Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
File: sLGxJtrAqgt3lIZADt5yVLJe6qY.mft (raw, json)
Hash identifier: ceQHzGtALKQX6Fe/HFiC7tCs8ClfeYZTkkWus5Yf6Vg=
Subject key identifier: D6:CF:C1:5B:D0:6A:84:2D:62:4C:E5:FE:84:B4:BF:F1:25:96:21:94
Authority key identifier: B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6
Certificate issuer: /CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
Certificate serial: 019D3A8ADDFEC11001DC4E5EE4530A6D3BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 17:01:12 +0000
Manifest this update: Sun 29 Mar 2026 17:01:12 +0000
Manifest next update: Mon 30 Mar 2026 17:01:12 +0000
Files and hashes: 1: 3CIM-rszzFckhjZbgzPmZtOKZv4.roa (hash: VqajRiaghj0MLKmKn/iBz4Zyi+LNEnSguYlblCLEBTI=)
2: sLGxJtrAqgt3lIZADt5yVLJe6qY.crl (hash: OhXf8qkkRO8cZ59u4UhNubU5B40q+nIG8zQlomQqFBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:dd:fe:c1:10:01:dc:4e:5e:e4:53:0a:6d:3b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
Validity
Not Before: Mar 29 17:01:12 2026 GMT
Not After : Mar 30 17:01:12 2026 GMT
Subject: CN=d6cfc15bd06a842d624ce5fe84b4bff125962194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:eb:ea:d0:2f:d9:2e:0f:37:ad:a7:a5:f0:
7d:b9:5c:0c:4a:1a:41:a5:6c:71:ff:3a:31:73:2b:
15:ff:8e:a4:76:87:5f:64:b0:a2:e5:d8:a2:ca:9f:
f1:37:80:5b:f3:64:f1:51:6d:7d:39:b6:3b:38:46:
60:49:8f:5a:5e:1e:a4:1b:a2:41:b9:80:3b:8e:b9:
aa:00:95:1a:98:02:34:bb:e9:e5:0d:e9:0e:2e:3d:
a3:4f:b8:13:ce:b7:7e:fe:21:01:3c:4e:36:0d:82:
e8:da:05:c7:e4:b1:49:5c:ee:56:42:de:fd:79:44:
4d:5c:d1:94:ab:9f:dc:3c:60:e1:78:38:f3:1c:a5:
a7:c5:47:ff:7e:90:fa:bd:cd:6f:61:2b:32:dc:f9:
b6:01:91:32:3b:c4:34:44:8c:9f:35:2e:45:66:83:
f3:22:c9:33:4e:b2:e4:90:5f:96:9c:a1:fa:c2:90:
1b:df:a8:39:cd:53:a0:f9:26:02:29:de:02:40:68:
c7:0d:41:5a:62:f3:3d:1a:32:ff:74:a2:e9:44:69:
5e:52:f6:d6:41:04:ff:dd:41:33:6a:d5:c5:11:10:
b0:24:2b:d1:64:5a:e8:91:6d:93:c6:a6:10:4e:c8:
e5:04:94:c4:b2:eb:ec:ad:66:12:43:42:df:20:8d:
7a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CF:C1:5B:D0:6A:84:2D:62:4C:E5:FE:84:B4:BF:F1:25:96:21:94
X509v3 Authority Key Identifier:
keyid:B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:aa:e7:a5:45:fc:ec:ff:16:a5:ff:27:25:57:53:d7:4d:38:
d1:f7:bd:c5:c7:e1:cb:50:27:85:a1:82:fb:ba:d8:be:08:f9:
ab:99:ba:44:f6:4e:18:96:bc:77:49:8b:cc:0d:9e:a7:67:ed:
71:85:fb:46:03:85:f2:b4:48:e9:78:93:a0:d4:46:cf:56:c4:
95:a9:c7:92:56:14:07:e1:5f:41:ac:54:5a:e3:eb:df:e9:e1:
29:05:73:99:d6:0c:5d:33:75:53:b4:cf:3b:ae:12:ad:9a:6c:
da:10:26:3b:6c:ff:4e:4e:d3:dd:59:a9:6d:ab:8f:34:f6:1c:
f6:b3:0a:3d:a2:2d:97:02:0c:d3:e4:35:37:bf:36:5e:df:9a:
cc:0a:45:00:5f:f6:7a:0c:9b:22:44:f0:a9:21:0c:1a:2d:de:
50:2a:48:9b:df:5b:03:0a:d8:8e:c9:85:14:8a:af:6d:a3:87:
6d:12:7c:f3:30:31:58:2c:1e:1a:c9:62:f7:87:f6:4e:a2:41:
ed:ba:a1:ee:f6:b3:84:1c:5e:51:26:0f:0d:42:d8:95:34:6d:
23:8d:14:14:2f:8d:4f:6b:06:1d:4a:16:8a:07:9b:20:de:fe:
65:21:9d:ec:e1:2f:32:89:7b:a0:71:0c:ea:e9:d2:bd:84:03:
6d:e7:96:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:16:04 2026 by rpki-client