Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
File: sL0oE0WvbNVBVNTP908ZWjiP_8E.mft (raw, json)
Hash identifier: XoSYXWadlzLnP2fn6PkPDMUg7yo2Iyo3eXTsLuwzYx0=
Subject key identifier: 5B:D5:F3:DF:1D:7C:9C:FC:4D:DD:F1:5C:CD:F1:2A:9D:7A:A9:AD:8F
Authority key identifier: B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1
Certificate issuer: /CN=b0bd281345af6cd54154d4cff74f195a388fffc1
Certificate serial: 019D38D32DF6089D55A7B7502AB1C9391BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:00:57 +0000
Manifest this update: Sun 29 Mar 2026 09:00:57 +0000
Manifest next update: Mon 30 Mar 2026 09:00:57 +0000
Files and hashes: 1: HKNvKNWPTS8CN6bgJcF5utIakEo.roa (hash: eSN9s7qGbERAlGNaTgQ/bC9Kz0HuoANi8MNnFyNF5ZA=)
2: sL0oE0WvbNVBVNTP908ZWjiP_8E.crl (hash: PPJSgGRrtLqpPE5HyjPniMUywbMh2SpLLutKB8Rr1lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:2d:f6:08:9d:55:a7:b7:50:2a:b1:c9:39:1b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd281345af6cd54154d4cff74f195a388fffc1
Validity
Not Before: Mar 29 09:00:57 2026 GMT
Not After : Mar 30 09:00:57 2026 GMT
Subject: CN=5bd5f3df1d7c9cfc4dddf15ccdf12a9d7aa9ad8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:32:aa:be:0e:05:72:bd:e2:0c:3e:69:b1:0a:
ea:58:00:7d:56:53:5e:e7:c1:ce:ab:6d:2c:55:40:
8a:0b:91:20:9c:4a:43:68:18:1b:5d:fd:3d:30:f4:
c9:2c:67:3e:11:55:fa:5a:3a:d1:d1:c8:08:92:12:
9f:79:7d:5e:fd:73:d2:87:a0:88:82:5f:9f:08:1b:
c4:40:a4:fe:36:63:4c:fd:ab:13:42:4c:9d:5c:de:
74:93:78:4f:d0:01:a7:47:f9:83:05:f7:55:1d:51:
d7:77:72:14:23:cd:c8:34:6f:7c:f8:71:e8:10:3c:
67:d2:3d:b8:0b:8f:95:a7:db:1b:32:fd:24:92:f7:
6a:fa:1c:e7:a2:77:d0:ba:9e:52:92:c5:6f:db:7e:
84:cf:c3:38:a5:c4:a3:f5:56:66:51:7a:88:2b:9d:
a6:45:61:d2:39:5b:fa:6c:93:a8:1b:63:59:55:88:
10:fb:1a:12:69:54:7b:73:53:ad:e9:a0:9b:6b:77:
64:94:aa:23:63:6d:57:09:8b:60:80:f1:eb:85:08:
ab:0a:8e:26:8f:14:65:8e:38:1a:dd:dc:ce:6d:03:
58:14:70:d2:b5:c0:1f:14:3d:00:7d:32:c7:3b:01:
63:44:8f:6d:d7:7d:c0:dd:df:e9:4f:8c:52:4b:0b:
7d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D5:F3:DF:1D:7C:9C:FC:4D:DD:F1:5C:CD:F1:2A:9D:7A:A9:AD:8F
X509v3 Authority Key Identifier:
keyid:B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:db:ae:87:11:89:83:14:09:f4:e1:d1:ba:ed:c1:03:ca:8a:
7f:b0:42:9b:07:ae:95:38:06:09:e8:1b:7c:cb:08:56:f3:ec:
c1:6e:26:ac:e9:10:1e:8a:e1:f9:e0:4a:39:f3:6a:ef:ae:b8:
a6:60:b4:f3:59:27:1c:5c:4e:4c:60:08:b1:de:53:ef:51:b3:
82:8e:38:51:23:04:e7:cb:c6:0f:61:8e:19:86:ca:af:9b:b4:
ff:7d:a2:bb:5e:d5:f5:25:b9:5a:41:6c:c4:90:62:4e:fe:14:
cd:e3:29:8b:38:01:ed:15:cc:70:01:81:7d:be:4a:80:ee:1c:
c0:79:19:88:a6:8f:20:c2:f9:e7:ed:57:0d:d8:30:65:3c:d0:
a0:4b:3b:99:d1:d5:7d:f8:2c:33:62:ec:2f:40:5f:fa:08:38:
83:cc:0e:a1:cc:89:28:3c:1d:eb:73:b8:32:f3:4c:8b:40:d1:
be:e5:27:0f:a7:fd:9d:8e:39:51:80:b0:e5:e7:d2:76:7d:56:
fd:08:7f:a3:9f:27:79:40:b1:67:9d:af:b3:c5:f4:0f:7c:e2:
aa:59:52:59:5d:e5:c8:bc:f0:39:26:a9:51:0a:59:5a:9f:10:
a4:aa:9a:14:61:2b:49:b6:e4:2b:ba:ce:a4:59:7d:a6:ea:52:
5b:7a:c3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:46 2026 by rpki-client