Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
File: sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft (raw, json)
Hash identifier: Mz4m0fY6xY6Ofn7nbXTeCPAb/NGz3bsvOJSIGb+Tp9Y=
Subject key identifier: 1D:17:FD:80:99:C2:EE:DE:5C:30:CF:9B:89:47:2C:A2:AC:5C:4E:89
Authority key identifier: B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
Certificate issuer: /CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Certificate serial: 019E1F7E975CDDAA641B65380FBF7127110E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 04:00:50 +0000
Manifest this update: Wed 13 May 2026 04:00:50 +0000
Manifest next update: Thu 14 May 2026 04:00:50 +0000
Files and hashes: 1: Q-FFM01cbkfw_d8UfrmIQr3mDSE.roa (hash: SPQggi+U+SwusUS7292cc4kZDqdLk+Y6Fxy1n2N8dxo=)
2: sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl (hash: yMRMJXjBZkYyYJBdLgm/ezl6lzmWKinLa4gzjp+u8GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:97:5c:dd:aa:64:1b:65:38:0f:bf:71:27:11:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Validity
Not Before: May 13 04:00:50 2026 GMT
Not After : May 14 04:00:50 2026 GMT
Subject: CN=1d17fd8099c2eede5c30cf9b89472ca2ac5c4e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:84:29:47:8c:11:a4:fa:4f:28:a9:58:68:0e:
4a:a4:c2:b6:d1:bf:44:02:0a:be:6d:39:61:fd:1b:
ff:e4:cf:86:3b:73:67:03:ad:fc:46:99:e6:86:86:
ff:52:75:e0:94:9f:7c:cf:e2:18:93:30:d7:a6:0f:
de:36:46:c1:7b:ad:12:88:37:14:19:81:68:00:e6:
18:90:43:99:a4:96:2f:c9:51:50:66:ba:68:be:4e:
ab:bc:5a:0c:2c:3e:18:e3:f6:a8:b3:57:86:6d:70:
32:55:83:00:66:0b:25:4f:cf:87:8b:35:fe:b8:f6:
b5:bf:18:44:c3:de:ee:a4:ba:a7:28:9a:ed:ce:c7:
42:e9:9d:d5:15:70:4b:40:31:a5:e6:73:f7:dc:6a:
fc:21:7e:70:1a:3f:f2:73:d4:a4:59:56:11:38:72:
78:8f:84:15:e1:7c:9e:a8:99:de:d6:b5:c7:db:33:
c0:8a:63:00:c6:0c:99:3f:45:0c:60:1f:d4:41:ad:
bc:89:c3:b0:c9:2a:61:ff:b5:62:a6:72:a7:1e:26:
96:5e:22:87:43:9a:52:65:9e:4f:2f:ac:6c:9d:93:
5a:44:dd:a2:87:ed:5b:a7:d7:35:b8:c6:63:33:60:
93:01:3c:ed:a1:bd:a1:26:75:db:36:1c:67:85:2e:
9c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:17:FD:80:99:C2:EE:DE:5C:30:CF:9B:89:47:2C:A2:AC:5C:4E:89
X509v3 Authority Key Identifier:
keyid:B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:95:19:99:26:ed:be:07:26:47:ab:2d:3e:e7:c5:4f:0c:1f:
4d:f2:7e:80:74:1e:e4:c4:44:06:18:32:5d:a4:7e:21:93:a4:
ce:dc:08:2e:e9:f0:eb:0c:54:22:4f:b4:36:ec:d9:ae:73:29:
6a:05:ed:98:53:95:09:d6:9a:ca:df:e3:4f:e3:e6:c2:fc:0a:
6f:ca:ce:ab:f2:1a:7e:c7:06:36:e4:68:83:43:5c:7e:be:98:
5f:f1:ae:b0:2e:be:58:74:db:0f:7a:73:72:dc:34:44:18:ac:
22:95:90:1d:cd:b8:10:45:44:b2:e7:c1:8a:58:22:1b:3d:70:
09:40:fc:f7:32:89:65:36:12:2b:4f:8c:98:57:41:5a:c5:e4:
b9:e9:24:6f:33:a0:85:91:b5:63:29:73:b7:f3:45:90:ca:2b:
3d:3f:18:02:c8:2e:89:51:08:66:17:16:64:18:79:e7:bc:78:
77:8c:2d:8a:42:d6:2c:63:90:3c:39:f7:be:02:76:02:ec:25:
bb:2c:0d:34:4b:1f:06:33:15:42:4f:b0:d6:49:c2:a5:ea:44:
a5:3a:f7:72:e3:40:c3:8d:7c:94:a1:7c:4a:0a:0c:e0:f0:89:
3a:15:09:a0:9f:20:35:1c:e6:ef:6e:ab:b5:72:4a:a3:7e:7b:
8a:de:b4:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffpdc3apkG2U4D79xJxEOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYmVlZDZlZGU5ZWIyODViZDJhNmFiYjk4NWFkY2RiZThm
Mjc3OWEwHhcNMjYwNTEzMDQwMDUwWhcNMjYwNTE0MDQwMDUwWjAzMTEwLwYDVQQD
EygxZDE3ZmQ4MDk5YzJlZWRlNWMzMGNmOWI4OTQ3MmNhMmFjNWM0ZTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YQpR4wRpPpPKKlYaA5KpMK20b9E
Agq+bTlh/Rv/5M+GO3NnA638Rpnmhob/UnXglJ98z+IYkzDXpg/eNkbBe60SiDcU
GYFoAOYYkEOZpJYvyVFQZrpovk6rvFoMLD4Y4/aos1eGbXAyVYMAZgslT8+HizX+
uPa1vxhEw97upLqnKJrtzsdC6Z3VFXBLQDGl5nP33Gr8IX5wGj/yc9SkWVYROHJ4
j4QV4XyeqJne1rXH2zPAimMAxgyZP0UMYB/UQa28icOwySph/7VipnKnHiaWXiKH
Q5pSZZ5PL6xsnZNaRN2ih+1bp9c1uMZjM2CTATztob2hJnXbNhxnhS6cuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0X/YCZwu7eXDDPm4lHLKKsXE6JMB8GA1UdIwQY
MBaAFLC+7W7enrKFvSpqu5ha3Nvo8neaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0w3dGJ0NmVzb1c5S21xN21GcmMyLWp5ZDVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hZDBkNmQtZjk0OS00NmRiLTk4MWYt
YjM4ZDdmNzA5ZDcwLzEvc0w3dGJ0NmVzb1c5S21xN21GcmMyLWp5ZDVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hZDBkNmQtZjk0OS00NmRiLTk4MWYtYjM4ZDdmNzA5ZDcw
LzEvc0w3dGJ0NmVzb1c5S21xN21GcmMyLWp5ZDVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZUZmSbt
vgcmR6stPufFTwwfTfJ+gHQe5MREBhgyXaR+IZOkztwILunw6wxUIk+0NuzZrnMp
agXtmFOVCdaayt/jT+PmwvwKb8rOq/IafscGNuRog0Ncfr6YX/GusC6+WHTbD3pz
ctw0RBisIpWQHc24EEVEsufBilgiGz1wCUD89zKJZTYSK0+MmFdBWsXkuekkbzOg
hZG1Yylzt/NFkMorPT8YAsguiVEIZhcWZBh557x4d4wtikLWLGOQPDn3vgJ2Auwl
uywNNEsfBjMVQk+w1knCpepEpTr3cuNAw418lKF8SgoM4PCJOhUJoJ8gNRzm726r
tXJKo357it60xg==
-----END CERTIFICATE-----
Generated at Wed May 13 14:12:06 2026 by rpki-client