Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
File: sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft (raw, json)
Hash identifier: 71HMsVY6gbanmlFzjBoUjXGtjyv/fe/LeNQv06vWfvY=
Subject key identifier: 48:6D:C4:9C:0D:21:2B:E1:36:F0:FC:7B:13:A9:02:44:62:74:A6:BC
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 019F19437A01A59956740039CF64E8A313D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
Manifest number: 106D
Signing time: Tue 30 Jun 2026 16:01:20 +0000
Manifest this update: Tue 30 Jun 2026 16:01:20 +0000
Manifest next update: Wed 01 Jul 2026 16:01:20 +0000
Files and hashes: 1: J3HD5d0SMV-R_mfbvG3dJVqlH-Y.roa (hash: tkc15QCtNWavxhUnqZNNlUVnnK/d2SoDMZwxZ/0lGlk=)
2: m6LIV73xO4kHTsWdqgKGOHvaXtE.roa (hash: xs1n0jReKeqXr1lEDMiVoEWUuyrVXL8g65tDgZej+UA=)
3: sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl (hash: xkJRT2nAbDrdjoRlkVBJu2946qhQP6nOdPIRNN21yws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:7a:01:a5:99:56:74:00:39:cf:64:e8:a3:13:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Jun 30 16:01:20 2026 GMT
Not After : Jul 1 16:01:20 2026 GMT
Subject: CN=486dc49c0d212be136f0fc7b13a902446274a6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:db:52:5b:2f:b8:33:61:3d:22:23:fa:59:
63:6a:0e:f7:92:3e:4b:ef:80:79:04:51:f3:cb:57:
b0:bf:8d:c6:c3:45:18:d7:b4:c1:e3:77:5b:f3:95:
e5:25:39:1c:ee:0f:b4:ff:47:fa:b9:d7:27:12:08:
01:ca:47:b7:c9:0e:14:1d:95:d5:00:1e:05:9c:f9:
91:90:1b:7f:2f:12:67:18:95:24:d7:53:46:75:5e:
31:63:ad:0c:d6:70:fe:e8:fe:e0:dd:02:81:07:fb:
69:3f:0b:04:81:fe:c2:f8:1c:cb:3d:cc:3c:51:32:
b5:9f:77:cc:b2:2c:56:e1:6b:70:21:d7:0b:57:59:
4d:43:21:38:66:14:cf:ed:78:71:74:0d:7b:cf:74:
1a:f8:c3:2e:49:c4:49:08:69:1c:63:ca:7c:9d:0d:
dc:43:5f:7d:fb:88:9b:b9:5d:5c:06:9c:6e:d0:19:
76:82:ec:fc:48:04:8a:6d:23:bf:e7:b2:7c:da:79:
ba:6b:0c:7b:13:dc:a7:9e:c3:af:c9:93:5f:1f:d6:
a0:39:7b:36:88:cb:36:a6:9d:5e:4a:a3:87:f8:a6:
c9:c9:74:02:d9:0f:d1:f4:75:e3:aa:ec:ca:59:0a:
7d:84:1a:30:81:c8:4e:3a:0e:19:f7:93:cb:c6:9a:
d3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6D:C4:9C:0D:21:2B:E1:36:F0:FC:7B:13:A9:02:44:62:74:A6:BC
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:0e:a4:ce:bd:cd:f3:d7:84:9d:62:28:81:72:43:a5:12:46:
ea:9f:1f:44:44:5d:23:82:e9:95:bc:7c:83:36:61:3e:2f:6b:
2f:bf:76:84:da:b0:9e:69:69:0e:28:aa:7e:a3:cf:c2:51:86:
