Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
File: sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft (raw, json)
Hash identifier: SsKTX8s2z/dvlprLm5l/8VtzRdCmt3p2PSRJ8yzFFxE=
Subject key identifier: B4:06:55:7B:66:32:F5:81:F8:E2:45:62:2E:3C:CB:A7:8B:86:22:DA
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 01A0D5709395E7242F17D239A3CE9623B83E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
Manifest number: 1153
Signing time: Thu 24 Sep 2026 22:01:59 +0000
Manifest this update: Thu 24 Sep 2026 22:01:59 +0000
Manifest next update: Fri 25 Sep 2026 22:01:59 +0000
Files and hashes: 1: J3HD5d0SMV-R_mfbvG3dJVqlH-Y.roa (hash: tkc15QCtNWavxhUnqZNNlUVnnK/d2SoDMZwxZ/0lGlk=)
2: m6LIV73xO4kHTsWdqgKGOHvaXtE.roa (hash: xs1n0jReKeqXr1lEDMiVoEWUuyrVXL8g65tDgZej+UA=)
3: sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl (hash: 8lfFF+L/dqVwmFbiWG8VhCd56DjR6ZkXqNu/7SNenlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:93:95:e7:24:2f:17:d2:39:a3:ce:96:23:b8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Sep 24 22:01:59 2026 GMT
Not After : Sep 25 22:01:59 2026 GMT
Subject: CN=b406557b6632f581f8e245622e3ccba78b8622da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ac:0d:0e:f6:ca:00:88:1c:0a:5c:94:a1:0f:
b4:b9:eb:34:93:9c:71:1b:56:87:a9:28:29:7f:0b:
d0:12:0b:d9:87:7e:df:c4:eb:e2:ab:58:dc:b5:c2:
f4:3f:fa:13:10:37:33:75:79:61:af:3c:ab:30:c5:
3f:aa:46:4c:77:fa:d5:59:b4:88:9a:25:e5:a3:0f:
4b:4a:3c:c4:82:cc:58:50:ac:1f:01:b7:02:23:1c:
01:1f:92:d2:c7:9b:1c:f9:45:47:89:54:2b:2d:df:
bd:21:f8:d5:ca:be:7e:f4:2f:c2:f6:31:3e:a7:f1:
cf:5f:57:a9:ab:37:ee:2b:cd:f0:92:ab:0d:af:c2:
d0:7f:6c:c4:21:b6:8a:96:e4:08:4f:62:f3:75:d6:
b5:ee:8e:cb:bb:0c:e4:0e:f8:b5:7e:2b:40:c3:f5:
60:48:0e:3e:c7:d4:b6:76:1e:48:a7:1e:99:74:07:
da:80:d7:dd:29:09:d9:89:f6:99:8d:9b:12:f4:1a:
bb:e2:3c:83:38:be:ef:b2:ad:d3:f6:f9:c9:9b:6c:
cc:34:03:50:76:88:b0:27:32:54:78:69:0d:1e:e4:
fb:c6:c4:2b:a7:87:f8:8d:8d:f9:d3:7d:45:83:9b:
48:e4:98:85:ed:68:48:f5:5d:7b:21:d1:5e:d0:68:
cb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:06:55:7B:66:32:F5:81:F8:E2:45:62:2E:3C:CB:A7:8B:86:22:DA
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:6d:bd:22:7f:b6:fe:8d:ec:4f:83:d3:e9:52:98:2f:e2:f9:
49:34:ee:92:5e:1b:5f:a0:af:77:12:b4:3a:c4:fc:98:eb:69:
14:51:bd:1d:cb:5d:64:0f:89:d5:15:4a:45:de:2e:57:8b:17:
