Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
File: SDletMDuLapTks2Z_EXvvEp1TpA.mft (raw, json)
Hash identifier: nx1VlEBl7IFtnoME5yL/8ax2QRsmgTPT0kXHGk9r0Jg=
Subject key identifier: EC:30:1C:E2:92:2A:E6:25:95:5B:03:32:45:1F:66:CD:5B:8A:50:12
Authority key identifier: 48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
Certificate issuer: /CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Certificate serial: 019D37526A9717007BF16ED1A2BBF5A6211C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 02:00:41 +0000
Manifest this update: Sun 29 Mar 2026 02:00:41 +0000
Manifest next update: Mon 30 Mar 2026 02:00:41 +0000
Files and hashes: 1: SDletMDuLapTks2Z_EXvvEp1TpA.crl (hash: Lor0gZ/HUcXX7bAwUvUc7DeyZYl/n5AHFrPUIrsjesI=)
2: oYj8IRsjMXERXaM9fv_aTVNDMiM.roa (hash: 1h5HkPjPP0vcntiwcGgkqpVFeA7WFjBNEknGQLJcQbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:6a:97:17:00:7b:f1:6e:d1:a2:bb:f5:a6:21:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Validity
Not Before: Mar 29 02:00:41 2026 GMT
Not After : Mar 30 02:00:41 2026 GMT
Subject: CN=ec301ce2922ae625955b0332451f66cd5b8a5012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:93:1e:f8:e5:02:95:31:51:d8:69:b1:b0:84:
b6:4f:d2:5c:0f:06:2d:d1:8b:a8:0e:db:85:81:67:
06:0f:58:b9:8a:61:d7:90:03:f4:a5:11:2b:c5:23:
36:00:4d:b5:38:ac:9f:2a:63:7e:ce:8f:2f:d4:e5:
bb:49:52:94:85:5b:e5:67:29:ee:fc:64:26:6f:29:
77:fe:0a:8a:92:6f:b6:07:72:5e:fb:5b:9e:43:20:
77:66:2c:e8:e7:6f:24:53:4f:d6:b6:74:12:7c:70:
f3:80:2d:bb:18:30:f5:c0:71:09:15:b5:4f:13:0f:
2e:53:f2:82:d8:60:f6:25:f0:f3:6f:a5:6c:78:f8:
93:f9:19:cb:d4:0e:db:42:02:e4:53:b0:72:0f:df:
2b:5c:2e:b0:18:a0:7e:e0:77:85:11:f9:40:fd:2a:
89:05:a5:1d:ed:a1:7b:f0:9d:75:f8:f8:37:a6:01:
0c:09:5d:c3:9b:cb:11:1d:0f:ea:92:fb:05:b6:88:
e5:de:03:ef:ed:3b:e9:2e:83:5d:64:72:99:6c:2f:
36:70:c2:1c:99:3a:39:48:a2:05:30:0d:9c:74:8a:
c6:fc:71:d3:1c:15:eb:ab:69:b1:47:92:29:dd:ef:
03:fe:30:39:9d:e6:20:17:06:3f:e1:d3:69:1e:8b:
22:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:30:1C:E2:92:2A:E6:25:95:5B:03:32:45:1F:66:CD:5B:8A:50:12
X509v3 Authority Key Identifier:
keyid:48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ff:27:c5:47:66:22:9f:bf:6b:89:24:0d:ac:53:53:f8:fc:
44:e7:80:fe:ad:a5:41:d5:38:33:aa:a9:7f:1b:fa:f0:b8:1e:
40:9b:4b:32:29:85:5c:fc:2b:23:90:aa:8e:f7:b9:92:53:8f:
