Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
File: sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft (raw, json)
Hash identifier: xJb3xlsbjcKB+JAFQyyYkvfkZpGCR4HcnIGlup30XaU=
Subject key identifier: 4D:86:8B:DC:A1:CC:BC:45:07:FD:82:9B:03:81:A1:12:B5:63:C3:85
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 01A14D2B7624D32F2EBCC0DADA82B362E2D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
Manifest number: 1191
Signing time: Sun 18 Oct 2026 04:00:56 +0000
Manifest this update: Sun 18 Oct 2026 04:00:56 +0000
Manifest next update: Mon 19 Oct 2026 04:00:56 +0000
Files and hashes: 1: J3HD5d0SMV-R_mfbvG3dJVqlH-Y.roa (hash: tkc15QCtNWavxhUnqZNNlUVnnK/d2SoDMZwxZ/0lGlk=)
2: m6LIV73xO4kHTsWdqgKGOHvaXtE.roa (hash: xs1n0jReKeqXr1lEDMiVoEWUuyrVXL8g65tDgZej+UA=)
3: sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl (hash: LrQ8Kk8LIhIHDxGxMKX4hrw60Z2wb4SVB+pLUZBz1cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:2b:76:24:d3:2f:2e:bc:c0:da:da:82:b3:62:e2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Oct 18 04:00:56 2026 GMT
Not After : Oct 19 04:00:56 2026 GMT
Subject: CN=4d868bdca1ccbc4507fd829b0381a112b563c385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:86:7b:cf:57:97:ba:9b:64:a6:05:c6:eb:
4e:71:3d:04:48:7d:59:99:0b:4c:f2:2d:89:4a:9e:
07:29:f6:4a:46:38:b3:7f:f8:7c:48:c9:be:d9:27:
07:aa:dd:76:0c:47:a9:cc:04:fc:fd:e8:c2:34:41:
39:fb:e5:d5:98:ab:36:e5:99:7c:94:d8:11:ba:57:
8b:39:ec:6a:f2:3f:62:c2:8a:6d:ed:45:ea:77:96:
e1:9a:15:3b:ad:c7:07:04:16:d0:e2:9b:da:f9:74:
0a:7e:fe:5f:55:ec:94:8f:2e:a2:41:14:09:97:eb:
bc:da:55:e1:4d:fa:1f:64:81:06:2d:09:2e:06:91:
4b:dd:58:60:ef:b7:e2:f3:00:1f:47:d7:c8:7e:a6:
b8:f7:eb:6f:bc:2e:5d:60:5d:56:2e:fc:18:f1:9c:
63:73:a7:e5:fb:ca:e6:ff:28:3a:50:47:ce:11:74:
03:fb:0a:98:9f:35:a5:f0:c8:8b:f6:3d:56:d8:cd:
32:1f:be:10:1a:7f:a4:da:f9:5c:76:2f:0a:77:c6:
c2:10:d9:4e:69:f5:a5:fc:e4:13:fe:a0:fd:e9:f0:
9a:95:7a:57:39:05:23:b5:1a:d0:91:c2:17:9c:b1:
a8:f0:53:f8:2e:c3:3d:7c:1e:3d:a0:0f:f8:fe:4c:
67:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:86:8B:DC:A1:CC:BC:45:07:FD:82:9B:03:81:A1:12:B5:63:C3:85
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:48:ef:f3:01:23:b6:95:b5:25:54:40:dd:2d:90:5f:ef:dd:
fb:2a:2b:30:c9:90:1e:89:e9:a0:67:3a:b7:b0:08:98:ba:e6:
f7:7e:2c:f9:e1:56:95:03:9a:99:1b:10:f0:88:fb:f9:76:46:
9d:5f:2b:b0:f8:df:c1:cd:c1:e6:69:07:2c:58:a3:12:ce:0b:
d5:4a:32:fa:9a:5a:73:1e:ab:58:28:3d:dc:7a:b8:34:a1:5a:
ea:c2:5e:b3:23:e6:65:c5:bb:b1:74:e8:4e:64:c7:d9:cf:6b:
de:7c:3b:cd:69:7b:05:95:a7:2c:03:3b:ac:7c:3e:11:ff:6c:
54:94:64:c2:c5:bf:d9:25:d1:6d:ee:05:5d:90:4f:5d:25:06:
28:0d:ec:31:e4:c1:23:c0:23:a4:4a:f9:e4:e5:a7:a7:ea:09:
3c:2c:de:d6:b4:8d:83:3e:96:32:5d:df:3d:88:92:47:c5:99:
74:4e:32:34:a9:a9:d5:ed:59:04:66:70:27:0a:c0:94:9b:d0:
0d:da:a1:ec:93:02:a6:41:40:d2:3f:32:22:d3:69:66:59:4c:
d2:a0:05:62:c1:60:d9:d8:b4:ce:b9:19:c9:72:17:f3:20:1a:
b2:bb:17:fa:ba:f3:c0:a0:43:7e:9e:17:52:e9:ec:95:82:52:
1b:b7:ee:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:08:37 2026 by rpki-client