Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
File: sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft (raw, json)
Hash identifier: rYquU3+/AXSb7lK4eLSXRwSnJtzE05OlFTlOy/SoZ5U=
Subject key identifier: E3:1A:35:27:4A:7C:E4:1F:2E:0A:39:E9:18:7F:DA:29:E3:E8:0D:F7
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 01A002EFC17F504EAB114820F72B647163FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
Manifest number: 10E6
Signing time: Sat 15 Aug 2026 01:01:02 +0000
Manifest this update: Sat 15 Aug 2026 01:01:02 +0000
Manifest next update: Sun 16 Aug 2026 01:01:02 +0000
Files and hashes: 1: J3HD5d0SMV-R_mfbvG3dJVqlH-Y.roa (hash: tkc15QCtNWavxhUnqZNNlUVnnK/d2SoDMZwxZ/0lGlk=)
2: m6LIV73xO4kHTsWdqgKGOHvaXtE.roa (hash: xs1n0jReKeqXr1lEDMiVoEWUuyrVXL8g65tDgZej+UA=)
3: sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl (hash: q5JL1Ban3L9onATCNIi5uTwgfCAxaHgIAqI7oGsKsRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:ef:c1:7f:50:4e:ab:11:48:20:f7:2b:64:71:63:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Aug 15 01:01:02 2026 GMT
Not After : Aug 16 01:01:02 2026 GMT
Subject: CN=e31a35274a7ce41f2e0a39e9187fda29e3e80df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3a:9e:72:6c:63:4c:17:05:2d:43:a6:63:e3:
3e:8c:63:13:28:ca:de:e6:2f:f2:4c:b0:22:62:d7:
fa:01:9b:11:c1:e2:af:50:1c:1b:2b:d9:c7:6e:ab:
ac:76:81:9f:ec:a0:b7:ce:f4:cc:52:15:07:b9:cf:
cf:1d:96:9f:3d:4d:f9:7c:87:09:b6:6e:a6:5b:17:
73:19:19:d7:5d:b5:f3:2f:91:29:56:94:22:06:85:
c3:f5:e0:a6:72:b1:7f:b8:62:2f:46:2d:b1:64:15:
2b:71:8f:21:df:b0:c3:5d:37:d7:f2:1f:da:21:27:
19:36:0d:0c:c6:77:41:b0:4a:46:ae:20:f5:87:91:
fd:80:09:75:05:a1:13:a4:38:cf:fe:d9:e5:2e:ee:
8d:a4:90:93:19:33:91:f2:46:0d:7d:f9:60:ff:3a:
d5:0d:03:a1:b2:17:08:5d:78:63:88:61:99:34:f4:
7c:fa:f3:2c:ac:af:70:52:d2:76:43:ec:90:d4:70:
28:ed:78:d7:d2:7e:d7:55:5e:db:46:e7:9f:f1:bd:
3a:81:80:38:e7:51:51:a1:2a:b4:79:eb:15:7c:da:
ee:e0:f4:77:f4:bd:73:9c:6a:83:3d:62:36:d8:0a:
f1:bb:82:f5:e1:55:ad:97:13:ee:a3:74:ea:cc:5f:
36:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1A:35:27:4A:7C:E4:1F:2E:0A:39:E9:18:7F:DA:29:E3:E8:0D:F7
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:21:d6:01:c1:57:fb:ee:31:48:7b:d3:f5:3b:fe:ca:80:6e:
03:9e:25:23:51:2c:2e:05:e8:05:ae:50:16:5a:3e:ee:b1:b2:
b8:b7:9a:b6:73:ab:43:f4:f6:6f:60:28:26:73:e9:77:0b:8a:
5b:b3:7f:8c:14:3b:89:5a:10:a5:1c:9f:67:dc:0b:1d:f7:1b:
de:ef:ae:f4:ff:bd:10:5e:67:54:80:87:3a:15:0f:cd:4a:98:
9d:9d:1b:f0:c3:3d:d6:3d:a4:38:79:0f:f0:e8:55:8e:e4:b6:
d9:42:7e:a7:77:54:84:2b:f6:29:b9:74:4e:26:c1:83:17:0c:
68:35:64:74:d2:a1:40:f1:d3:e1:6e:e6:f0:36:af:c8:ec:e3:
3b:0e:8b:72:6f:b8:6d:74:2b:41:e7:0a:7f:0d:59:d9:f5:c7:
03:13:00:06:f3:53:00:ca:38:53:f4:8d:ca:73:4e:d9:51:f3:
94:9e:23:f0:5f:c0:24:67:40:18:29:bb:b4:6c:50:c3:6d:47:
32:07:a8:2a:c1:4e:79:52:a2:39:b7:24:0e:c2:55:8a:15:48:
a8:2d:a8:19:9f:94:26:3b:15:03:3a:a9:92:ee:4d:41:f4:1e:
66:77:ba:00:f4:b7:ea:3a:56:e7:2b:7f:97:9e:da:a7:d9:65:
6b:37:c7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:33:54 2026 by rpki-client