Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
File: sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft (raw, json)
Hash identifier: T4jl8toFu/TTN4NOW4kTDaasmTzG7tDmFQEPE+fcuzg=
Subject key identifier: C1:D7:35:CD:28:77:CB:02:AD:39:4D:CF:4F:E3:76:48:3C:19:9C:22
Authority key identifier: B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
Certificate issuer: /CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Certificate serial: 019D284DBDF72151C1BCCFE647C1E9EA5FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 04:01:16 +0000
Manifest this update: Thu 26 Mar 2026 04:01:16 +0000
Manifest next update: Fri 27 Mar 2026 04:01:16 +0000
Files and hashes: 1: Q-FFM01cbkfw_d8UfrmIQr3mDSE.roa (hash: SPQggi+U+SwusUS7292cc4kZDqdLk+Y6Fxy1n2N8dxo=)
2: sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl (hash: P/JmkEiwsXyrUMI7Q41rlzAGAX9Hx8NoIwOVJOk9l30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:bd:f7:21:51:c1:bc:cf:e6:47:c1:e9:ea:5f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Validity
Not Before: Mar 26 04:01:16 2026 GMT
Not After : Mar 27 04:01:16 2026 GMT
Subject: CN=c1d735cd2877cb02ad394dcf4fe376483c199c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6b:e0:dc:10:b0:e6:9c:7b:99:e8:bb:f0:6a:
82:d1:fa:94:af:aa:46:9b:b6:17:db:c8:fd:7a:28:
68:c7:d8:53:77:50:7e:15:cc:3c:59:c8:e8:2a:60:
4d:0f:02:6f:01:4a:03:8f:a7:e9:cc:49:c7:d2:75:
0a:d6:9e:14:04:97:04:3f:0d:28:e3:0e:27:08:a5:
32:80:2e:d8:93:52:bc:a7:69:44:01:97:86:50:2f:
e1:17:9b:16:a6:59:5d:41:ff:2f:da:32:5c:28:07:
46:f9:43:c2:93:ca:69:b9:cb:1f:74:3f:5a:89:6b:
fd:60:09:64:13:a9:46:fc:88:44:62:a8:cb:b1:f6:
e8:75:5a:1f:ef:63:83:87:6a:96:d5:24:c2:7e:ed:
c3:65:62:06:85:89:db:9b:7f:eb:23:84:07:64:8e:
98:e3:1d:28:b5:4c:5e:65:ec:ca:f6:9c:05:d6:bd:
59:c8:ea:e3:60:d6:e0:c1:91:10:fb:82:df:29:92:
bb:f0:de:5a:8f:ea:4a:1b:1c:b1:0b:f2:50:71:94:
dc:f0:b6:88:a0:ce:dc:09:13:4b:00:f8:58:56:e3:
cb:1b:07:c2:a3:3e:5f:87:ed:54:f1:a0:e9:48:c5:
37:19:2e:55:d9:3c:9f:61:6f:86:0f:c3:da:d7:bc:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D7:35:CD:28:77:CB:02:AD:39:4D:CF:4F:E3:76:48:3C:19:9C:22
X509v3 Authority Key Identifier:
keyid:B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9a:0f:67:26:37:ee:02:7b:97:39:7f:e0:35:5a:4b:79:b3:
73:dc:7e:88:8f:71:29:9f:f1:7d:d1:9a:f3:42:b9:b8:06:8f:
8d:21:d9:91:ff:9d:93:43:d7:f9:ef:f1:e3:cf:9d:11:ee:fc:
0a:8d:bd:b0:86:43:76:8d:35:1e:ae:a0:d4:e1:5b:c6:a4:aa:
6c:50:d5:b1:f5:97:22:5e:df:d0:dd:1c:ee:4c:74:53:50:e3:
f7:9d:af:b6:fa:fa:16:66:c2:03:01:71:e4:16:ef:4f:10:fc:
28:fc:36:7c:07:1d:5f:72:40:84:2b:36:69:ad:4c:09:ea:7b:
8c:27:a0:3f:f8:1b:2d:ec:c1:d3:e8:35:a3:6f:04:ef:ea:e1:
e1:4d:4c:16:45:8f:c8:a4:5f:2a:9a:24:b3:6e:b1:31:0e:f6:
96:2e:7f:79:0e:76:cc:71:b2:52:a1:66:cf:96:d1:c0:83:4d:
16:2f:57:e7:a2:27:3a:64:4b:a1:ec:58:58:e5:56:1c:20:1f:
14:6b:74:d7:6c:b7:c8:ac:4a:8e:ca:8f:d5:dc:77:13:6d:c5:
b3:fd:63:a5:10:10:db:6f:af:f6:7f:8a:aa:f5:fe:e8:f4:36:
f5:4c:1a:15:eb:53:66:71:53:fb:a8:0f:41:51:06:ad:6c:a9:
91:ed:21:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:50:21 2026 by rpki-client