Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft
File: s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft (raw, json)
Hash identifier: nbHmCYRLOIreWZBo15LJzqlsaj3+T2VKKKlj3EvTXIA=
Subject key identifier: 93:2B:55:DE:25:92:BA:96:17:85:B0:07:A7:34:E2:BD:50:9E:AB:CB
Authority key identifier: B3:B7:7E:52:CC:77:7A:1E:AF:E6:9A:51:7F:95:D2:C2:19:C1:90:80
Certificate issuer: /CN=b3b77e52cc777a1eafe69a517f95d2c219c19080
Certificate serial: 019DCF75643AB73684C6125898AB530A0110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7d-Usx3eh6v5ppRf5XSwhnBkIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft
Manifest number: 0A4C
Signing time: Mon 27 Apr 2026 15:01:10 +0000
Manifest this update: Mon 27 Apr 2026 15:01:10 +0000
Manifest next update: Tue 28 Apr 2026 15:01:10 +0000
Files and hashes: 1: hfejHEq9BfnHeerfr4ZvzfyMdD8.roa (hash: YVFjuu53xMs5opB7mdVNS/KtKWd8kSn9JmJ6kqdpWl0=)
2: s7d-Usx3eh6v5ppRf5XSwhnBkIA.crl (hash: UCOC1LqdY222c6SZLWsfU2uihjjzMHIQBHnBR29Py7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7d-Usx3eh6v5ppRf5XSwhnBkIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:64:3a:b7:36:84:c6:12:58:98:ab:53:0a:01:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b77e52cc777a1eafe69a517f95d2c219c19080
Validity
Not Before: Apr 27 15:01:10 2026 GMT
Not After : Apr 28 15:01:10 2026 GMT
Subject: CN=932b55de2592ba961785b007a734e2bd509eabcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:1f:e0:b0:fa:8c:9e:e0:3b:42:0d:45:36:
6d:64:d5:d9:35:70:07:49:d2:55:58:a7:66:5f:e1:
f9:86:8e:5b:79:1b:35:b8:de:d2:54:5a:20:be:98:
6b:08:82:f5:83:91:64:64:97:cf:20:9d:59:fa:40:
0d:69:d8:9c:c5:5e:05:9f:d8:04:02:65:5e:15:cb:
24:f6:7c:32:2a:01:01:c4:8a:40:c7:2d:40:72:65:
71:ec:c0:e7:4b:a0:12:50:40:42:5b:cd:16:e8:ab:
b9:83:b2:85:ba:1b:9a:3d:f2:ae:98:a9:2c:cd:32:
34:28:62:10:56:64:d6:4d:88:45:89:35:49:fe:1b:
0a:61:4f:e7:ba:d6:70:ee:dd:6a:83:96:ea:4a:f8:
0e:e4:ea:69:08:20:2f:a3:e6:71:44:35:eb:cc:08:
fb:30:7c:3f:40:36:20:1a:62:46:ab:ef:a2:23:41:
d9:51:3a:fc:93:40:d5:c0:e5:32:80:bd:b5:f6:14:
df:00:35:a8:31:41:d0:44:fe:c4:3c:c2:9b:27:37:
a1:65:81:93:bc:7f:db:d5:5e:96:d5:bf:aa:8d:e3:
40:8f:d7:20:13:30:28:3f:82:33:4d:2e:09:d9:00:
9e:df:aa:b7:ab:4a:04:5f:44:c5:0c:00:ce:4c:9a:
f9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2B:55:DE:25:92:BA:96:17:85:B0:07:A7:34:E2:BD:50:9E:AB:CB
X509v3 Authority Key Identifier:
keyid:B3:B7:7E:52:CC:77:7A:1E:AF:E6:9A:51:7F:95:D2:C2:19:C1:90:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7d-Usx3eh6v5ppRf5XSwhnBkIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:38:31:b5:c5:7a:9e:3a:05:67:96:c1:eb:6e:61:55:74:dc:
28:c8:52:84:2e:b4:74:d0:63:6b:5c:15:35:d2:34:c9:d6:f8:
48:05:47:16:66:7d:17:16:fa:97:8c:e3:ac:43:6a:69:e4:5b:
b2:8d:b7:d4:e1:c5:43:6a:69:a9:80:69:5f:31:31:f7:9d:d9:
45:21:30:ed:94:0d:9d:cb:7e:da:bb:29:ce:b2:fd:db:e8:ca:
33:dd:5e:fa:25:10:64:56:8c:30:d5:d8:87:f3:d1:05:49:ba:
a6:8e:cf:76:b0:bb:96:22:9e:e3:0c:b3:f9:28:67:c7:84:f3:
ba:ab:93:82:64:d8:f9:0a:aa:c4:0a:ce:36:c3:99:07:32:f6:
f2:62:6a:8a:7d:f9:3d:f6:9e:86:82:85:5c:0d:9f:30:f6:eb:
b7:f9:a8:a4:aa:0d:3e:68:5e:b2:3e:b3:c5:aa:4d:7d:c7:69:
52:6d:72:6b:ca:43:06:37:b7:2f:c7:79:80:43:ba:28:60:5a:
c0:51:a3:9f:4e:92:1e:c4:27:2b:62:e0:84:a4:36:31:bb:0b:
2b:c5:b3:0d:c6:8a:8e:f6:4e:3b:0d:9f:10:2c:e8:c5:4a:2b:
6a:95:a9:d0:33:21:30:b9:e2:d3:03:fa:eb:6b:2a:14:bd:80:
ac:8d:cb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:30:27 2026 by rpki-client