Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
File: sL0oE0WvbNVBVNTP908ZWjiP_8E.mft (raw, json)
Hash identifier: Qj2CG9JC8mcbzgUvZhk9hTQazYXRjjW4Mn3cU+4EuhI=
Subject key identifier: E5:E0:DC:44:F1:A1:FA:12:F2:85:AA:64:EB:D3:2A:BF:16:00:25:E9
Authority key identifier: B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1
Certificate issuer: /CN=b0bd281345af6cd54154d4cff74f195a388fffc1
Certificate serial: 01A195E981F293551650D312DB58A01E4E1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
Manifest number: 1AD4
Signing time: Sun 01 Nov 2026 07:01:10 +0000
Manifest this update: Sun 01 Nov 2026 07:01:10 +0000
Manifest next update: Mon 02 Nov 2026 07:01:10 +0000
Files and hashes: 1: HKNvKNWPTS8CN6bgJcF5utIakEo.roa (hash: eSN9s7qGbERAlGNaTgQ/bC9Kz0HuoANi8MNnFyNF5ZA=)
2: sL0oE0WvbNVBVNTP908ZWjiP_8E.crl (hash: bUNmjucCkveisLKHD/9B/FAFa2gUlcVxaiif1E8WDeM=)
3: wBI_NU2QpXV6NMet63ptsggHiP4.roa (hash: Cnsdq6Kk8yjq887iBv+JHpuDFWafcOA5VR5IEEIgGWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:95:e9:81:f2:93:55:16:50:d3:12:db:58:a0:1e:4e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd281345af6cd54154d4cff74f195a388fffc1
Validity
Not Before: Nov 1 07:01:10 2026 GMT
Not After : Nov 2 07:01:10 2026 GMT
Subject: CN=e5e0dc44f1a1fa12f285aa64ebd32abf160025e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:3c:42:4d:0c:65:43:06:8a:42:e9:6d:e7:
92:b8:45:f8:f7:dc:54:5e:bf:ee:9c:31:51:92:90:
4e:48:f7:6f:24:24:b6:82:d9:28:d9:34:10:fe:f6:
e8:45:e9:9e:58:61:09:2d:be:1b:e9:1b:c8:10:44:
23:b3:65:fb:20:60:b7:4e:16:01:b7:10:53:f9:85:
67:19:db:26:68:e5:46:cb:22:06:05:2b:70:cb:83:
c6:b7:75:82:14:22:b9:55:db:da:e5:e8:63:a6:24:
76:9b:57:21:26:7a:b7:6b:8e:0d:85:b6:10:17:48:
b7:11:58:de:ce:46:38:f6:d2:bf:8e:80:7a:c9:a8:
86:8e:71:ae:38:67:61:b6:6d:c1:3d:60:70:26:c6:
87:26:b2:dd:6a:2d:b3:da:f6:70:73:17:97:81:36:
1c:b6:2b:af:84:db:67:24:40:7b:a7:5c:ee:c4:ce:
f6:e9:f3:e8:1a:e3:20:a5:de:34:01:64:86:db:fc:
ea:b3:8d:65:94:63:4c:45:50:7d:cf:07:c2:13:5b:
d4:9b:1f:2a:94:fc:b6:a3:3d:27:11:41:b1:6a:75:
ab:72:a3:23:c1:30:4b:36:67:81:b6:44:80:30:82:
32:cf:d5:48:25:ea:f0:13:92:c7:d3:21:02:69:46:
1a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E0:DC:44:F1:A1:FA:12:F2:85:AA:64:EB:D3:2A:BF:16:00:25:E9
X509v3 Authority Key Identifier:
keyid:B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4b:c1:09:78:4c:d1:fe:99:51:51:df:45:67:25:e2:38:2d:
47:d0:81:38:da:3f:3e:48:1e:6f:33:b9:01:b2:5c:be:a8:dc:
14:17:e1:07:90:8c:01:12:43:34:fa:12:6f:36:fc:b0:0c:99:
df:56:67:84:98:d1:41:97:65:cd:94:c6:67:f8:f7:8f:80:12:
79:97:b5:55:c2:73:ea:75:5d:0a:39:ee:ef:03:26:91:d3:71:
a8:bb:db:25:a7:fd:76:fa:a9:97:49:7b:54:34:c2:77:d0:da:
11:81:fb:38:b7:e6:2c:b3:36:60:9b:34:87:e0:91:75:98:11:
95:70:5c:96:7a:40:96:8f:c1:54:a1:93:18:1c:c4:2e:94:61:
4d:60:17:a4:3d:53:67:01:a3:7e:af:0a:44:d7:8e:9c:0f:46:
f5:63:d9:46:09:92:8d:ad:cb:0d:a6:b7:05:8d:8a:8e:cd:2f:
e3:ec:96:a6:6c:94:16:ce:09:b3:d2:2a:fd:11:b9:35:b4:e4:
f8:ab:9a:21:d9:1e:69:68:81:2c:d8:9c:bd:83:aa:d7:37:ff:
b7:e2:96:a2:0f:88:7b:fe:9e:8b:f8:7f:66:85:cb:72:74:7f:
86:73:65:94:fa:ea:86:ab:7b:3f:12:4f:3b:84:4d:82:df:eb:
94:a6:6e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 13:01:07 2026 by rpki-client