Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
File: s7b1TqmxWovU8zglOGyyd7A0Od0.mft (raw, json)
Hash identifier: 8x8hcw0cnL/+SxcSbVlvfSLF4t8tRRQ6Cmd+BSFWbCg=
Subject key identifier: 2E:4E:DC:25:38:55:FC:7B:AB:AF:50:7E:17:52:DD:11:47:F9:C3:14
Authority key identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
Certificate issuer: /CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Certificate serial: 019E28B96FCB334A96957D8C167B85A15296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
Manifest number: 1914
Signing time: Thu 14 May 2026 23:01:41 +0000
Manifest this update: Thu 14 May 2026 23:01:41 +0000
Manifest next update: Fri 15 May 2026 23:01:41 +0000
Files and hashes: 1: 1--FRY1CjawLnslfsBcAkrouqU6s.asa (hash: NFM53UpFWBl2wcWeqeLFtEIb13ge6QGgn48A2dxQblk=)
2: aftA-bCSN_cfnaumewln08mRqyk.roa (hash: ewCgfj5ZHQWWUV5zhZ6e7KdXcICBairndqt6imFYbD4=)
3: s7b1TqmxWovU8zglOGyyd7A0Od0.crl (hash: s93BhWvrfBONnVbCIAq6McqvGxqGA56lFjYcjNm22vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 23:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:b9:6f:cb:33:4a:96:95:7d:8c:16:7b:85:a1:52:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Validity
Not Before: May 14 23:01:41 2026 GMT
Not After : May 15 23:01:41 2026 GMT
Subject: CN=2e4edc253855fc7babaf507e1752dd1147f9c314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2e:89:1b:c8:9c:53:20:d4:65:5b:c7:1e:1d:
de:c1:68:1b:1b:10:24:86:57:5f:3b:f3:ac:b9:67:
2c:e5:54:eb:0d:70:cf:93:f9:55:1c:e1:24:48:8c:
6f:f1:50:b1:56:78:4b:af:80:7d:f0:ec:41:fa:a1:
94:e4:f8:c0:9b:5f:60:be:f2:b0:53:6f:d1:99:e4:
90:7b:e5:44:77:f8:c8:11:5e:ea:a3:ee:e2:dc:71:
49:f8:a0:58:5f:4b:06:34:85:79:e6:1a:9f:82:21:
90:f7:94:31:75:ab:e2:79:8b:90:0b:f6:aa:89:92:
8f:35:d7:24:b7:20:ef:82:55:8d:12:4b:62:f5:b1:
f3:a1:34:ef:cd:b7:36:a2:d2:b8:39:21:ad:4d:25:
ed:5f:90:5a:61:16:d6:f8:28:15:5d:4d:40:96:f4:
c5:3f:24:c3:c3:16:5f:2b:88:06:02:65:99:2e:ff:
d3:fa:f4:97:e6:15:fa:37:ce:c4:61:b6:ec:96:fb:
14:d3:b8:53:8c:97:45:27:50:f8:e4:8a:de:d8:f0:
d4:2f:86:af:7e:b4:39:e9:80:52:01:e1:c0:a0:15:
56:a1:c7:39:db:50:7d:b5:77:22:fc:ac:fd:3a:6f:
bb:6f:86:98:64:1d:43:27:5c:e2:8a:8f:18:26:c3:
b9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4E:DC:25:38:55:FC:7B:AB:AF:50:7E:17:52:DD:11:47:F9:C3:14
X509v3 Authority Key Identifier:
keyid:B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e9:ab:03:e9:4b:f1:4c:19:c4:15:0a:7e:0e:35:b6:85:9a:
