Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
File: SDletMDuLapTks2Z_EXvvEp1TpA.mft (raw, json)
Hash identifier: uWby4fjuurUO/Z1Io2qDJ8z6yld4O9yNbtXc2xGIY+c=
Subject key identifier: F4:9E:4B:19:AF:50:4D:EB:42:6B:8A:8A:6E:9E:12:E0:B8:74:C8:51
Authority key identifier: 48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
Certificate issuer: /CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Certificate serial: 019EB5B2F02E5F9C662D346B51FED4B6C72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
Manifest number: 1958
Signing time: Thu 11 Jun 2026 08:01:03 +0000
Manifest this update: Thu 11 Jun 2026 08:01:03 +0000
Manifest next update: Fri 12 Jun 2026 08:01:03 +0000
Files and hashes: 1: SDletMDuLapTks2Z_EXvvEp1TpA.crl (hash: Gw3wO9yKG82QhGEOU6EOSge+4YaF12BaFqWrumWWAqw=)
2: oYj8IRsjMXERXaM9fv_aTVNDMiM.roa (hash: 1h5HkPjPP0vcntiwcGgkqpVFeA7WFjBNEknGQLJcQbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:b2:f0:2e:5f:9c:66:2d:34:6b:51:fe:d4:b6:c7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Validity
Not Before: Jun 11 08:01:03 2026 GMT
Not After : Jun 12 08:01:03 2026 GMT
Subject: CN=f49e4b19af504deb426b8a8a6e9e12e0b874c851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:99:79:b0:8e:55:b6:7c:54:49:30:5c:1b:1e:
2d:95:b4:20:7b:18:f3:70:1d:7b:ec:0d:d8:57:5a:
2b:89:df:36:4d:40:a9:03:db:c1:6f:01:55:6f:68:
d0:38:fe:e8:9a:74:ab:ad:9f:90:a7:56:1a:4a:96:
cb:4c:44:82:a0:74:95:b5:f3:47:b7:53:5c:d8:35:
c0:5f:9c:69:e6:bd:9b:8b:a5:0e:20:e3:32:02:7e:
3c:c6:7a:ac:1d:77:b0:46:58:a1:bf:29:77:36:1a:
8c:c5:01:fd:ff:8a:99:5b:88:2c:3b:e4:77:64:2c:
6c:57:86:72:b7:ed:54:34:e1:04:cb:26:dd:f6:d8:
d6:50:c4:42:7f:a5:8c:24:e2:16:ef:66:d1:a3:8d:
4d:e3:31:a8:75:e5:31:c9:a0:9b:ee:07:e6:84:0d:
a3:56:a2:31:0f:58:87:f9:1f:b7:66:bc:5f:fd:bd:
22:57:74:ec:f4:3d:1b:e1:8d:19:ff:18:20:d4:33:
39:8b:46:c9:f6:71:48:3c:ef:ec:84:fe:02:a0:62:
d6:b4:f3:21:5d:66:2d:36:dc:ec:9c:f3:42:60:ca:
b4:3f:f8:f9:de:eb:d1:21:7d:c7:14:1e:78:73:f5:
17:60:b4:55:91:9b:72:f7:eb:b6:8f:84:48:17:1c:
95:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9E:4B:19:AF:50:4D:EB:42:6B:8A:8A:6E:9E:12:E0:B8:74:C8:51
X509v3 Authority Key Identifier:
keyid:48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a6:bb:f1:d9:bb:eb:8c:50:8d:e2:27:29:f7:1b:3a:3a:82:
5c:62:9a:e2:f9:54:d0:9c:57:71:b6:99:c1:b4:e2:2a:a2:d7:
e6:0b:6b:d4:d4:29:ef:a7:0c:6e:96:46:bc:ed:7f:e6:96:7a:
fe:a9:c2:cc:f6:fd:fe:df:05:31:57:03:53:4f:e1:24:6a:f9:
ca:06:5c:bf:15:02:c7:c0:c3:33:d9:6f:88:4b:c7:08:79:42:
24:5e:b9:6e:1b:3d:e3:c9:65:31:a3:34:9a:6c:ba:25:db:e6:
b6:12:86:ee:b6:e4:0a:fc:5a:b9:98:da:25:b2:24:99:d9:15:
06:14:8a:1a:9f:94:b6:51:59:9b:a1:f9:e9:ff:ae:e3:e5:d4:
6f:24:48:9e:ad:90:06:d0:4a:d3:73:34:d0:87:fa:3a:a4:54:
94:bb:ca:e4:41:36:5e:7b:58:04:fc:b4:88:ff:c0:72:68:29:
84:7c:a5:f5:19:30:f4:50:f6:65:a6:ac:59:79:7d:75:a9:6e:
82:4b:ec:50:1b:30:18:c7:4c:b2:ce:6e:99:80:25:bf:09:22:
ae:72:45:3a:03:c3:53:2b:39:34:79:34:9f:85:17:c2:37:9a:
86:ec:1e:34:bc:8b:17:46:4d:c4:52:9d:28:68:a5:f5:ab:b6:
63:be:4b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:28 2026 by rpki-client