14 +0000
Manifest this update: Sun 29 Mar 2026 10:01:14 +0000
Manifest next update: Mon 30 Mar 2026 10:01:14 +0000
Files and hashes: 1: BSBTdISOwUSk76V2qhorPXUYcls.roa (hash: gMCNavqIUpRgqrn5vcMqwPcSr1Q6xSaeOjz/QGd0jJc=)
2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: hJgj9oFqm/tzJVCOvuMWGRBY06Nc3RFD9N20vFbegf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:5f:c8:e8:64:b7:9f:f9:cb:ce:96:22:2e:6d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Validity
Not Before: Mar 29 10:01:14 2026 GMT
Not After : Mar 30 10:01:14 2026 GMT
Subject: CN=54f2162cb023604f597f2b03c70569b94cd5c5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:c5:c3:fc:70:7c:3c:a3:a6:af:11:ba:c5:
24:07:9f:83:52:6b:1d:3c:3d:21:ec:72:cf:d0:1e:
55:d6:e0:30:0e:45:79:af:59:18:8e:76:2f:9d:7c:
3c:5d:e3:21:11:00:d0:a8:34:e5:13:fa:9f:e9:70:
b6:1a:91:69:85:a0:84:35:71:93:49:9c:ba:43:49:
71:e0:bd:3b:86:28:e8:cc:2d:22:e4:5a:d7:7b:d6:
ce:ee:9e:e2:e5:23:c1:59:a3:fd:06:b9:c1:ee:b5:
fd:5d:49:dd:73:ad:1e:e7:76:26:55:32:d6:58:43:
85:e7:7e:5d:45:61:6d:4c:f3:28:9b:b0:5b:02:05:
25:d1:6f:01:a0:3c:ef:3e:25:19:03:76:56:f0:81:
52:61:37:34:b9:cf:1e:be:71:29:5d:94:22:77:ba:
ed:4b:cc:68:f6:20:a0:14:8a:b2:63:42:59:ed:ec:
c4:84:c0:b0:27:dc:ca:06:9a:9e:08:91:a6:26:e2:
39:7f:8c:76:f9:96:4d:44:91:e8:50:3c:4f:f8:ac:
f5:09:a3:9f:3b:bc:1e:c4:24:9f:21:71:6f:6f:ba:
e4:46:fd:2e:94:56:38:b0:cd:5c:70:ff:8c:0e:c9:
04:1f:f6:1f:67:34:43:57:d3:ee:3a:57:6e:7a:03:
ae:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F2:16:2C:B0:23:60:4F:59:7F:2B:03:C7:05:69:B9:4C:D5:C5:ED
X509v3 Authority Key Identifier:
keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:cb:41:ef:3d:f5:80:83:de:ed:44:63:c1:7f:55:75:f8:e6:
c2:72:1e:d2:3e:ae:c4:c6:83:e4:f8:04:3f:75:e3:79:d6:ff:
ff:3c:b4:04:c0:34:9c:3d:52:54:37:1a:7d:2f:1e:10:1d:e9:
57:d5:72:2c:00:5e:8a:3a:4c:98:d1:fa:d7:87:aa:99:a1:8d:
d2:74:dd:2b:41:56:b3:6e:6f:1d:a1:10:fc:e7:c9:af:48:42:
31:17:cf:5e:88:3f:0a:cd:a0:86:52:50:69:4b:70:a4:f1:52:
c5:98:b7:9f:5f:64:8a:84:66:8f:8e:8d:aa:43:71:9d:55:8c:
89:7b:5e:05:a9:f9:dd:c1:0c:ca:47:4f:6f:71:a1:01:0f:45:
b0:87:a9:98:1b:43:bb:da:3f:91:56:c2:dc:26:95:69:c6:32:
ef:b2:ed:ee:4d:e1:c1:de:3a:13:67:f3:de:18:f9:8e:2e:c4:
2d:3a:f2:86:38:67:c5:e9:f9:62:a6:81:d8:d6:0b:0a:5c:91:
14:f7:d0:3e:bb:ae:74:b9:28:93:19:2e:73:b7:b2:ea:06:ea:
22:07:b8:5f:7b:94:9c:ce:97:38:7d:2a:d9:fe:c9:1e:aa:ca:
b2:12:98:ba:40:3a:80:cf:b5:e6:af:48:b8:2d:40:87:c4:37:
5f:32:74:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:14 2026 by rpki-client