Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
File: slpaQ70jhPiS0mXlWLRBHosjK1U.mft (raw, json)
Hash identifier: cKhZS89f42MME+/KhCNuK1CJDt02Nm+iyd0gzgRgAtI=
Subject key identifier: 27:4C:3A:0A:D1:3D:26:7B:52:71:72:45:2A:6B:5A:60:B6:C2:8F:7A
Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
Certificate issuer: /CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Certificate serial: 019D375283F4D232DEF6BA374DAA34E627CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 02:00:47 +0000
Manifest this update: Sun 29 Mar 2026 02:00:47 +0000
Manifest next update: Mon 30 Mar 2026 02:00:47 +0000
Files and hashes: 1: 2MEGX0xXq-CS52TZ2rRO2bOlBks.roa (hash: /HvTwpT0Q11rSBUmASk+8crSrENE7H5BgnIrEvjimdw=)
2: slpaQ70jhPiS0mXlWLRBHosjK1U.crl (hash: DXpdOiESs/IeWbDPKy31WsBf7uaGCClt0p2SrQs7vDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:83:f4:d2:32:de:f6:ba:37:4d:aa:34:e6:27:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Validity
Not Before: Mar 29 02:00:47 2026 GMT
Not After : Mar 30 02:00:47 2026 GMT
Subject: CN=274c3a0ad13d267b527172452a6b5a60b6c28f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6b:f9:fb:c6:8b:41:4b:a3:f9:38:11:5d:6d:
f3:ba:35:c0:a7:ee:38:72:0d:f8:b9:60:6e:e4:8f:
67:9d:35:b3:e4:2a:ce:71:66:fc:7d:68:b1:d6:59:
4a:58:a1:c3:1d:ae:18:71:41:78:be:ce:06:5e:38:
0d:bd:81:71:4b:ec:47:fd:c3:85:f6:20:6e:04:30:
a1:66:bf:b5:b0:3b:ba:dd:56:36:57:4a:c3:55:8c:
7e:c1:51:d5:bc:79:7a:e1:2a:7d:e1:46:58:b5:c7:
ba:f8:2f:38:f6:80:0b:06:a8:0c:21:c9:f0:15:a1:
38:18:04:a3:36:aa:fc:fa:99:09:c0:37:80:c0:32:
20:1d:92:f9:9a:8e:a0:f6:d6:b9:47:7c:e0:e8:db:
b3:20:77:74:63:9a:77:76:63:44:b0:14:5a:c9:96:
0c:b0:48:e7:41:05:33:2a:21:cf:41:80:5b:83:b5:
c3:b5:64:71:83:e7:d4:2e:3f:ed:02:eb:b5:a5:fc:
ff:da:7a:4a:8a:15:af:37:5f:18:82:6a:56:ef:79:
a0:a3:59:b9:96:8c:4f:f1:26:3d:83:e8:e6:c1:d5:
67:2f:52:96:f3:8f:e7:44:04:56:55:c3:c7:42:4c:
86:2e:c7:48:63:17:58:ee:b1:3f:53:64:71:82:16:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4C:3A:0A:D1:3D:26:7B:52:71:72:45:2A:6B:5A:60:B6:C2:8F:7A
X509v3 Authority Key Identifier:
keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ed:bc:35:77:5d:ee:ad:6c:e5:55:39:53:17:43:cd:d5:7a:
92:c6:2b:fe:0b:f2:00:3a:57:4e:a4:f3:d4:7c:51:3c:db:69:
56:33:fc:38:e6:9e:6d:34:77:d0:80:e1:45:b6:6f:bd:fb:55:
bd:79:38:cc:8e:40:18:e7:63:77:14:3b:ab:96:cd:4b:00:6e:
7c:71:a7:c4:0f:e0:2e:fb:3f:71:59:4f:70:82:c7:28:1d:f9:
7d:0e:d1:87:05:0c:9f:a0:40:5f:1c:cc:60:d1:55:fe:25:cf:
42:e3:2b:b8:b5:96:28:72:1c:8f:00:8e:f0:a4:57:01:17:cf:
ee:c0:83:46:fc:d9:43:6a:68:ac:39:16:df:fe:17:21:30:a7:
75:08:92:3c:71:3e:64:95:3e:16:38:7d:ee:fb:57:a4:96:54:
2c:98:54:e4:d2:cb:c5:06:fc:18:cc:2a:6f:94:bc:02:33:a8:
0f:a2:d3:f8:69:be:72:02:92:d8:2f:95:92:99:1c:48:a7:a8:
37:1e:76:c9:3e:c6:fb:13:0a:c8:bc:e2:e0:b9:df:a2:ce:cf:
1d:07:4e:4c:1f:fb:59:7f:06:70:ef:26:58:63:5d:32:9f:96:
d8:bf:66:ae:b9:fa:57:01:c9:4b:1b:01:8c:7c:5c:7f:ea:a8:
e4:02:72:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:54 2026 by rpki-client