Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
File: sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft (raw, json)
Hash identifier: 0AE0MQ/iy+9pJi0gA/2+1vAoJD8fPu3Sd9dYOyZAnVE=
Subject key identifier: 1A:5D:E9:23:0A:BA:C5:C4:99:DB:50:60:2D:E8:4B:23:E2:2E:D6:B3
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 019E1E356120635AD3CB2BF90CB6226665FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
Manifest number: 0FEB
Signing time: Tue 12 May 2026 22:01:15 +0000
Manifest this update: Tue 12 May 2026 22:01:15 +0000
Manifest next update: Wed 13 May 2026 22:01:15 +0000
Files and hashes: 1: J3HD5d0SMV-R_mfbvG3dJVqlH-Y.roa (hash: tkc15QCtNWavxhUnqZNNlUVnnK/d2SoDMZwxZ/0lGlk=)
2: m6LIV73xO4kHTsWdqgKGOHvaXtE.roa (hash: xs1n0jReKeqXr1lEDMiVoEWUuyrVXL8g65tDgZej+UA=)
3: sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl (hash: 8o7NukcEie25DqPC4g43ZHVvfAgYuzEPGO3XE44GdqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:61:20:63:5a:d3:cb:2b:f9:0c:b6:22:66:65:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: May 12 22:01:15 2026 GMT
Not After : May 13 22:01:15 2026 GMT
Subject: CN=1a5de9230abac5c499db50602de84b23e22ed6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bb:1e:27:2e:25:5f:1b:cb:72:76:e9:13:fa:
93:60:9a:23:19:96:22:ca:ec:12:3b:91:10:55:6c:
af:dc:62:81:fe:f9:2d:ff:d0:47:f7:79:46:7d:6a:
ef:37:86:df:07:8b:65:00:f9:89:69:e2:c7:52:b9:
ad:9a:c1:88:78:a2:c6:89:2e:a0:72:4c:47:9c:d1:
f3:a7:5e:3e:fa:5e:23:6f:ca:06:15:e9:ec:69:93:
19:25:ca:95:21:83:b3:2e:8f:8e:49:2c:8f:0e:f2:
87:36:85:76:69:79:5b:9f:76:fc:99:ed:15:31:c2:
11:ed:97:e8:24:cd:91:b8:d8:bb:f8:7c:40:32:a0:
20:0d:5e:72:e7:d0:ca:a0:31:21:18:6c:fb:13:dd:
44:57:14:58:8b:c6:68:68:f6:87:bc:f5:40:02:52:
56:84:ad:a1:07:d9:b6:9b:ef:74:c9:07:f6:f3:66:
39:86:ba:09:e2:74:e8:30:f2:37:82:b7:6f:01:82:
d0:75:ab:32:d2:6c:3e:93:30:c6:4e:b8:bd:44:70:
ca:f6:00:04:6c:cb:b5:f0:d5:c5:c9:f4:02:5f:d8:
68:0c:97:6b:fd:20:2b:96:68:08:40:70:a8:d3:da:
32:9e:58:68:87:f6:fb:e9:02:00:b4:a3:17:e5:b4:
34:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5D:E9:23:0A:BA:C5:C4:99:DB:50:60:2D:E8:4B:23:E2:2E:D6:B3
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d0:80:a0:b0:e7:f8:ad:89:f8:2d:2e:83:ce:74:8a:4b:34:
d6:b6:41:2f:76:da:61:54:25:13:90:3b:95:d4:c2:3c:d8:1e:
76:2d:ff:2a:3a:2c:28:c7:d7:34:fa:70:d0:17:28:05:43:ba:
3d:e5:02:03:21:10:8e:be:f7:ca:d8:22:cd:31:3f:9b:1f:75:
d8:ef:53:a7:26:a7:bb:38:5c:c0:5a:9f:ca:2c:d0:f2:7f:1f:
ef:ee:1d:d9:94:ed:c7:26:b8:f9:54:b3:30:01:ce:b3:c6:1c:
ac:5b:4a:0c:27:9f:de:69:d4:56:92:04:fc:ca:9c:69:5b:06:
38:56:25:25:c4:7f:cb:64:5a:e9:1a:49:12:e0:ea:13:fc:e8:
88:fe:ed:c1:b6:0c:a0:42:c7:cf:2a:84:6c:a8:2a:e3:80:eb:
b9:80:c3:aa:2e:48:12:63:a7:d5:9d:71:20:26:ce:59:94:e5:
5a:27:95:43:3e:3d:ae:a0:77:79:c0:6f:01:20:ab:08:f7:62:
16:56:02:51:a3:94:f9:00:69:12:b9:b2:5b:4e:33:05:10:67:
25:aa:85:af:1d:a7:47:a0:02:0a:12:62:7f:7e:8e:cc:33:2f:
c7:b6:3e:05:cb:e4:19:f4:96:55:e2:f1:ac:bb:12:ab:a1:93:
9d:7f:a3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:29 2026 by rpki-client