Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
File: SDletMDuLapTks2Z_EXvvEp1TpA.mft (raw, json)
Hash identifier: EBZL5eDPkwNFyHESM7F89HF/3zgkSZmSyJBOgr6sAGE=
Subject key identifier: 05:F7:4B:41:D4:30:AF:D3:B7:33:4E:64:D5:56:0E:9C:1F:3C:1F:3F
Authority key identifier: 48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
Certificate issuer: /CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Certificate serial: 019D29CE62BA9A3CDF9EF8331D67EC52A05A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 11:01:24 +0000
Manifest this update: Thu 26 Mar 2026 11:01:24 +0000
Manifest next update: Fri 27 Mar 2026 11:01:24 +0000
Files and hashes: 1: SDletMDuLapTks2Z_EXvvEp1TpA.crl (hash: gKEc3b/7/fbn64DK4jbePnc8hmk8IOKsT8nP8gBr2D8=)
2: oYj8IRsjMXERXaM9fv_aTVNDMiM.roa (hash: 1h5HkPjPP0vcntiwcGgkqpVFeA7WFjBNEknGQLJcQbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:62:ba:9a:3c:df:9e:f8:33:1d:67:ec:52:a0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Validity
Not Before: Mar 26 11:01:24 2026 GMT
Not After : Mar 27 11:01:24 2026 GMT
Subject: CN=05f74b41d430afd3b7334e64d5560e9c1f3c1f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:1c:0a:f7:f2:21:12:46:46:63:eb:c5:27:
53:21:30:f3:b7:24:21:f8:33:20:4d:ec:d8:6c:fa:
f1:9d:7c:7b:37:3a:3e:a3:28:85:8b:ea:ed:30:18:
7b:67:34:91:c8:97:16:37:ec:59:b0:44:84:04:9c:
f2:1e:98:28:fd:24:f0:6a:4b:4f:ef:c3:e7:7a:fc:
3e:26:5d:72:30:e3:80:6c:34:57:70:62:22:2a:48:
ca:2a:a5:d3:f4:60:29:41:94:f0:16:f2:34:ac:00:
74:b1:d9:c0:e8:7a:83:4a:bc:64:c5:22:97:73:c7:
9e:90:98:fe:43:3c:6b:08:08:e7:c3:b7:fd:85:af:
21:89:e1:7b:b4:e6:98:2e:4c:39:c5:1b:da:92:21:
6c:c3:48:49:b9:28:c0:1d:be:e8:de:1c:0c:78:e1:
0a:7b:1c:d1:a9:52:31:d9:0c:cc:7e:cf:c5:69:46:
25:ff:6c:f1:39:e5:73:49:42:ff:97:70:c5:22:e2:
8c:7a:31:3c:58:91:50:cc:47:80:1b:93:17:9a:9e:
4f:c3:16:27:df:0a:5a:b0:41:4a:c2:7e:b1:c9:fc:
79:25:c2:b6:64:c5:be:3c:80:27:23:1c:a5:55:e4:
61:d1:92:5a:08:90:a0:93:45:ae:0f:03:68:94:a7:
9e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F7:4B:41:D4:30:AF:D3:B7:33:4E:64:D5:56:0E:9C:1F:3C:1F:3F
X509v3 Authority Key Identifier:
keyid:48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:81:62:33:f8:89:10:95:ef:10:c6:e2:83:8c:d4:67:eb:93:
23:61:04:87:d4:dd:0d:49:bb:0f:fe:f5:6a:62:17:66:44:5e:
91:3f:e7:ea:1c:3c:a1:7d:bb:d4:07:33:91:84:08:aa:f9:4a:
07:50:05:f6:2c:9a:7c:c5:4e:a8:80:d5:f2:49:af:46:d0:5e:
95:b1:dd:03:00:68:d9:eb:d2:a9:f7:65:0b:42:4e:95:42:ee:
9f:7a:2a:27:bc:17:cb:68:bf:8c:7c:5b:4a:3a:5a:be:5d:52:
73:ac:6d:a4:db:a7:c9:2f:ae:e8:11:09:4c:e8:f9:12:37:2e:
58:87:78:04:4a:27:99:78:92:3e:46:76:1e:78:71:6e:78:e3:
03:32:0b:26:25:a5:63:e3:c0:cf:67:8f:4e:74:61:6f:b0:12:
eb:e3:cd:c6:76:08:fd:34:a3:44:22:23:69:4e:6e:af:f4:da:
b6:44:dd:12:55:60:83:9f:e0:d8:37:db:fc:6a:e3:8a:3e:17:
4a:cc:8d:6b:ef:95:bb:78:75:d6:9e:17:05:5b:94:95:cf:25:
e5:87:1e:06:8c:37:1b:b0:db:90:07:6e:ef:11:9e:85:53:c5:
3e:93:d8:dc:69:5f:08:3c:f4:b5:0e:29:58:f2:ac:67:35:1c:
72:e7:1d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:10 2026 by rpki-client