45:c4:f7:00:82:dd:a7:a8:55:75:25:8a:91:6c:db:ac:af:2e:
4c:55:02:65:15:ce:db:5a:d5:1c:f3:ca:6d:ef:50:15:e7:ca:
2f:90:3b:e9:f8:56:4c:74:bf:49:90:c6:43:5e:af:89:8b:78:
a4:02:8e:98:32:c9:6b:d5:c9:64:e6:aa:6c:fc:03:80:59:08:
78:b6:63:a0:37:31:6d:ff:b0:57:4d:01:6c:6c:e3:88:5d:5c:
11:28:02:02:0a:a3:a8:56:bf:2c:bc:21:a8:d5:a7:fa:8d:bf:
6a:67:0c:a7:17:6a:4a:44:d5:c5:73:c3:db:34:16:94:c5:45:
c3:8d:93:94:e4:66:3a:ff:cf:70:4c:8b:0d:d9:4e:15:56:a6:
a9:1f:a6:97:80:11:25:d3:6f:f2:91:fc:3c:4c:1d:80:ea:56:
3a:9a:2e:f6:b8:15:ac:7a:1b:ae:94:ec:87:74:ee:d1:1b:51:
59:ac:ff:92:f8:14:6a:ed:53:1f:a2:ed:d0:d8:d6:68:49:29:
04:5c:0d:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZQ3oBpZlWdAA5z2TooxPQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYmQ2OGUzNzBlN2VjMjViZWM4ZTAxNDk3YjIxMzhkOTVk
YzZlYmMwHhcNMjYwNjMwMTYwMTIwWhcNMjYwNzAxMTYwMTIwWjAzMTEwLwYDVQQD
Eyg0ODZkYzQ5YzBkMjEyYmUxMzZmMGZjN2IxM2E5MDI0NDYyNzRhNmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+jbUlsvuDNhPSIj+lljag73kj5L
74B5BFHzy1ewv43Gw0UY17TB43db85XlJTkc7g+0/0f6udcnEggByke3yQ4UHZXV
AB4FnPmRkBt/LxJnGJUk11NGdV4xY60M1nD+6P7g3QKBB/tpPwsEgf7C+BzLPcw8
UTK1n3fMsixW4WtwIdcLV1lNQyE4ZhTP7XhxdA17z3Qa+MMuScRJCGkcY8p8nQ3c
Q199+4ibuV1cBpxu0Bl2guz8SASKbSO/57J82nm6awx7E9ynnsOvyZNfH9agOXs2
iMs2pp1eSqOH+KbJyXQC2Q/R9HXjquzKWQp9hBowgchOOg4Z95PLxprTPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhtxJwNISvhNvD8exOpAkRidKa8MB8GA1UdIwQY
MBaAFLC9aONw5+wlvsjgFJeyE42V3G68MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0wxbzQzRG43Q1cteU9BVWw3SVRqWlhjYnJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9mNGNhMWMtMzVkZC00Y2IxLTg0ZmEt
ODExNWNhZmQzOGNlLzEvc0wxbzQzRG43Q1cteU9BVWw3SVRqWlhjYnJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9mNGNhMWMtMzVkZC00Y2IxLTg0ZmEtODExNWNhZmQzOGNl
LzEvc0wxbzQzRG43Q1cteU9BVWw3SVRqWlhjYnJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYg6kzr3N
89eEnWIogXJDpRJG6p8fRERdI4Lplbx8gzZhPi9rL792hNqwnmlpDiiqfqPPwlGG
RcT3AILdp6hVdSWKkWzbrK8uTFUCZRXO21rVHPPKbe9QFefKL5A76fhWTHS/SZDG
Q16viYt4pAKOmDLJa9XJZOaqbPwDgFkIeLZjoDcxbf+wV00BbGzjiF1cESgCAgqj
qFa/LLwhqNWn+o2/amcMpxdqSkTVxXPD2zQWlMVFw42TlORmOv/PcEyLDdlOFVam
qR+ml4ARJdNv8pH8PEwdgOpWOpou9rgVrHobrpTsh3Tu0RtRWaz/kvgUau1TH6Lt
0NjWaEkpBFwNKw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:40:19 2026 by rpki-client