67:03:31:70:11:29:25:b5:1f:b9:d8:58:87:10:98:78:5b:99:
b8:80:ef:06:45:14:49:69:ca:63:c6:3c:3b:95:33:02:cb:50:
7c:5a:2e:51:78:b5:84:96:2e:cb:11:b9:2a:a1:df:92:4e:cf:
ba:e0:d3:48:79:b7:65:2d:08:ae:b4:23:cd:d0:8b:fa:0b:a9:
d7:0a:51:db:c6:d4:94:f1:b5:bb:4b:6b:3f:3b:2b:2a:4e:b5:
e9:cd:70:3a:9c:71:56:05:ad:bd:11:7c:04:92:d7:7e:d6:12:
14:45:20:9d:07:59:af:ac:e8:19:73:51:2b:da:9b:68:27:f7:
bc:87:ca:84:64:55:df:13:3c:46:a6:21:3d:4c:dc:cd:ea:ad:
f1:cb:ca:b2:f4:4c:30:f2:f7:34:0d:da:30:e9:e5:22:39:c1:
40:41:19:0a:b6:ef:86:3d:5b:cf:42:3f:68:61:ab:02:7b:4d:
bc:ac:cd:9f:3a:fc:18:99:d5:a6:c6:ac:04:fc:e0:87:9f:16:
a7:32:93:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UmqXFwB78W7Rorv1piEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4Mzk1ZWI0YzBlZTJkYWE1MzkyY2Q5OWZjNDVlZmJjNGE3
NTRlOTAwHhcNMjYwMzI5MDIwMDQxWhcNMjYwMzMwMDIwMDQxWjAzMTEwLwYDVQQD
EyhlYzMwMWNlMjkyMmFlNjI1OTU1YjAzMzI0NTFmNjZjZDViOGE1MDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZMe+OUClTFR2GmxsIS2T9JcDwYt
0YuoDtuFgWcGD1i5imHXkAP0pRErxSM2AE21OKyfKmN+zo8v1OW7SVKUhVvlZynu
/GQmbyl3/gqKkm+2B3Je+1ueQyB3Zizo528kU0/WtnQSfHDzgC27GDD1wHEJFbVP
Ew8uU/KC2GD2JfDzb6VsePiT+RnL1A7bQgLkU7ByD98rXC6wGKB+4HeFEflA/SqJ
BaUd7aF78J11+Pg3pgEMCV3Dm8sRHQ/qkvsFtojl3gPv7TvpLoNdZHKZbC82cMIc
mTo5SKIFMA2cdIrG/HHTHBXrq2mxR5Ip3e8D/jA5neYgFwY/4dNpHosiywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwwHOKSKuYllVsDMkUfZs1bilASMB8GA1UdIwQY
MBaAFEg5XrTA7i2qU5LNmfxF77xKdU6QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0RsZXRNRHVMYXBUa3MyWl9FWHZ2RXAxVHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83YTk5NjEtMjEzZS00Y2M0LThmOTYt
N2Y1NzliYTA5OGJlLzEvU0RsZXRNRHVMYXBUa3MyWl9FWHZ2RXAxVHBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83YTk5NjEtMjEzZS00Y2M0LThmOTYtN2Y1NzliYTA5OGJl
LzEvU0RsZXRNRHVMYXBUa3MyWl9FWHZ2RXAxVHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJf8nxUdm
Ip+/a4kkDaxTU/j8ROeA/q2lQdU4M6qpfxv68LgeQJtLMimFXPwrI5Cqjve5klOP
ZwMxcBEpJbUfudhYhxCYeFuZuIDvBkUUSWnKY8Y8O5UzAstQfFouUXi1hJYuyxG5
KqHfkk7PuuDTSHm3ZS0IrrQjzdCL+gup1wpR28bUlPG1u0trPzsrKk616c1wOpxx
VgWtvRF8BJLXftYSFEUgnQdZr6zoGXNRK9qbaCf3vIfKhGRV3xM8RqYhPUzczeqt
8cvKsvRMMPL3NA3aMOnlIjnBQEEZCrbvhj1bz0I/aGGrAntNvKzNnzr8GJnVpsas
BPzgh58WpzKTdg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:27 2026 by rpki-client