Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.mft
File: SlTv4Cq-cPyDIgbU6_mdck6LH1o.mft (raw, json)
Hash identifier: m7IMqWXWgcGpEF/ocUh3NB3naG3ful07qw121SuJIvQ=
Subject key identifier: 4D:16:83:D0:4F:25:1C:3D:A1:08:D0:1D:83:5E:69:C3:27:07:0B:9C
Authority key identifier: 4A:54:EF:E0:2A:BE:70:FC:83:22:06:D4:EB:F9:9D:72:4E:8B:1F:5A
Certificate issuer: /CN=4a54efe02abe70fc832206d4ebf99d724e8b1f5a
Certificate serial: 01A0DBE0549251F3C9A953AD779270346ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SlTv4Cq-cPyDIgbU6_mdck6LH1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.mft
Manifest number: 0211
Signing time: Sat 26 Sep 2026 04:01:46 +0000
Manifest this update: Sat 26 Sep 2026 04:01:46 +0000
Manifest next update: Sun 27 Sep 2026 04:01:46 +0000
Files and hashes: 1: SlTv4Cq-cPyDIgbU6_mdck6LH1o.crl (hash: XpuX3pehbznDmu+PX5cVl6sJe+SifQuhGu11D4HHW2o=)
2: XqMaYvhCHSlYHuAgcBJ3D1XcKOw.roa (hash: sJ5W26p1BLswbXARJ6bN/ijwMZCfu7E6N/+XnCa8Kg8=)
3: mSLcPcPlbCaKloucUE197Adzr1c.roa (hash: gW1hk3WhDt/+PalHQ3CRB51/zaP5eafiQ6SCna2I/+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/SlTv4Cq-cPyDIgbU6_mdck6LH1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 04:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:54:92:51:f3:c9:a9:53:ad:77:92:70:34:6a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a54efe02abe70fc832206d4ebf99d724e8b1f5a
Validity
Not Before: Sep 26 04:01:46 2026 GMT
Not After : Sep 27 04:01:46 2026 GMT
Subject: CN=4d1683d04f251c3da108d01d835e69c327070b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f4:e7:a4:1a:68:95:fa:90:83:a0:1b:0e:d9:
6d:2c:74:b8:f5:b4:7f:04:74:7d:15:dd:7d:b6:3a:
24:05:bf:22:c5:a2:ad:86:58:59:c2:5d:14:ac:d3:
e0:82:77:ef:52:ed:47:80:99:e2:00:4c:c9:b2:0a:
cf:d5:ce:1d:47:76:07:e3:43:e6:05:06:b3:2c:87:
8e:f5:48:31:90:dc:d2:a0:57:4c:fd:4c:87:3e:7b:
b8:4a:bb:89:4a:65:2b:f1:bc:14:30:2c:57:b7:65:
7a:b4:26:db:9b:49:4f:c8:06:2f:c5:6d:cb:de:30:
dd:e4:42:f6:e3:be:53:08:a5:6d:4a:1e:ae:69:a1:
e7:71:07:0c:67:8f:cd:62:bb:b5:9f:ba:73:65:a4:
02:f7:91:4b:14:d0:87:ac:2c:01:38:1e:b7:2f:25:
82:92:66:ef:03:05:e9:a6:59:d5:c3:b9:75:ae:59:
b4:af:1c:3b:e3:df:e8:60:0f:42:d1:a5:ed:95:82:
f1:6f:b9:7b:ab:d2:84:de:e8:3c:0b:07:e0:cc:ef:
b7:af:45:22:45:9b:22:00:ac:73:5a:03:fa:27:47:
ee:00:cd:e4:d2:38:7c:58:11:d5:5c:ec:a6:b8:16:
15:8f:3d:80:b7:6d:2c:f4:63:04:ad:b9:97:10:db:
59:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:16:83:D0:4F:25:1C:3D:A1:08:D0:1D:83:5E:69:C3:27:07:0B:9C
X509v3 Authority Key Identifier:
keyid:4A:54:EF:E0:2A:BE:70:FC:83:22:06:D4:EB:F9:9D:72:4E:8B:1F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlTv4Cq-cPyDIgbU6_mdck6LH1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:47:94:6a:7c:34:da:23:fd:50:b7:87:1a:fa:ca:60:d6:88:
b1:70:9f:31:b2:fd:31:7c:40:5f:8e:96:a9:ee:57:c1:6e:ad:
16:19:2d:b4:2f:49:ab:cc:21:05:6b:c9:5c:50:64:fc:7e:1e:
b8:67:e0:f3:a8:ca:2f:76:e1:d8:bf:d7:03:b3:f7:d7:d2:a5:
f2:6b:54:57:8e:3a:3d:e4:4b:44:0e:59:47:90:4e:13:2f:aa:
84:61:09:3b:b3:8c:ed:8b:9b:7b:bb:00:6f:e9:3e:7b:1e:52:
6f:71:e9:21:84:83:44:db:40:2f:ee:e8:95:2b:77:fc:91:bf:
f1:70:e0:5a:06:3a:8d:8a:a3:b9:f2:f4:34:ed:3f:e0:cc:86:
00:dc:a7:21:eb:e2:62:b5:81:95:ba:a4:fc:ae:de:08:52:af:
4a:19:ab:3c:ae:50:ef:f4:d3:cf:c2:e7:af:5f:07:69:56:2f:
8e:4e:8a:23:8a:f3:5e:61:1e:7b:df:b4:76:62:26:05:cd:16:
a0:27:fe:d0:9e:02:3c:7e:00:e1:74:cc:c9:fc:55:cc:1b:46:
3b:cb:f3:be:d2:da:3d:60:e4:5d:ab:3d:82:c0:76:8b:9c:cb:
ea:b2:17:f5:15:d4:cb:f8:cc:76:ea:52:22:47:8f:fe:94:93:
62:f3:d7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:43:49 2026 by rpki-client