Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
File: sl2FaYjGKmAgc-wpOFgd1KWG-48.mft (raw, json)
Hash identifier: vnA3OtBATHVL+D2pd3jdmQdP8DM6pgKa7DoOQm74zwI=
Subject key identifier: 01:AA:1E:2A:4D:23:D6:90:D3:36:70:37:20:25:2F:A9:D0:CE:82:0F
Authority key identifier: B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F
Certificate issuer: /CN=b25d856988c62a602073ec2938581dd4a586fb8f
Certificate serial: 019D265F10E17C809F72C05D3564A0EE74B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:00:57 +0000
Manifest this update: Wed 25 Mar 2026 19:00:57 +0000
Manifest next update: Thu 26 Mar 2026 19:00:57 +0000
Files and hashes: 1: 7sxuNjHlIxiavOHQyqNdwSZR25M.roa (hash: fIAdEbyDLTByjgDMXOH4/6dlp6Jlh9eCqm6V/Zxss80=)
2: sl2FaYjGKmAgc-wpOFgd1KWG-48.crl (hash: vMGqgfdy9zO0Kh27/DQBmXyyOp1fJgVWoEkC5/dm3/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:10:e1:7c:80:9f:72:c0:5d:35:64:a0:ee:74:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25d856988c62a602073ec2938581dd4a586fb8f
Validity
Not Before: Mar 25 19:00:57 2026 GMT
Not After : Mar 26 19:00:57 2026 GMT
Subject: CN=01aa1e2a4d23d690d336703720252fa9d0ce820f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:cd:31:84:6e:02:96:ec:bf:76:8c:51:9c:81:
87:d6:fc:81:80:e9:9b:9e:21:d9:37:2d:be:93:2d:
cc:f2:ff:9c:b3:4b:68:7c:32:1f:fd:d3:e7:d8:f9:
0a:c4:4b:4c:44:1a:47:29:b5:6e:ee:e9:de:77:bb:
9a:ac:54:14:db:c8:15:81:d2:dc:c0:01:83:4e:fd:
b2:7d:bc:60:cd:a3:c4:db:c0:29:f1:c9:73:d5:53:
37:9a:05:a8:0f:d2:da:f8:9c:e5:9c:2c:06:97:27:
ef:4a:b2:2b:d4:c3:09:bc:20:56:68:49:04:6d:44:
d3:29:5e:7f:f2:2a:6b:57:12:df:92:f8:86:45:7a:
62:48:32:04:1d:26:40:68:1f:90:11:c5:3e:68:97:
f7:82:fd:b9:a4:dc:67:eb:16:e5:20:b2:a7:27:d8:
98:b8:58:56:6d:8d:4b:2f:da:94:a1:5f:53:db:38:
7e:01:af:05:1e:2f:2a:80:d8:89:f5:96:c5:bc:48:
a5:94:db:e2:b2:c0:68:b4:e9:00:67:f0:48:5a:c3:
7b:22:ae:d4:6c:fa:cb:4b:49:13:e7:ae:6a:cb:9c:
a9:2b:91:ea:fd:72:97:03:4e:02:7c:53:be:a7:bf:
c3:97:55:b6:ce:44:13:b5:ab:bb:e0:35:8c:ac:ed:
da:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AA:1E:2A:4D:23:D6:90:D3:36:70:37:20:25:2F:A9:D0:CE:82:0F
X509v3 Authority Key Identifier:
keyid:B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:27:ee:5c:ee:3b:2f:f4:40:72:5e:1a:be:7c:04:4b:40:6e:
27:f4:49:b7:9b:12:b4:ff:78:61:65:f5:00:f0:db:1a:10:15:
e2:ed:b5:8c:9d:1f:bb:1e:26:54:9a:b7:17:17:e2:00:e7:6e:
1f:ed:92:3f:5f:c4:19:a6:c2:88:80:b6:1b:5e:7f:2d:db:9a:
53:98:8b:d3:85:4f:db:e8:28:98:c2:1f:9c:02:14:00:ff:31:
8f:ee:47:38:80:61:c6:12:eb:3a:17:ce:f8:98:35:52:91:72:
f8:af:d5:d1:bd:0c:cb:dd:f9:95:52:9f:59:92:74:44:36:75:
83:2f:d5:17:53:d6:9d:c9:ef:a5:e9:36:7a:18:b7:f5:67:87:
49:b4:92:42:e4:5c:2b:7f:30:b9:c0:e1:e1:64:14:e2:b6:d1:
4f:6d:bd:e5:a3:0b:6d:af:72:6e:8e:64:a9:8a:f9:bf:3b:45:
a4:2b:d6:0f:ef:c5:fb:e9:11:4e:bd:9a:49:82:83:0e:73:39:
b7:3b:6c:ed:a3:ee:53:d7:26:27:3a:88:b7:a4:54:38:0e:08:
54:ad:8b:47:a3:78:62:8c:2b:70:23:f2:6c:ea:8b:a4:b3:22:
6b:7d:95:f1:f4:64:50:c8:b4:78:85:df:21:19:c5:aa:34:07:
40:bd:6a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:43 2026 by rpki-client