Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
File: slpaQ70jhPiS0mXlWLRBHosjK1U.mft (raw, json)
Hash identifier: bmvZAle2sINPDKlrJF99oBfr4SUZo5JGvUfwaoEusIg=
Subject key identifier: 90:9C:B7:A1:AB:57:EE:AD:D6:73:D2:01:1C:A0:70:5F:C0:B9:64:72
Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
Certificate issuer: /CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Certificate serial: 019D25F1772435C9E08A0E3A5940F164E031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 17:01:14 +0000
Manifest this update: Wed 25 Mar 2026 17:01:14 +0000
Manifest next update: Thu 26 Mar 2026 17:01:14 +0000
Files and hashes: 1: 2MEGX0xXq-CS52TZ2rRO2bOlBks.roa (hash: /HvTwpT0Q11rSBUmASk+8crSrENE7H5BgnIrEvjimdw=)
2: slpaQ70jhPiS0mXlWLRBHosjK1U.crl (hash: 9QM8gEW1rOAqavQptcFb7wwY+zPZd+ZVscUB4RM5okA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:77:24:35:c9:e0:8a:0e:3a:59:40:f1:64:e0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Validity
Not Before: Mar 25 17:01:14 2026 GMT
Not After : Mar 26 17:01:14 2026 GMT
Subject: CN=909cb7a1ab57eeadd673d2011ca0705fc0b96472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:10:aa:10:a8:77:1d:c3:8c:b4:75:a4:a6:
b8:1f:05:17:0f:b2:3c:08:a3:87:fd:15:8c:ed:4d:
f5:61:63:cf:49:0a:e3:7a:ea:52:28:b7:e7:08:02:
a2:d1:a2:8d:0c:5b:cb:8a:f1:40:b4:ee:79:82:63:
c2:75:5f:fa:a9:be:7d:ed:a2:bd:89:55:60:5d:c6:
e7:d3:a8:d2:ce:ce:48:d5:41:bc:29:97:af:c2:45:
04:d0:b6:ee:13:8e:31:1c:ac:38:b3:23:7d:0f:0c:
96:9c:d3:5f:45:b4:a5:f6:6e:27:5a:d1:7e:9d:47:
8c:ab:fc:b7:68:e0:45:14:55:3a:1f:42:8a:58:f7:
ef:c8:6a:95:0a:c0:bd:0f:7e:a3:3b:20:c8:dd:b0:
15:32:a0:f4:b3:da:35:21:c4:40:4a:4d:c0:cd:54:
c1:cd:63:19:86:de:cd:ba:41:bf:44:e9:63:7d:f5:
7c:a7:ff:ae:bc:64:7b:bc:af:59:3e:c7:bc:02:66:
bb:7a:00:b6:c3:be:09:f1:04:f4:b7:ef:2c:1b:1f:
bb:90:ed:2e:d1:56:f1:af:00:18:a8:69:4e:00:3a:
21:80:ea:bb:88:46:dd:bb:1c:57:90:24:ed:18:82:
7d:89:a6:8c:81:d4:1c:b9:24:3b:de:8a:68:3f:7f:
7e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9C:B7:A1:AB:57:EE:AD:D6:73:D2:01:1C:A0:70:5F:C0:B9:64:72
X509v3 Authority Key Identifier:
keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:02:56:71:59:f0:00:97:49:29:5f:e9:bc:85:85:17:a3:f5:
8f:9b:fe:bd:9d:44:e4:39:bb:15:58:00:5d:90:60:ec:11:7e:
a4:6b:b3:a2:6f:f1:f0:a9:0b:bd:53:dc:ed:6a:b7:81:1e:cb:
86:9b:9e:a8:f4:d9:49:75:e6:42:44:9e:a9:5d:27:b4:b2:70:
3c:70:25:ae:03:f2:45:d7:66:7c:fd:3d:a0:f3:03:bb:67:83:
4f:ed:75:63:b0:ad:07:2d:b6:59:16:8f:6c:7f:b3:9f:fb:e2:
11:1e:67:6c:1d:8a:a2:7c:2b:d7:b9:38:43:b6:5f:88:fc:0d:
73:84:2a:27:4a:f2:aa:1f:9c:f0:17:5b:29:de:31:f1:44:89:
d6:04:af:6e:e0:a0:75:d3:26:9a:83:e6:77:d9:f4:97:d9:a1:
fa:39:71:04:5f:29:f4:63:fa:0d:44:c7:8d:67:9a:07:5f:85:
cf:c5:18:ec:db:ef:59:78:0e:fe:23:46:2e:d5:73:7f:33:d4:
a8:5d:38:45:4e:64:ca:b3:c4:8b:fd:49:70:82:5e:c4:16:65:
f4:47:ce:92:56:28:ed:27:75:6f:4a:f7:7d:cf:73:24:b5:01:
ce:1c:47:c4:20:3a:4c:95:22:ed:f0:4a:1f:b4:e9:dd:60:68:
3f:72:4c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:48 2026 by rpki-client