Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
File: sL0oE0WvbNVBVNTP908ZWjiP_8E.mft (raw, json)
Hash identifier: I9TjdTs94m2gyx4TR1sXmpMfKxbCX5zEaMIVZNdTBNM=
Subject key identifier: 49:DB:82:62:F8:39:D7:F0:10:05:53:6B:55:A1:14:60:3E:5F:B4:07
Authority key identifier: B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1
Certificate issuer: /CN=b0bd281345af6cd54154d4cff74f195a388fffc1
Certificate serial: 01A08D565612ADB0492179B088E9023DD09B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
Manifest number: 1A4B
Signing time: Thu 10 Sep 2026 22:00:40 +0000
Manifest this update: Thu 10 Sep 2026 22:00:40 +0000
Manifest next update: Fri 11 Sep 2026 22:00:40 +0000
Files and hashes: 1: HKNvKNWPTS8CN6bgJcF5utIakEo.roa (hash: eSN9s7qGbERAlGNaTgQ/bC9Kz0HuoANi8MNnFyNF5ZA=)
2: sL0oE0WvbNVBVNTP908ZWjiP_8E.crl (hash: W9D5zzigiB1ZyiGS4idhxlSQlKWC/NNxiE3O1nMt7jg=)
3: wBI_NU2QpXV6NMet63ptsggHiP4.roa (hash: Cnsdq6Kk8yjq887iBv+JHpuDFWafcOA5VR5IEEIgGWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:56:56:12:ad:b0:49:21:79:b0:88:e9:02:3d:d0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd281345af6cd54154d4cff74f195a388fffc1
Validity
Not Before: Sep 10 22:00:40 2026 GMT
Not After : Sep 11 22:00:40 2026 GMT
Subject: CN=49db8262f839d7f01005536b55a114603e5fb407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:35:e3:af:0d:27:ee:66:58:56:c2:23:fc:60:
7e:c4:a0:fb:ef:e2:ff:96:7f:c5:76:92:80:f4:a7:
0b:e4:d5:5c:61:cb:fc:33:1f:6d:bf:dd:83:88:91:
0e:15:47:44:50:ab:3f:ba:09:33:e6:50:ac:f0:ae:
26:9f:e0:7f:8b:88:5a:c9:42:82:0e:2d:dc:6a:97:
d2:c1:26:16:b9:14:04:e6:01:d6:27:76:01:17:ac:
02:c6:82:ab:84:53:18:b6:23:31:03:96:6f:29:29:
b8:f2:a3:b0:36:ec:c0:67:78:9f:07:2f:0a:4a:fa:
40:32:d1:dc:83:f7:1e:9d:f3:47:1b:46:df:94:69:
ad:e9:7e:db:7c:92:bc:05:5c:62:f1:3b:54:ba:92:
11:96:3f:5c:5b:18:9c:34:35:52:17:17:f3:43:3f:
51:e6:be:fd:ea:1e:b0:06:6d:40:7b:05:4f:0b:b4:
5d:00:52:2e:da:fb:dc:51:e3:a8:69:52:cf:d8:af:
92:72:94:23:56:3f:da:9e:26:d3:99:62:b6:ba:b7:
b7:d6:3b:71:7e:a8:53:93:d3:a7:2c:93:af:e9:d6:
a0:9c:99:49:d2:bf:04:5f:63:0e:78:21:3f:91:03:
65:66:c2:73:fe:c3:9a:ed:97:98:c6:fb:ed:9b:d2:
25:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DB:82:62:F8:39:D7:F0:10:05:53:6B:55:A1:14:60:3E:5F:B4:07
X509v3 Authority Key Identifier:
keyid:B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7c:3b:dd:d5:76:8c:bd:cf:ea:42:f8:a9:b9:6e:e3:8f:bf:
87:dc:0f:d7:64:75:0a:6e:26:3c:ca:83:93:4b:5b:7d:b7:34:
76:df:6b:63:a8:23:8e:2d:c4:9b:f3:d7:45:1c:ff:bb:c8:92:
c0:c2:9f:b6:94:52:ab:6a:2c:a0:d7:ce:cd:f7:34:b2:57:13:
21:ad:84:df:c8:20:c0:17:48:47:88:f3:b2:ee:1c:aa:4f:91:
73:ef:6f:af:6c:93:83:61:26:a4:26:ca:83:72:93:cd:f3:61:
be:b9:84:9f:c5:32:29:fc:0d:38:7a:3b:3d:77:cf:22:14:b3:
48:4f:cf:2e:95:c3:a2:b5:63:45:e5:b8:6f:0a:13:26:e4:b0:
4f:c4:c3:bc:8b:96:e6:73:87:27:4a:e6:76:e9:8b:cf:d1:e2:
4d:3f:29:7a:aa:cd:b9:ce:36:13:ac:e7:df:ee:08:a5:b9:e8:
f1:30:f5:bc:9b:c0:27:34:cb:5e:1b:bd:b3:68:7f:25:66:9b:
4b:80:48:15:f0:2f:a0:3d:eb:7b:39:b2:f7:26:eb:36:fe:1a:
53:04:47:ea:f9:24:28:ef:a2:a0:af:6f:79:81:44:87:94:88:
9e:de:b6:e8:5b:30:be:31:4e:97:30:8e:23:fe:04:57:47:0d:
c8:e9:e3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:03:14 2026 by rpki-client