Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
File: sLGxJtrAqgt3lIZADt5yVLJe6qY.mft (raw, json)
Hash identifier: A9af2yOzZmTm2wjWnYNsTC9ZlB0PMfSLXaO4XhCVWrE=
Subject key identifier: F8:84:B0:33:24:32:66:B4:CC:2D:E1:B8:27:41:60:5B:0B:7F:E2:96
Authority key identifier: B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6
Certificate issuer: /CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
Certificate serial: 01A0D3B867A6624584E6B81FE1B0088D2ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
Manifest number: 1A00
Signing time: Thu 24 Sep 2026 14:01:12 +0000
Manifest this update: Thu 24 Sep 2026 14:01:12 +0000
Manifest next update: Fri 25 Sep 2026 14:01:12 +0000
Files and hashes: 1: 3CIM-rszzFckhjZbgzPmZtOKZv4.roa (hash: VqajRiaghj0MLKmKn/iBz4Zyi+LNEnSguYlblCLEBTI=)
2: sLGxJtrAqgt3lIZADt5yVLJe6qY.crl (hash: XqW+r0oZtz9NKnCPdW7HVSeVfyZKS5xG2fMXxGYzfg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:67:a6:62:45:84:e6:b8:1f:e1:b0:08:8d:2a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
Validity
Not Before: Sep 24 14:01:12 2026 GMT
Not After : Sep 25 14:01:12 2026 GMT
Subject: CN=f884b033243266b4cc2de1b82741605b0b7fe296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b7:38:d4:1a:dc:d5:d0:f9:da:0f:57:13:25:
58:42:d1:32:a3:77:f7:76:60:ef:d4:21:7f:28:b2:
50:23:e1:f0:d9:f3:20:04:33:89:f0:84:8c:7c:bf:
4b:4d:c2:66:d4:59:22:a4:35:ab:25:70:79:8d:5a:
9d:3a:d9:f7:fc:9e:7d:8d:46:93:67:22:ca:17:94:
8a:cd:48:9a:9f:f7:d8:09:70:5e:d9:ba:87:97:75:
60:a8:0a:e8:98:a9:38:24:1c:a0:1c:a3:b6:bd:33:
3f:a8:09:bb:40:c7:aa:24:d7:e1:5b:ef:21:98:6c:
34:25:a9:77:6c:45:7a:85:97:4f:09:c9:7f:4d:52:
6c:12:2c:06:4d:96:eb:65:eb:a4:e3:37:fb:0d:f4:
2e:41:6a:62:03:85:33:e4:60:37:a0:25:5b:4b:3f:
52:9b:80:1d:ab:8a:3c:39:83:92:4c:12:d7:2f:b3:
09:d6:61:c1:f8:43:81:8f:89:58:b4:ad:6c:49:ef:
ac:ad:4e:a7:40:45:08:b2:7a:e0:44:eb:87:f0:0f:
a9:11:78:fa:d2:6c:42:36:ef:0f:d3:47:75:e3:cc:
e3:2b:a3:87:43:a9:5d:f1:6c:b6:29:54:0f:c4:b8:
93:d6:38:d9:37:17:33:d5:67:32:ab:b7:9d:c7:8f:
d0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:84:B0:33:24:32:66:B4:CC:2D:E1:B8:27:41:60:5B:0B:7F:E2:96
X509v3 Authority Key Identifier:
keyid:B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f7:f5:1e:fa:49:c7:e4:8d:94:33:55:31:2b:eb:b9:7b:37:
41:55:05:8b:62:33:74:4b:1d:7b:1e:ad:7f:0c:2a:b0:d2:08:
42:ac:b4:64:8d:75:c6:f5:3b:7b:76:90:90:13:f5:df:ff:2c:
c0:1e:3d:05:97:0c:ab:ab:10:52:76:9f:e4:47:28:2c:c7:06:
4d:a4:98:20:cb:c5:7c:bf:40:34:e4:c1:11:78:0c:6d:25:ce:
5e:50:9e:8f:a0:72:43:af:74:6c:a3:7c:1d:54:3b:4c:5d:7a:
02:bc:2d:11:3e:35:86:35:f5:58:99:9d:51:cc:b1:e7:e3:47:
83:8f:88:11:3c:5d:ce:01:bd:12:50:c4:1c:68:d7:1f:90:b1:
f1:d9:bc:47:90:77:1a:0a:36:a3:30:42:01:76:fb:7a:fd:1c:
60:89:fd:89:59:5e:b6:24:d1:3d:a7:cf:e4:6d:39:32:3d:9e:
ad:53:1c:86:64:f0:81:62:e9:38:f1:b3:bc:26:8d:8c:34:aa:
8c:b0:3f:ec:4b:e5:d5:ab:07:01:7d:a1:cf:ff:b1:fc:10:67:
d5:1f:dc:42:dd:b0:33:d9:65:f4:13:2c:1b:3d:04:c7:0c:56:
09:b7:77:12:87:02:37:65:e1:d0:4d:0e:39:f2:6e:8e:5b:e9:
f5:9f:86:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:55:23 2026 by rpki-client