Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
File: slLdonImonXj55s3TI8mPNLY7NE.mft (raw, json)
Hash identifier: 9+eOsgqS/FD7cLq7RifvmymnwAFsEzytmMzpTyqdVSU=
Subject key identifier: D4:C8:A5:79:F6:97:95:24:F0:9A:FE:BA:CB:CE:C5:47:0F:12:BB:3B
Authority key identifier: B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
Certificate issuer: /CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Certificate serial: 01A17B848DFCE7653E2350E9DB525DE94180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 04:00:46 +0000
Manifest this update: Tue 27 Oct 2026 04:00:46 +0000
Manifest next update: Wed 28 Oct 2026 04:00:46 +0000
Files and hashes: 1: Igv0iKibrdAXGjgsd8hPRxgEjCg.roa (hash: 9mosYeawKJ3SeEs3+N+XOX8qvV/b7ZB2EjQAeZlJCHc=)
2: slLdonImonXj55s3TI8mPNLY7NE.crl (hash: mVK142pywnuMDkfiO4UVduSJIZKZCq8FXK9yhqmJp2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:84:8d:fc:e7:65:3e:23:50:e9:db:52:5d:e9:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Validity
Not Before: Oct 27 04:00:46 2026 GMT
Not After : Oct 28 04:00:46 2026 GMT
Subject: CN=d4c8a579f6979524f09afebacbcec5470f12bb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:97:5b:7c:02:7a:44:1a:4a:6e:70:ea:a9:94:
c7:dd:c7:c8:7d:2f:44:48:46:fd:c7:9a:fb:49:68:
61:f2:2c:0d:7e:81:8b:6f:3a:82:3e:0e:fe:f1:ea:
4b:1f:e0:27:df:d9:87:6a:7f:24:e6:36:3b:e5:af:
72:ec:bc:91:b4:19:e3:9d:07:de:74:ed:f0:ce:75:
4e:03:7e:8f:fb:d3:88:a4:0c:ee:30:c0:62:2a:06:
16:8a:6a:ef:18:6b:c7:00:44:42:cc:93:d3:23:a8:
69:9f:b4:4c:f5:f6:83:6c:3e:c9:25:91:ff:93:30:
90:31:6c:12:91:84:cd:6e:f7:94:f7:44:f5:a7:5c:
2e:ea:22:85:a0:1b:4a:f1:51:5b:59:bf:c6:ad:a9:
31:2b:74:7a:ad:66:6f:c7:88:52:96:f5:4a:14:32:
23:05:40:bf:03:69:c4:56:9f:e8:28:59:71:a5:e6:
d4:f3:3e:42:77:3f:23:79:28:ac:70:10:ab:1d:a9:
b8:cc:2a:d5:60:ec:06:46:0b:4a:18:91:7f:f3:a9:
52:5e:b5:05:02:6f:6d:72:2f:52:91:fb:ee:63:a2:
a6:02:ba:c7:80:ea:28:d7:f4:e5:bc:18:ae:61:e9:
ed:52:a9:bc:6d:b8:81:39:38:b1:39:1c:38:52:d7:
ab:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C8:A5:79:F6:97:95:24:F0:9A:FE:BA:CB:CE:C5:47:0F:12:BB:3B
X509v3 Authority Key Identifier:
keyid:B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7d:52:6f:1f:2d:05:c4:b4:9c:2d:07:b8:2a:eb:ba:b4:fa:
c6:d5:68:c4:da:66:df:90:1e:f0:6a:9d:01:c6:f3:a2:33:0e:
7d:7e:51:8a:c5:d3:83:13:a7:3d:43:1c:45:b4:58:e6:3a:e4:
13:fc:6e:24:e1:5c:ec:12:1d:d0:12:b0:12:10:bf:40:ff:41:
0b:8b:1a:63:8b:70:ac:55:91:3a:4b:36:c6:63:86:f3:95:39:
e1:a0:e9:6a:ca:5d:23:c5:12:7f:3d:dc:26:06:58:4c:32:55:
55:5b:9b:fb:85:ef:6f:b0:6d:e9:68:ff:d5:36:ee:d2:a2:96:
15:85:b3:df:2d:d6:ea:9b:61:da:5f:56:5c:b9:01:5e:9c:81:
5a:02:04:8c:70:aa:d2:7b:9b:0b:9f:50:a7:27:78:40:07:cf:
49:8a:d4:ed:37:34:20:44:d8:41:68:bc:2a:ef:b7:08:1c:72:
a6:53:33:0f:3c:3d:63:6b:59:7a:d3:5f:03:13:52:18:07:89:
2a:6f:5c:03:ff:f5:bb:90:9a:d3:46:19:5f:6a:bd:6b:86:0e:
92:41:42:f3:03:7c:a1:f1:0f:71:d4:dc:50:5f:23:51:ff:71:
36:f2:d0:9d:89:47:0f:f7:35:2d:7e:13:61:21:13:17:d7:42:
95:89:44:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:58:52 2026 by rpki-client