Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
File: sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft (raw, json)
Hash identifier: sUetnjO37b5uaxLte6gmM0ykJG9otlIc62PC0CzwoX8=
Subject key identifier: D0:17:6B:66:5D:2A:55:A5:FB:E5:50:29:0F:00:8A:D9:9C:3C:63:12
Authority key identifier: B0:B5:AE:0C:F2:75:26:24:3B:23:76:FE:D9:0C:16:0D:D7:38:21:60
Certificate issuer: /CN=b0b5ae0cf27526243b2376fed90c160dd7382160
Certificate serial: 019D3909A345360501CCCA085E8F1C41FFA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
Manifest number: 068E
Signing time: Sun 29 Mar 2026 10:00:26 +0000
Manifest this update: Sun 29 Mar 2026 10:00:26 +0000
Manifest next update: Mon 30 Mar 2026 10:00:26 +0000
Files and hashes: 1: sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.crl (hash: IB0Z0PtzOQ/TlrmRiAThaZg9Kootv++AZmNmhTlgZY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:a3:45:36:05:01:cc:ca:08:5e:8f:1c:41:ff:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5ae0cf27526243b2376fed90c160dd7382160
Validity
Not Before: Mar 29 10:00:26 2026 GMT
Not After : Mar 30 10:00:26 2026 GMT
Subject: CN=d0176b665d2a55a5fbe550290f008ad99c3c6312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:b4:38:f5:c1:0e:12:97:3d:74:f8:87:aa:
50:04:09:62:79:4c:ae:18:b1:97:5e:74:cc:bc:13:
74:f1:f9:00:b9:35:01:2a:de:09:c4:75:92:32:6a:
d7:c0:7d:8f:e5:5c:ff:44:d0:91:2f:f9:89:68:16:
92:6a:ac:c9:bb:81:78:ea:5a:8e:64:c8:f8:83:a7:
47:e3:b6:d2:b3:c7:d6:0c:f4:e1:ef:19:78:eb:21:
ad:f8:55:41:a2:08:b9:82:68:22:2f:ee:1c:b3:b3:
55:f5:d0:18:16:2f:f9:aa:e3:f8:24:70:c8:2d:2e:
fd:0f:dc:3b:e7:53:bf:5d:c4:0a:d6:28:8c:69:b4:
5a:06:ec:2d:4f:c8:63:e5:b3:75:31:94:ea:71:a0:
96:1c:8e:b1:16:a5:a8:b5:2d:74:ca:90:57:2c:d7:
a7:00:94:46:37:08:d7:2f:13:b0:31:22:36:5f:ac:
0f:75:8b:cb:f2:1e:d2:bb:3d:ae:b6:c9:55:5b:0b:
0e:d2:57:3c:fd:ed:3b:e8:ec:dd:24:42:57:59:c8:
6b:10:a8:d9:56:8f:94:da:f1:54:87:59:0e:2e:db:
87:5e:14:f2:b4:1f:03:b6:12:50:8f:b0:58:d1:47:
4a:fd:a2:3b:3c:26:db:5a:d3:64:af:b0:1c:7c:6a:
7e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:17:6B:66:5D:2A:55:A5:FB:E5:50:29:0F:00:8A:D9:9C:3C:63:12
X509v3 Authority Key Identifier:
keyid:B0:B5:AE:0C:F2:75:26:24:3B:23:76:FE:D9:0C:16:0D:D7:38:21:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:aa:89:5a:bd:14:84:c9:74:71:d0:c3:55:ae:0d:13:88:ea:
1a:6c:83:28:5f:19:0e:4e:60:a0:de:49:d2:5d:fe:2f:f3:d5:
0a:19:9b:90:59:ac:e9:38:36:15:11:b8:4d:3d:8d:07:75:dd:
76:88:ec:74:1f:a6:be:00:12:de:5c:05:c0:f4:a4:e3:f1:a0:
4b:97:ce:5d:45:70:19:fc:4f:75:0e:65:47:3b:4f:e2:34:c5:
63:91:58:76:1a:eb:02:81:b8:df:3f:67:8b:d5:81:16:7d:38:
7a:61:b5:44:1f:df:c4:c8:7a:dc:2d:72:58:8c:97:28:f1:4e:
7b:9c:31:ef:2c:d2:66:9a:18:b4:a1:02:8c:87:c6:08:cc:52:
73:44:5c:1a:df:5c:85:60:ac:2f:9f:00:ae:33:fb:9f:18:2d:
e9:35:72:96:bf:34:fb:ed:ef:b8:5d:d0:95:46:c9:54:3a:9f:
15:be:e6:ce:15:05:c3:b3:02:3a:0c:2c:1e:91:ed:b0:9c:e7:
e1:f3:a1:57:49:ae:ea:ce:31:81:ea:8b:24:fd:dd:70:4f:c3:
16:1f:62:f1:2f:a4:53:bf:c8:f8:8d:2d:0d:85:9b:68:a5:99:
a8:d7:8a:c0:4c:99:86:c7:89:a7:8e:03:0e:da:77:f7:01:53:
b8:7e:79:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:45 2026 by rpki-client