
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
File: SFldSlTtZEITxEYZXjb3jsGig5k.mft (raw, json)
Hash identifier: 6l7WK9LjvlrvIqss9FHUsSrhaaRC64ubyDj5UIYeBIE=
Subject key identifier: 24:A4:15:15:6C:97:B0:CA:42:EC:3C:EE:68:59:B0:33:CF:A2:F8:9C
Authority key identifier: 48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
Certificate issuer: /CN=48595d4a54ed644213c446195e36f78ec1a28399
Certificate serial: 01A15440645B2D544B7803823958F85EC0ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
Manifest number: 1AB0
Signing time: Mon 19 Oct 2026 13:01:08 +0000
Manifest this update: Mon 19 Oct 2026 13:01:08 +0000
Manifest next update: Tue 20 Oct 2026 13:01:08 +0000
Files and hashes: 1: SFldSlTtZEITxEYZXjb3jsGig5k.crl (hash: vO8Snj/OWY7tHMeKwBl+MrkM9S9gHYGwL0v1R/Ca8EE=)
2: hLXYn7_sE8_0uE-9APcSyfa3cKM.roa (hash: OnfUzd7ri0bA88lhkI8jx6ukwUTJ7Iy7tmQtDjoFSz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:40:64:5b:2d:54:4b:78:03:82:39:58:f8:5e:c0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48595d4a54ed644213c446195e36f78ec1a28399
Validity
Not Before: Oct 19 13:01:08 2026 GMT
Not After : Oct 20 13:01:08 2026 GMT
Subject: CN=24a415156c97b0ca42ec3cee6859b033cfa2f89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:df:8b:43:d1:9c:bc:3c:24:4a:8a:5b:63:ef:
a0:3c:9a:98:0b:71:ed:ec:26:d3:17:a4:9e:7a:be:
c8:34:de:0b:bc:ed:09:78:3d:5b:45:37:a7:7e:d5:
8d:d2:d9:33:68:92:bb:ae:e9:49:79:0b:3c:1c:91:
f6:fb:06:80:3b:d8:47:a7:92:19:5d:7d:54:96:72:
17:ad:25:c6:b7:0e:ce:c4:8f:ed:2c:f3:f3:0f:23:
92:38:df:e0:94:12:f6:05:e7:e9:34:54:aa:74:19:
b3:f8:fe:03:f1:73:fb:a9:b5:59:11:78:e0:f7:16:
26:2f:fb:0c:23:2f:52:51:13:eb:b7:64:44:88:22:
b9:6c:c7:3e:1c:0f:99:a2:31:e1:e9:45:ea:40:41:
cd:15:55:b2:80:20:ec:75:7a:0f:74:7e:ee:61:ea:
c0:c1:a5:af:e7:6a:5f:81:c9:2a:79:16:35:c9:29:
bd:75:8b:84:df:bb:2c:d2:89:18:c2:ac:08:71:d1:
b0:8c:6e:89:20:bd:91:76:c2:c3:d0:cf:cb:6e:42:
77:74:44:aa:39:15:7e:87:40:1c:87:cd:3e:aa:72:
49:a8:7c:51:2f:24:17:8e:24:c6:bf:0d:4f:7c:25:
e3:c3:1b:01:a8:08:96:fe:6f:d3:42:04:f5:1c:dd:
84:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A4:15:15:6C:97:B0:CA:42:EC:3C:EE:68:59:B0:33:CF:A2:F8:9C
X509v3 Authority Key Identifier:
keyid:48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e6:8d:3c:2c:a1:75:d4:9d:18:96:f0:51:fc:cb:82:35:da:
af:3e:7b:17:a9:21:e1:8e:94:af:92:77:58:a5:fd:f7:7a:92:
3d:0d:a0:0d:98:92:b1:b5:d3:a1:a5:01:ab:11:db:a4:b7:29:
dd:0d:66:f1:1d:8f:62:b5:76:12:91:99:f1:9e:ba:17:d6:b9:
cc:f9:f4:d3:59:4f:dc:47:9e:40:e6:14:59:5a:cb:40:cc:93:
a3:6f:16:31:9c:85:5d:46:6e:a0:7f:00:58:dd:93:3c:fa:72:
c8:88:64:cb:79:f4:fd:c7:d8:9c:70:b1:b5:f5:02:3f:dd:e4:
15:2d:08:53:9b:c2:ab:1a:64:a0:96:d8:67:b3:37:1d:68:e2:
e0:fc:52:1a:7b:cb:82:f4:3d:b9:31:ba:d8:ba:ec:fc:8d:3f:
e6:35:05:c8:e7:ff:ef:eb:2c:05:e2:b5:72:7f:21:09:a0:9d:
29:75:36:41:0a:44:38:d3:cd:e7:72:40:99:68:33:64:3a:83:
b0:fa:93:f5:d6:45:60:f9:af:02:35:e1:f6:0c:10:c2:67:b7:
75:55:58:6d:49:2a:fa:cb:1f:ba:ae:27:a3:69:ba:dc:d0:3c:
da:44:9c:89:fa:ae:61:7d:8c:28:4f:b2:fc:32:2a:fa:08:19:
ce:d5:a8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 23:50:03 2026 by rpki-client