Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
File: s7b1TqmxWovU8zglOGyyd7A0Od0.mft (raw, json)
Hash identifier: 9lCwKo9pGN3QUUl3vXbphBzw2yxqgy3gOv6J3Bdq1q8=
Subject key identifier: 3D:0D:40:91:E7:3E:C2:A5:CE:E4:09:B3:A7:AB:5D:02:56:3B:63:0D
Authority key identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
Certificate issuer: /CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Certificate serial: 01A001DCC2D56FC458E8B2BF932A466BA5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
Manifest number: 1A09
Signing time: Fri 14 Aug 2026 20:00:40 +0000
Manifest this update: Fri 14 Aug 2026 20:00:40 +0000
Manifest next update: Sat 15 Aug 2026 20:00:40 +0000
Files and hashes: 1: 1--FRY1CjawLnslfsBcAkrouqU6s.asa (hash: NFM53UpFWBl2wcWeqeLFtEIb13ge6QGgn48A2dxQblk=)
2: aftA-bCSN_cfnaumewln08mRqyk.roa (hash: ewCgfj5ZHQWWUV5zhZ6e7KdXcICBairndqt6imFYbD4=)
3: s7b1TqmxWovU8zglOGyyd7A0Od0.crl (hash: xZv4s8fr6ebjIgiciV+r3oTaRqsrVZj0NBG+powh2oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:c2:d5:6f:c4:58:e8:b2:bf:93:2a:46:6b:a5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Validity
Not Before: Aug 14 20:00:40 2026 GMT
Not After : Aug 15 20:00:40 2026 GMT
Subject: CN=3d0d4091e73ec2a5cee409b3a7ab5d02563b630d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:97:9a:93:b0:2e:f3:7d:2c:c7:cb:fc:b0:
c4:6f:b8:cc:a4:78:e0:27:00:10:67:5a:a6:30:4b:
66:f0:d6:9e:30:49:ff:3a:66:ed:f4:ab:d1:38:35:
5e:6b:15:3f:41:1f:7b:15:dc:e8:9f:2b:fa:0d:a5:
19:68:b2:55:dc:d8:17:a1:a2:ed:2f:83:67:8a:a4:
36:c7:30:c5:60:6b:22:b5:71:85:3a:75:a9:8a:ce:
9e:1a:a8:c2:20:ed:8c:44:6c:e4:2c:e2:11:07:22:
69:d4:c7:fa:fc:d3:3f:8b:bd:36:a0:47:56:cf:b0:
bf:09:10:0a:4b:5a:87:6e:20:5f:03:99:27:f6:05:
80:aa:27:bc:6f:98:55:28:c6:58:67:75:8a:01:31:
5b:f8:47:5a:8b:be:07:4b:b2:7e:b8:f5:0b:91:61:
b2:e3:37:2c:bd:43:9b:9b:4a:17:45:44:bd:cc:2a:
57:ca:55:5f:67:fd:52:74:08:d2:33:77:2f:3f:4a:
e9:92:b6:59:0c:f1:31:2e:04:4a:03:8b:45:74:ed:
c0:dd:26:25:61:62:b8:db:1e:d1:a8:5c:1e:74:ad:
aa:cc:25:fd:12:eb:1d:7a:39:1c:1c:15:4b:97:56:
19:65:40:f7:7d:10:b1:15:75:32:d6:54:ee:20:22:
c2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0D:40:91:E7:3E:C2:A5:CE:E4:09:B3:A7:AB:5D:02:56:3B:63:0D
X509v3 Authority Key Identifier:
keyid:B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:24:05:3e:a9:33:4b:81:d7:9b:f3:a5:64:e6:40:c4:f3:df:
ad:c6:fe:b6:84:cd:d8:7e:a8:5f:5f:6f:b4:bc:2c:5d:04:90:
1d:bd:ac:f5:9e:4f:d5:06:dc:58:b5:c6:78:0b:00:e5:6a:96:
b5:5c:ec:c6:a5:13:f8:2f:a8:c2:ff:12:60:c4:be:8d:c1:77:
73:61:c4:ab:3c:99:26:bb:e5:31:fb:8d:0c:e6:69:51:42:82:
f5:93:e7:c8:b2:21:75:30:0e:92:95:22:24:06:2e:45:eb:a8:
fe:db:f4:90:8c:fd:96:2e:9a:76:02:00:bd:80:03:63:b4:e2:
13:00:8e:4f:0d:40:f2:91:43:f1:b3:72:bf:3e:4c:87:80:47:
8d:6d:73:24:a6:32:7c:d1:62:ef:2a:56:72:d4:de:20:93:fe:
28:a7:f9:e9:3a:cb:89:1e:d9:a9:66:23:fb:ad:c5:23:ec:08:
eb:4e:4a:e2:e4:1e:a4:48:d2:e5:05:ca:41:f5:36:30:3c:2f:
07:e2:2a:88:f4:c9:fb:2b:ba:8c:f7:ea:b9:fc:ef:6e:28:f9:
c6:32:11:95:53:82:95:41:dd:45:a4:88:59:6b:90:9d:8d:6b:
c6:f4:58:cc:f2:fa:bb:4c:e9:08:eb:4c:2b:3d:c8:f5:d3:cc:
4a:40:e7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:27:37 2026 by rpki-client