Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
File: sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft (raw, json)
Hash identifier: puvSaVlLJB7Gkjrk91+xFXGNlvjafgvfGoxizxQ+dKk=
Subject key identifier: 17:93:B2:03:3F:91:E6:CF:1B:98:B7:AD:48:05:F5:97:7F:4A:3E:2D
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 019F94DC658CD94C4CBB7AE779B6F589D001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
Manifest number: 10AD
Signing time: Fri 24 Jul 2026 16:01:39 +0000
Manifest this update: Fri 24 Jul 2026 16:01:39 +0000
Manifest next update: Sat 25 Jul 2026 16:01:39 +0000
Files and hashes: 1: J3HD5d0SMV-R_mfbvG3dJVqlH-Y.roa (hash: tkc15QCtNWavxhUnqZNNlUVnnK/d2SoDMZwxZ/0lGlk=)
2: m6LIV73xO4kHTsWdqgKGOHvaXtE.roa (hash: xs1n0jReKeqXr1lEDMiVoEWUuyrVXL8g65tDgZej+UA=)
3: sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl (hash: +A+cKtoz9/e0WZwTT5/5TVL8QpPxKdWKraxzdR4KEIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:65:8c:d9:4c:4c:bb:7a:e7:79:b6:f5:89:d0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Jul 24 16:01:39 2026 GMT
Not After : Jul 25 16:01:39 2026 GMT
Subject: CN=1793b2033f91e6cf1b98b7ad4805f5977f4a3e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:81:b3:19:ee:36:ad:0f:dc:3c:79:4f:f4:
d4:a9:04:e8:c1:01:4a:fa:7a:95:76:13:51:28:17:
bf:c6:ab:e9:83:02:dc:1a:d1:87:3e:29:04:f4:ba:
15:cd:8c:f6:6e:f7:77:ef:52:7e:74:a1:60:65:2f:
4f:6e:2f:a9:f5:8f:86:4c:9e:2d:24:6f:ff:cf:78:
16:2b:76:4e:49:d8:5d:bc:ee:17:a9:66:8f:83:1d:
7f:e1:fe:35:fd:f6:41:6e:a2:7f:9d:0e:f8:f6:c0:
30:24:fa:ef:93:13:e1:34:6b:75:dc:2b:d4:76:1f:
ad:75:37:07:4f:d1:66:c9:5f:78:70:d6:77:e3:cf:
d1:60:81:b8:27:92:2d:8b:ce:11:31:d7:8f:f2:4a:
71:35:f6:81:b9:aa:95:b7:d2:c5:df:2d:0c:1d:78:
f9:85:38:5e:77:bc:5d:f8:91:bf:3a:c2:8a:ee:21:
9f:05:72:42:50:e8:bc:11:85:98:d4:55:82:a4:1b:
68:31:3c:fd:72:45:25:4e:66:86:9f:92:e0:fc:7c:
3e:45:78:9f:40:b4:27:96:b5:7a:99:c9:6d:74:01:
f3:12:19:97:f2:70:9d:f0:d1:03:5c:5e:94:d0:19:
61:22:7b:c1:93:17:bb:cb:78:79:1d:cc:19:38:6f:
d3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:93:B2:03:3F:91:E6:CF:1B:98:B7:AD:48:05:F5:97:7F:4A:3E:2D
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f4:51:5f:f8:72:04:d1:84:8a:ba:7e:15:d8:b6:30:3d:9a:
2a:fa:31:cd:f1:77:33:4e:28:20:1b:69:14:b5:1f:22:74:30:
7f:69:4c:08:6b:62:aa:ad:47:34:0f:a0:79:36:62:07:0e:6e:
57:4b:b1:74:ed:27:32:22:d8:c3:46:9e:58:05:96:f5:e0:20:
29:7f:99:5c:01:72:9e:be:4a:5b:45:3a:09:99:fa:21:aa:2d:
81:01:7e:81:9c:52:b9:13:0d:32:81:59:0a:30:b0:f8:9c:b3:
de:67:cd:85:9c:49:0a:41:89:87:3f:9a:03:fb:3c:17:47:e2:
4b:5c:a0:82:01:66:d1:ec:bf:fc:f1:c5:d3:f1:59:43:81:f1:
c4:5a:cf:9e:61:bb:34:42:bf:75:b8:94:c7:4d:45:8f:14:0f:
3b:62:e5:52:2e:a6:bd:1e:a6:0f:5f:9f:e1:d8:fc:76:ba:53:
cd:2e:33:5b:b0:67:9a:dc:ba:91:dc:20:66:12:34:d1:ea:ca:
c8:11:e2:d7:ab:37:74:2a:6c:f5:52:cc:9a:1c:83:d1:88:29:
71:5c:d6:6b:00:0c:49:db:57:85:d5:b3:5b:fa:b3:0e:c3:df:
f7:51:52:9f:72:f1:37:16:a3:d9:b2:49:c9:0a:14:f2:fa:31:
09:e6:e9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:21 2026 by rpki-client