8e:f6:a3:1d:a5:ab:11:e6:37:7d:5d:05:f3:0c:a2:c5:b0:f8:
9b:9d:1d:3b:0f:19:0f:ad:61:18:93:31:70:cc:5b:c4:ce:6d:
3a:36:0a:1c:78:90:1a:88:30:cd:9c:4c:f6:cb:f8:91:ab:95:
b9:cb:c0:91:23:74:cd:9a:b0:aa:8a:87:28:7a:c0:c8:b4:48:
85:52:e7:59:19:46:0b:32:f7:e9:28:b2:e1:7c:84:14:ba:54:
5e:d8:6c:2f:15:16:e1:90:8f:47:a8:e3:d4:e2:5e:53:8a:dc:
9f:d3:38:5e:86:f0:db:6b:8c:f1:d0:9b:34:2a:dd:0d:16:4a:
62:3f:a4:49:ad:61:f0:2e:82:72:6a:ac:46:22:c0:eb:00:58:
dc:56:ed:8d:b8:62:32:72:e7:df:f0:be:1f:5c:3c:5c:88:79:
aa:d7:ff:46:73:d4:10:3d:7b:37:1c:98:b2:b0:7c:13:4d:f4:
50:63:66:2b:f9:81:07:67:e0:a5:eb:bf:dc:e0:95:10:e4:05:
24:51:a9:cc:44:c8:0e:0b:2f:8b:e8:8f:7c:b7:6d:e6:c3:f8:
67:6e:a1:24:5f:54:51:9d:8e:bc:a2:74:c9:a8:78:df:82:b6:
a6:6f:c5:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ouW/LM0qWlX2MFnuFoVKWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYjZmNTRlYTliMTVhOGJkNGYzMzgyNTM4NmNiMjc3YjAz
NDM5ZGQwHhcNMjYwNTE0MjMwMTQxWhcNMjYwNTE1MjMwMTQxWjAzMTEwLwYDVQQD
EygyZTRlZGMyNTM4NTVmYzdiYWJhZjUwN2UxNzUyZGQxMTQ3ZjljMzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S6JG8icUyDUZVvHHh3ewWgbGxAk
hldfO/OsuWcs5VTrDXDPk/lVHOEkSIxv8VCxVnhLr4B98OxB+qGU5PjAm19gvvKw
U2/RmeSQe+VEd/jIEV7qo+7i3HFJ+KBYX0sGNIV55hqfgiGQ95QxdavieYuQC/aq
iZKPNdcktyDvglWNEkti9bHzoTTvzbc2otK4OSGtTSXtX5BaYRbW+CgVXU1AlvTF
PyTDwxZfK4gGAmWZLv/T+vSX5hX6N87EYbbslvsU07hTjJdFJ1D45Ire2PDUL4av
frQ56YBSAeHAoBVWocc521B9tXci/Kz9Om+7b4aYZB1DJ1ziio8YJsO5ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5O3CU4Vfx7q69QfhdS3RFH+cMUMB8GA1UdIwQY
MBaAFLO29U6psVqL1PM4JThssnewNDndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczdiMVRxbXhXb3ZVOHpnbE9HeXlkN0EwT2QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84ZGU0YTMtOGQ1YS00NmIxLWE3MzUt
MmY0NmU5MzE3Y2M2LzEvczdiMVRxbXhXb3ZVOHpnbE9HeXlkN0EwT2QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84ZGU0YTMtOGQ1YS00NmIxLWE3MzUtMmY0NmU5MzE3Y2M2
LzEvczdiMVRxbXhXb3ZVOHpnbE9HeXlkN0EwT2QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOmrA+lL
8UwZxBUKfg41toWajvajHaWrEeY3fV0F8wyixbD4m50dOw8ZD61hGJMxcMxbxM5t
OjYKHHiQGogwzZxM9sv4kauVucvAkSN0zZqwqoqHKHrAyLRIhVLnWRlGCzL36Siy
4XyEFLpUXthsLxUW4ZCPR6jj1OJeU4rcn9M4Xobw22uM8dCbNCrdDRZKYj+kSa1h
8C6CcmqsRiLA6wBY3FbtjbhiMnLn3/C+H1w8XIh5qtf/RnPUED17NxyYsrB8E030
UGNmK/mBB2fgpeu/3OCVEOQFJFGpzETIDgsvi+iPfLdt5sP4Z26hJF9UUZ2OvKJ0
yah434K2pm/FhA==
-----END CERTIFICATE-----
Generated at Fri May 15 07:02:31 2026 by rpki-client