Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
File: sLGxJtrAqgt3lIZADt5yVLJe6qY.mft (raw, json)
Hash identifier: FwbdTHjd2glzfg1PMekAD8csU1y1rISo71qN4P2Q/tw=
Subject key identifier: C7:38:02:EA:E9:D3:2D:A0:41:68:E5:BE:8D:A1:02:37:06:E0:A3:76
Authority key identifier: B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6
Certificate issuer: /CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
Certificate serial: 019FA0A9076800F921224B2722E39347909E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
Manifest number: 1961
Signing time: Sun 26 Jul 2026 23:00:59 +0000
Manifest this update: Sun 26 Jul 2026 23:00:59 +0000
Manifest next update: Mon 27 Jul 2026 23:00:59 +0000
Files and hashes: 1: 3CIM-rszzFckhjZbgzPmZtOKZv4.roa (hash: VqajRiaghj0MLKmKn/iBz4Zyi+LNEnSguYlblCLEBTI=)
2: sLGxJtrAqgt3lIZADt5yVLJe6qY.crl (hash: PQpCZKIIPjeaT4JRbKNjI/ZJ+v0HglG5lRFTK56l768=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a9:07:68:00:f9:21:22:4b:27:22:e3:93:47:90:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
Validity
Not Before: Jul 26 23:00:59 2026 GMT
Not After : Jul 27 23:00:59 2026 GMT
Subject: CN=c73802eae9d32da04168e5be8da1023706e0a376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:df:05:4a:f0:7f:b8:b9:19:d4:1a:45:e6:
75:7b:0f:1b:9c:26:d6:c4:6e:cc:25:c9:7a:cb:4a:
3b:a2:e3:a8:b3:d4:6e:f8:4b:c5:36:c4:4a:66:81:
cb:e7:be:8b:18:33:4d:50:29:52:ae:84:19:19:30:
4f:9d:af:5f:6d:c2:ab:d9:f5:63:e0:04:c0:02:27:
20:f4:c8:9a:79:81:6f:6c:e4:c1:55:12:9a:d5:e9:
39:e3:36:e0:f7:6e:a5:39:4d:57:d9:4a:d2:f4:51:
30:58:93:c4:53:ab:28:77:7a:8d:2a:db:b5:ae:51:
b2:78:42:64:71:94:33:6d:3e:d7:df:4d:57:33:eb:
23:88:b1:83:ab:11:25:e1:7f:ec:50:df:dc:ed:47:
8f:3a:a6:35:dc:60:a7:0f:6f:ab:6a:39:35:67:6e:
2d:57:a0:eb:50:52:b8:5d:ae:4a:b6:0e:60:64:f6:
6d:d3:c7:61:c4:9c:23:03:00:cb:9c:51:1d:18:9e:
d2:9b:8a:ed:03:59:8c:8c:1b:ab:f0:7c:dd:dd:77:
70:e6:d3:c2:0c:ea:c3:4b:5d:8f:ea:5f:4c:1c:20:
cd:40:9b:86:b6:5c:fb:f5:85:6e:ac:c3:73:f0:e7:
c0:62:13:0b:1a:b5:ff:73:6f:00:da:bc:93:9c:e0:
c6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:38:02:EA:E9:D3:2D:A0:41:68:E5:BE:8D:A1:02:37:06:E0:A3:76
X509v3 Authority Key Identifier:
keyid:B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ab:69:01:d6:df:6a:b9:fb:cb:df:5e:5f:00:52:f4:0b:07:
e9:c7:2c:10:e1:45:3c:fe:ff:e1:20:14:78:1e:26:a8:5a:96:
38:56:c6:7b:be:91:12:1a:5c:71:ab:94:67:49:05:4d:5f:cb:
3e:eb:61:35:42:fd:f8:5a:bb:e7:81:0b:ec:90:a4:d8:79:c8:
b0:39:eb:e5:9f:70:20:c7:e1:0f:7e:6b:67:1e:f3:93:d2:d7:
a5:6a:cc:cf:1a:31:b3:70:db:27:d6:05:e9:a3:a7:3b:cd:be:
37:07:e2:25:bf:b8:56:ac:a2:1b:a8:b0:58:7d:a1:0b:88:c8:
06:41:65:08:52:28:4e:c1:4c:28:46:de:3e:15:f5:87:3f:9c:
c8:e5:74:bd:2a:e8:05:f4:cf:e3:15:85:fc:1d:c4:25:bd:c1:
dc:a7:fc:47:d1:47:96:41:a9:3c:40:99:c6:c9:e4:e9:57:6c:
34:76:f8:9e:f4:76:8e:37:74:49:09:db:0c:79:ee:b2:f8:2f:
79:bf:f6:82:d7:9b:59:50:31:01:a2:05:cd:1e:ef:66:19:fd:
0d:9a:2a:a8:6c:50:5b:02:0c:ec:72:69:63:e6:70:57:e8:90:
7a:76:bf:71:2e:1c:26:b1:6a:44:0e:f1:74:3d:ea:a8:6a:2d:
56:10:77:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:29:43 2026 by rpki-client