Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
File: sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft (raw, json)
Hash identifier: 6DN+k2Son4tSJYAwb5eFDWy6Miwr4gSD3fuO6E2N1Kc=
Subject key identifier: 83:49:CA:0C:A9:9D:6B:FA:45:4E:AD:E9:37:43:30:F5:AA:F3:DB:91
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 019D2703EE9E6E4220D8287B9AC314F9E8A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
Manifest number: 0F6B
Signing time: Wed 25 Mar 2026 22:01:02 +0000
Manifest this update: Wed 25 Mar 2026 22:01:02 +0000
Manifest next update: Thu 26 Mar 2026 22:01:02 +0000
Files and hashes: 1: J3HD5d0SMV-R_mfbvG3dJVqlH-Y.roa (hash: tkc15QCtNWavxhUnqZNNlUVnnK/d2SoDMZwxZ/0lGlk=)
2: m6LIV73xO4kHTsWdqgKGOHvaXtE.roa (hash: xs1n0jReKeqXr1lEDMiVoEWUuyrVXL8g65tDgZej+UA=)
3: sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl (hash: KYkYMV66iKKKiKfkJTi86n3WqM4PTnYcFTxkcG0LE70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ee:9e:6e:42:20:d8:28:7b:9a:c3:14:f9:e8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Mar 25 22:01:02 2026 GMT
Not After : Mar 26 22:01:02 2026 GMT
Subject: CN=8349ca0ca99d6bfa454eade9374330f5aaf3db91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8c:67:ce:50:5e:fd:7e:81:a8:23:6d:59:8e:
1d:1d:8b:7a:db:41:42:34:37:cf:76:e7:00:b7:b6:
43:2a:d0:39:5a:d2:e5:61:03:f9:06:61:ed:c3:50:
f0:bf:97:b7:c0:51:30:44:15:10:f7:cc:d6:e7:22:
b5:a0:d8:66:18:07:d6:12:78:1c:13:06:2a:63:9a:
7f:0b:4b:91:1d:66:20:a4:10:e3:2e:e9:cd:7c:1e:
3f:74:02:0b:43:c3:7a:33:af:1a:b7:d8:d5:b9:49:
8e:7e:08:9f:b3:54:12:60:97:31:8c:ab:0d:6e:39:
bf:a0:9b:96:21:f9:88:10:e8:05:59:09:5a:61:96:
40:40:b8:68:ae:5c:8a:19:78:5b:43:63:5f:6d:e9:
60:be:08:f3:ca:e1:99:46:95:16:a2:80:16:82:04:
92:f7:d8:24:54:e3:fc:f9:ac:e9:ab:a8:6b:ac:45:
db:7d:6c:d3:16:3c:94:2f:ca:33:f0:18:d3:8b:43:
80:f8:63:f8:6c:41:ca:74:ea:ad:6a:0d:f7:29:54:
18:22:fc:0a:6d:d0:c3:86:93:92:1a:16:45:60:da:
e9:d0:24:a0:d2:5a:32:ee:6d:9f:ff:40:57:ca:76:
6a:93:f9:a6:f5:3d:a8:2a:f1:39:73:1f:dc:19:b9:
c1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:49:CA:0C:A9:9D:6B:FA:45:4E:AD:E9:37:43:30:F5:AA:F3:DB:91
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:cb:1d:6d:71:40:7b:cf:65:27:44:1d:08:2e:97:ef:5a:6e:
4c:f0:4f:28:0e:bd:b8:29:32:f7:b6:71:98:4a:73:3e:8e:27:
4e:ea:35:ba:0c:f0:a0:c8:ca:30:78:bc:ce:d0:a9:0d:fe:f3:
b9:d1:8a:9e:c9:c8:86:27:49:3b:68:7f:0d:ff:40:49:4f:e8:
0e:fb:61:53:85:52:b9:ca:f0:53:53:b2:a0:4d:66:3c:73:d1:
a5:f1:03:d1:92:50:8a:76:34:e0:76:36:95:48:aa:b2:ac:71:
5a:ba:29:86:d7:0e:23:76:da:f5:d0:c6:7c:23:17:d1:52:42:
26:01:f0:c7:d2:05:d4:04:a9:45:f2:9b:c7:91:73:13:88:47:
60:5d:52:20:cd:53:62:88:14:1c:32:69:40:1e:de:49:65:01:
21:18:34:cb:55:d3:91:13:da:50:19:2f:f5:c3:26:27:2a:a5:
a6:e2:55:9b:40:dc:b4:a9:e4:d9:ad:16:f1:00:47:95:77:bc:
f5:37:e7:e5:48:b9:5d:37:50:a3:3f:78:a6:a2:2a:66:e3:5f:
8c:8c:fb:7c:6d:04:5c:ad:9b:29:74:ea:32:b1:2f:59:29:25:
b2:5e:04:a9:77:22:79:f2:c7:02:c2:7a:4c:f1:9a:01:9f:d2:
c1:30:3f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:54 2026 by rpki-client