f8:bf:c4:e8:b5:10:51:83:1f:d4:e7:4e:1f:3b:b3:d0:7b:15:
b9:84:83:6c:20:66:13:07:f8:83:3f:16:16:fe:88:5e:b6:1d:
14:3b:25:20:5d:14:7f:31:18:2f:3d:91:ef:c7:fe:7e:34:08:
92:d3:50:eb:1d:b3:00:e3:2a:ce:cb:f3:7d:b5:51:41:12:cf:
6b:01:47:2e:1a:41:fb:ea:f5:7f:fa:60:26:9b:71:08:35:6e:
eb:5b:5f:67:aa:e2:94:eb:61:0b:86:f4:da:8f:0d:9b:cb:2a:
48:08:2b:86:be:b3:65:86:18:76:b2:10:d6:7e:27:22:b3:40:
88:aa:71:96:f8:02:06:11:05:6d:cd:49:84:ee:a7:b3:a2:dd:
5b:5f:2f:c0:cc:ee:ec:f1:b0:3b:9a:1d:35:fb:b9:2e:44:b4:
19:48:64:1b:12:db:36:92:37:bb:6f:c4:79:38:5d:c2:07:b8:
db:8d:00:87:a0:eb:fe:f6:aa:65:cf:5d:7b:72:bc:d7:3e:73:
b7:cf:47:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVcJOV5yQvF9I5o86WI7g+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYmQ2OGUzNzBlN2VjMjViZWM4ZTAxNDk3YjIxMzhkOTVk
YzZlYmMwHhcNMjYwOTI0MjIwMTU5WhcNMjYwOTI1MjIwMTU5WjAzMTEwLwYDVQQD
EyhiNDA2NTU3YjY2MzJmNTgxZjhlMjQ1NjIyZTNjY2JhNzhiODYyMmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0awNDvbKAIgcClyUoQ+0ues0k5xx
G1aHqSgpfwvQEgvZh37fxOviq1jctcL0P/oTEDczdXlhrzyrMMU/qkZMd/rVWbSI
miXlow9LSjzEgsxYUKwfAbcCIxwBH5LSx5sc+UVHiVQrLd+9IfjVyr5+9C/C9jE+
p/HPX1epqzfuK83wkqsNr8LQf2zEIbaKluQIT2Lzdda17o7LuwzkDvi1fitAw/Vg
SA4+x9S2dh5Ipx6ZdAfagNfdKQnZifaZjZsS9Bq74jyDOL7vsq3T9vnJm2zMNANQ
doiwJzJUeGkNHuT7xsQrp4f4jY35031Fg5tI5JiF7WhI9V17IdFe0GjLtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQGVXtmMvWB+OJFYi48y6eLhiLaMB8GA1UdIwQY
MBaAFLC9aONw5+wlvsjgFJeyE42V3G68MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0wxbzQzRG43Q1cteU9BVWw3SVRqWlhjYnJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9mNGNhMWMtMzVkZC00Y2IxLTg0ZmEt
ODExNWNhZmQzOGNlLzEvc0wxbzQzRG43Q1cteU9BVWw3SVRqWlhjYnJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9mNGNhMWMtMzVkZC00Y2IxLTg0ZmEtODExNWNhZmQzOGNl
LzEvc0wxbzQzRG43Q1cteU9BVWw3SVRqWlhjYnJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu229In+2
/o3sT4PT6VKYL+L5STTukl4bX6CvdxK0OsT8mOtpFFG9HctdZA+J1RVKRd4uV4sX
+L/E6LUQUYMf1OdOHzuz0HsVuYSDbCBmEwf4gz8WFv6IXrYdFDslIF0UfzEYLz2R
78f+fjQIktNQ6x2zAOMqzsvzfbVRQRLPawFHLhpB++r1f/pgJptxCDVu61tfZ6ri
lOthC4b02o8Nm8sqSAgrhr6zZYYYdrIQ1n4nIrNAiKpxlvgCBhEFbc1JhO6ns6Ld
W18vwMzu7PGwO5odNfu5LkS0GUhkGxLbNpI3u2/EeThdwge4240Ah6Dr/vaqZc9d
e3K81z5zt89Hng==
-----END CERTIFICATE-----
Generated at Fri Sep 25 08:47:35 2026 by rpki-client