Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
File: SDletMDuLapTks2Z_EXvvEp1TpA.mft (raw, json)
Hash identifier: Lm8BJEgT3dz7ceaEYmvg+k+e2vdl6oYfgzRBAPJB7+o=
Subject key identifier: AA:3B:47:71:7A:CA:E5:CF:73:7D:2D:01:4E:D0:04:FB:AB:A8:B0:30
Authority key identifier: 48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
Certificate issuer: /CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Certificate serial: 019F91DAA59F3A7F464E08BD1018127EBF61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 02:00:53 +0000
Manifest this update: Fri 24 Jul 2026 02:00:53 +0000
Manifest next update: Sat 25 Jul 2026 02:00:53 +0000
Files and hashes: 1: SDletMDuLapTks2Z_EXvvEp1TpA.crl (hash: UfTjeuK2puzgvThISyGFsoQV3oFLMnWH1WPnlZqfkXU=)
2: oYj8IRsjMXERXaM9fv_aTVNDMiM.roa (hash: 1h5HkPjPP0vcntiwcGgkqpVFeA7WFjBNEknGQLJcQbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:a5:9f:3a:7f:46:4e:08:bd:10:18:12:7e:bf:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Validity
Not Before: Jul 24 02:00:53 2026 GMT
Not After : Jul 25 02:00:53 2026 GMT
Subject: CN=aa3b47717acae5cf737d2d014ed004fbaba8b030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a5:7d:fc:a8:0d:76:f9:44:8c:f1:2f:6c:6d:
35:83:25:43:66:dd:9b:5f:2c:aa:9c:16:1b:7e:3c:
01:ee:32:2a:10:00:ce:5f:19:cf:7d:6f:6c:89:ae:
e5:2f:49:ad:e4:51:03:47:4f:15:36:1b:8b:dc:4b:
e6:58:6d:02:13:82:48:90:c0:c7:a9:37:d1:b7:55:
64:67:9a:0b:9e:eb:5a:51:7d:56:31:15:fa:a4:e7:
4e:d5:88:69:e3:dd:70:99:91:46:1a:84:71:5f:3b:
06:7f:5f:6f:37:72:fd:d5:f0:68:b9:68:4e:36:75:
46:f9:b8:08:97:fc:17:e2:2f:e6:83:eb:b6:00:80:
1b:fc:07:5a:13:c3:fa:19:73:e9:2a:3d:d1:35:58:
b2:0b:99:60:f0:c6:54:cc:79:1b:97:56:44:27:0a:
cf:e8:57:6e:47:8b:0a:d5:97:b9:9d:e4:0d:8b:d0:
c9:c3:80:f7:3c:26:6f:10:a9:a6:37:40:c9:5e:e6:
d2:df:91:5d:6d:10:52:2c:22:a7:ef:70:3d:ae:a8:
51:28:ed:38:3b:13:1a:16:e4:84:3e:8c:8b:d8:f9:
1f:3f:5b:2d:41:2c:6a:50:bd:a6:1c:9d:a9:77:e3:
c5:7c:bc:26:93:32:da:39:f9:e7:f6:45:98:59:71:
61:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3B:47:71:7A:CA:E5:CF:73:7D:2D:01:4E:D0:04:FB:AB:A8:B0:30
X509v3 Authority Key Identifier:
keyid:48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:25:49:79:cf:46:82:fd:18:af:15:8a:f5:98:e8:82:aa:ce:
0d:e0:95:f4:dc:56:cd:0d:74:fa:49:42:ae:d1:3f:00:38:f6:
66:ac:71:2f:97:13:65:75:f7:89:c8:21:97:af:e7:5d:0d:fa:
98:5a:6d:9f:aa:92:5d:d8:02:00:96:8d:aa:8e:aa:a3:3b:aa:
aa:a4:b0:42:b3:dc:ce:10:1c:a4:bf:22:23:b7:9e:b5:58:31:
52:5d:b6:8a:e6:ce:02:e6:97:6d:c1:1e:36:9c:b8:4e:81:bd:
12:e3:54:b4:fc:68:b0:e4:17:4a:9b:ed:6b:c5:96:05:9f:67:
02:fd:4e:4f:18:60:97:d5:73:26:f8:e1:ac:ec:11:53:17:69:
8d:62:04:c9:b1:ca:5e:93:29:28:6b:b2:5e:cb:06:a6:2c:4a:
34:d8:2b:8a:46:86:fe:ce:25:a7:ce:3d:93:11:55:83:b9:79:
61:32:39:d6:c7:3a:f2:50:19:55:40:3a:b0:77:2c:c8:57:dc:
e4:be:e2:08:ff:54:66:e5:0b:68:7f:b9:b5:44:c2:fc:ba:12:
9d:c8:8b:75:c4:31:02:f4:0d:fd:41:71:9d:69:e2:b5:b8:a0:
90:74:5e:bb:ff:af:c9:0c:54:cb:91:c5:16:88:c8:32:f7:f3:
16:7d:9d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:17:46 2026 by rpki-client