Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
File: sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft (raw, json)
Hash identifier: nks9OJgVmFgRTKNPfdfwRGAFd4NOrGI/RtJrJ4IPgyI=
Subject key identifier: 4C:C3:1B:4D:EC:F7:4D:C5:5F:BD:21:C1:9C:C8:CF:7A:BF:D2:06:5E
Authority key identifier: B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
Certificate issuer: /CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Certificate serial: 019D39AF8169E3E5B9CFF5B18DBA8AE43B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 13:01:36 +0000
Manifest this update: Sun 29 Mar 2026 13:01:36 +0000
Manifest next update: Mon 30 Mar 2026 13:01:36 +0000
Files and hashes: 1: Q-FFM01cbkfw_d8UfrmIQr3mDSE.roa (hash: SPQggi+U+SwusUS7292cc4kZDqdLk+Y6Fxy1n2N8dxo=)
2: sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl (hash: xGmGEZTwCqbQU9iBBe6rSbJj1fveHkjWTUCMsEGgxZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:81:69:e3:e5:b9:cf:f5:b1:8d:ba:8a:e4:3b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Validity
Not Before: Mar 29 13:01:36 2026 GMT
Not After : Mar 30 13:01:36 2026 GMT
Subject: CN=4cc31b4decf74dc55fbd21c19cc8cf7abfd2065e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:70:ff:c7:8e:3a:8a:72:9e:c8:c1:30:7d:
ed:e8:f3:f3:b1:95:e1:74:62:38:1b:4e:ec:fa:45:
7f:84:1d:1a:44:ed:35:6a:0d:27:ce:c9:55:4e:82:
45:f1:4c:72:48:e0:8a:39:3d:eb:83:c9:47:66:7f:
e0:fb:11:51:39:7a:18:67:ab:90:07:c1:10:0f:55:
19:26:ad:2a:a0:da:f2:6e:87:b4:99:65:f4:a9:35:
70:cc:45:c8:e0:dc:9c:d4:20:7e:ba:0a:66:27:d3:
c7:0b:ad:e8:e9:32:60:63:e5:40:b4:26:d3:dc:17:
91:a3:d9:ce:ba:f2:8f:16:0d:f1:58:74:65:8f:0d:
d6:e4:a2:5d:c2:79:16:ff:60:c3:ea:79:27:9f:f5:
ff:af:44:0b:32:1f:ad:a1:5b:e9:08:a3:4f:98:e5:
a8:6b:2d:e9:35:bf:f7:5a:f8:68:c7:5f:7e:5b:06:
68:9c:7a:37:e9:50:15:87:e2:63:8e:f7:a3:6d:d4:
66:bd:9f:bd:c8:24:ee:42:1f:7b:d2:e6:91:f2:cd:
09:ec:56:ca:c5:47:8b:14:7b:9f:da:c7:cc:a6:ea:
97:41:d0:38:2c:06:9d:10:4b:8d:f8:b2:4d:4b:25:
bc:25:45:bc:38:57:61:a2:ba:86:1f:5a:5c:b9:c8:
e1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C3:1B:4D:EC:F7:4D:C5:5F:BD:21:C1:9C:C8:CF:7A:BF:D2:06:5E
X509v3 Authority Key Identifier:
keyid:B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:61:76:71:54:54:c3:e7:a2:98:be:53:73:f7:d5:5b:d4:f3:
e0:1b:8b:e2:aa:9d:53:09:c6:76:b8:ec:de:15:8a:20:67:23:
c2:0b:8f:87:97:d1:6f:4f:36:4b:ca:14:d0:9b:c2:cd:2a:94:
90:c3:d0:f4:24:39:7d:36:c7:3c:fb:d7:08:c6:dc:8f:5a:e7:
96:4f:1c:ea:ce:d3:c1:9b:12:67:0e:d8:43:7c:da:b2:fa:31:
9b:96:8e:c4:b0:c4:28:b8:aa:bb:d2:37:b8:3f:1f:47:7e:15:
47:b4:cd:11:e4:bb:88:81:01:c0:3c:b2:92:9b:52:ed:83:46:
c1:9b:7d:3d:47:4e:06:3b:f1:de:71:1a:c9:93:8d:84:41:48:
5a:9f:4f:f2:09:95:ed:26:70:8d:1a:fe:6d:9f:84:a5:bd:90:
f3:d8:9b:ec:0b:1a:0d:5a:95:43:4e:c0:2f:0d:6b:63:66:8a:
92:8a:97:f6:fe:79:53:86:c9:24:c9:fb:aa:92:84:73:c6:e0:
a3:c7:d6:b9:89:50:80:33:f1:c2:6b:55:ff:a2:d9:05:4c:13:
23:8b:d3:a1:24:ab:9c:f2:9c:56:2a:af:cd:78:d3:be:a0:22:
5b:85:a1:ca:ee:a2:73:e3:05:5c:cd:ba:74:e7:f0:e1:f5:35:
c0:95:c3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:06 2026 by rpki-client