Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
File: sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft (raw, json)
Hash identifier: 7CI15rLfrpk2BnG/LVd3yCZJGfU2nXhGvugL59PMfRQ=
Subject key identifier: FF:30:63:81:1D:66:87:4E:2F:C8:CC:85:5C:3C:C3:33:B2:0B:C5:33
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 019E31850647D2E02C4C153B6911658F22E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
Manifest number: 0FF5
Signing time: Sat 16 May 2026 16:01:01 +0000
Manifest this update: Sat 16 May 2026 16:01:01 +0000
Manifest next update: Sun 17 May 2026 16:01:01 +0000
Files and hashes: 1: J3HD5d0SMV-R_mfbvG3dJVqlH-Y.roa (hash: tkc15QCtNWavxhUnqZNNlUVnnK/d2SoDMZwxZ/0lGlk=)
2: m6LIV73xO4kHTsWdqgKGOHvaXtE.roa (hash: xs1n0jReKeqXr1lEDMiVoEWUuyrVXL8g65tDgZej+UA=)
3: sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl (hash: 4Uct+wPpipfUfqPc9wAlNSI4L/+f6r4tQxaZg2yf630=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:85:06:47:d2:e0:2c:4c:15:3b:69:11:65:8f:22:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: May 16 16:01:01 2026 GMT
Not After : May 17 16:01:01 2026 GMT
Subject: CN=ff3063811d66874e2fc8cc855c3cc333b20bc533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c8:05:1b:64:28:0c:e4:1c:be:50:41:66:12:
e1:50:0b:44:e6:f2:b2:e0:44:39:07:18:85:94:9f:
2b:ad:cd:6f:5f:45:2a:85:73:5c:89:81:78:80:9c:
cb:d9:9c:e0:73:b2:43:d4:1e:ec:81:a5:bc:54:7e:
6e:11:78:3e:ae:9f:d1:d5:d0:98:6a:59:e2:ab:1d:
21:e2:f8:37:46:75:78:66:c0:44:9c:1d:0f:13:b2:
c3:d0:a6:9e:20:69:4e:9e:99:3f:89:b2:46:3b:db:
4b:20:04:36:18:72:9b:89:d5:1b:05:99:94:55:13:
d3:ab:02:a6:5e:ea:15:10:18:43:bf:be:87:10:73:
21:44:a0:fc:84:94:71:2e:66:bf:dc:0c:39:bb:55:
a2:ac:28:2e:8f:0c:48:1a:2a:1a:5a:ef:aa:6f:e0:
00:21:1d:a5:a2:39:cc:ed:d7:ec:b8:02:75:48:13:
5f:2b:c4:2c:36:03:c6:2f:bc:ec:c7:16:e7:f0:23:
19:e8:fd:2c:13:9d:76:94:81:50:08:df:c4:4f:80:
ac:3b:d1:41:3e:08:0e:75:0f:e9:6a:6a:fd:4a:f6:
35:c3:bc:83:9d:fe:c1:85:27:db:9b:d9:ed:b8:41:
e7:e4:d5:24:4a:e8:fd:be:5d:d9:82:1b:fd:80:91:
d9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:30:63:81:1D:66:87:4E:2F:C8:CC:85:5C:3C:C3:33:B2:0B:C5:33
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:df:53:d0:70:01:4d:aa:8b:52:64:82:8b:9b:c8:ea:ee:4a:
23:bd:07:91:ce:de:61:f8:19:de:7d:d6:76:da:95:d4:14:4e:
b3:d4:23:c7:5a:5d:bf:fc:30:cf:0e:9b:b1:12:02:52:0a:e7:
c7:e3:0c:c7:99:11:98:ae:e4:7c:2f:34:e3:0b:69:e3:0d:e9:
46:46:70:0f:87:2d:56:31:77:db:12:57:95:a8:aa:f4:b0:37:
64:27:0b:a7:4d:b4:eb:7a:07:2c:4f:a5:a2:40:c9:21:d9:e7:
c4:52:a6:39:4e:9c:56:1e:10:72:35:3c:7d:e3:f2:e8:e6:78:
12:ab:50:89:5c:be:dc:91:b7:28:3d:4b:30:3a:93:b9:88:fb:
b0:5a:81:40:ee:fe:2c:41:aa:e4:23:76:16:2d:ae:68:25:e0:
9f:ab:f6:cb:20:aa:25:5f:92:7b:f0:45:7c:d3:2c:7a:38:89:
e2:3c:68:d5:c4:46:18:92:78:f4:80:74:30:fd:ec:bc:2d:71:
47:d8:57:3b:d9:f4:2b:91:67:96:fe:bc:31:5d:f0:cc:b5:63:
fa:69:e8:d8:b8:81:4e:ec:16:37:8a:24:42:b3:84:22:31:c1:
33:c7:82:30:6d:4d:c5:87:30:cb:e1:f4:16:da:7d:4a:45:a5:
d6:b0:c5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:12:51 2026 by rpki-client