Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1a07b0-9976-4d55-b722-a2a11a0a6d74/1/sLQvCUy6l0wfrsa97BVg9mOHiRE.mft
File: sLQvCUy6l0wfrsa97BVg9mOHiRE.mft (raw, json)
Hash identifier: 3dYG9gG1oYO9t5+gpGuNQTadCP7qAbjeTETdOssfYak=
Subject key identifier: C0:25:13:69:F7:E7:D7:1E:52:4F:6A:B2:15:08:C1:D0:8F:06:F7:1D
Authority key identifier: B0:B4:2F:09:4C:BA:97:4C:1F:AE:C6:BD:EC:15:60:F6:63:87:89:11
Certificate issuer: /CN=b0b42f094cba974c1faec6bdec1560f663878911
Certificate serial: 019D38661FF2EF886E481ADECEEE541D1920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLQvCUy6l0wfrsa97BVg9mOHiRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1a07b0-9976-4d55-b722-a2a11a0a6d74/1/sLQvCUy6l0wfrsa97BVg9mOHiRE.mft
Manifest number: 1520
Signing time: Sun 29 Mar 2026 07:01:50 +0000
Manifest this update: Sun 29 Mar 2026 07:01:50 +0000
Manifest next update: Mon 30 Mar 2026 07:01:50 +0000
Files and hashes: 1: sLQvCUy6l0wfrsa97BVg9mOHiRE.crl (hash: DZe4Z/2WEVC8KUBXxddMYGjDkj/jSqPCm0x7pjOTxI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1a07b0-9976-4d55-b722-a2a11a0a6d74/1/sLQvCUy6l0wfrsa97BVg9mOHiRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1a07b0-9976-4d55-b722-a2a11a0a6d74/1/sLQvCUy6l0wfrsa97BVg9mOHiRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLQvCUy6l0wfrsa97BVg9mOHiRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:1f:f2:ef:88:6e:48:1a:de:ce:ee:54:1d:19:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b42f094cba974c1faec6bdec1560f663878911
Validity
Not Before: Mar 29 07:01:50 2026 GMT
Not After : Mar 30 07:01:50 2026 GMT
Subject: CN=c0251369f7e7d71e524f6ab21508c1d08f06f71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7d:93:3c:16:ae:09:2b:b0:8d:58:21:1a:34:
c0:6c:02:c8:26:ca:11:4f:7e:26:b1:af:d6:31:9a:
db:d2:dc:89:65:67:59:6c:c5:d0:ea:43:7e:52:43:
cd:51:db:11:08:6a:ce:98:4e:57:0b:d7:e3:1f:d0:
90:ac:8a:cf:2e:f4:dc:f3:de:4a:a8:c5:d7:b3:31:
b8:cd:5a:14:20:d1:40:b4:d2:e9:89:fe:da:24:f1:
d0:d1:a8:86:23:63:d6:47:b1:28:f1:a1:b8:3b:58:
e5:c2:b5:19:f5:71:f4:f7:73:79:c0:36:bd:1b:a1:
fd:61:e8:78:94:54:1d:d1:fa:86:0f:9e:85:05:2c:
08:aa:d9:04:21:b9:c1:8c:d2:9d:e1:57:0a:40:0a:
d6:39:d1:68:a2:c2:49:73:c8:11:75:0c:9a:50:f3:
1d:73:0a:7a:28:63:35:e7:71:31:c8:dc:4f:48:e9:
4b:85:14:a6:a4:08:a3:6f:5a:2d:d3:aa:95:0e:0e:
bb:32:7e:b2:50:67:9d:90:74:c2:91:9c:14:e7:80:
25:8a:e8:34:a0:dc:34:7d:ce:01:12:15:97:cc:69:
ee:67:1a:08:6e:f3:e7:87:40:bc:dc:07:02:66:d1:
5b:ac:21:b6:67:69:7f:ba:f6:95:eb:41:44:88:1c:
65:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:25:13:69:F7:E7:D7:1E:52:4F:6A:B2:15:08:C1:D0:8F:06:F7:1D
X509v3 Authority Key Identifier:
keyid:B0:B4:2F:09:4C:BA:97:4C:1F:AE:C6:BD:EC:15:60:F6:63:87:89:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLQvCUy6l0wfrsa97BVg9mOHiRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1a07b0-9976-4d55-b722-a2a11a0a6d74/1/sLQvCUy6l0wfrsa97BVg9mOHiRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1a07b0-9976-4d55-b722-a2a11a0a6d74/1/sLQvCUy6l0wfrsa97BVg9mOHiRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:67:8f:60:56:47:6f:7f:25:e6:60:e5:f8:1c:25:e3:90:f5:
0a:63:fc:29:71:15:6f:2c:c1:5d:d8:86:fe:a0:83:87:e1:e4:
40:13:c3:7f:d1:f6:86:fa:d7:ed:fa:b9:44:09:2c:7e:11:0f:
98:ab:80:19:7f:dc:31:5c:c1:52:06:01:40:43:56:68:c6:a5:
0c:c8:0d:89:e1:eb:a0:06:97:74:98:1a:0e:d6:2a:c3:0e:ed:
63:40:4f:0a:25:6d:a0:64:be:d4:d0:da:07:39:3d:9d:64:c9:
1a:f3:97:ff:c3:64:53:b3:cc:f9:4b:03:98:55:2c:94:dc:1d:
a6:ca:4c:06:b6:82:0c:72:f2:43:82:53:96:2a:cf:87:6b:32:
9c:b8:b0:66:51:b9:8d:67:34:4b:2e:cb:2e:5f:24:e3:8a:cf:
a6:05:8d:db:a4:1e:c9:fd:fc:f3:93:40:27:31:df:c1:3c:1f:
45:33:80:84:45:1b:1f:6d:a6:27:7e:bb:c3:5d:cf:05:37:e6:
cb:ab:f0:9a:71:59:0f:83:33:79:a5:bd:98:22:67:d9:f6:42:
0f:50:34:1a:15:64:86:47:83:d3:39:23:17:62:72:a6:db:bb:
75:07:9a:f5:f9:7c:5a:a4:49:e9:7b:07:fb:1b:c2:ab:cb:65:
93:54:de:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:32 2026 by rpki-client