Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
File: sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft (raw, json)
Hash identifier: 8t4OCLkwpRW5fuY/Nz0pvaLDt1hUFf9Y2M/YtbcgZYY=
Subject key identifier: 80:20:B7:69:30:13:AE:50:92:DB:F9:F7:F9:5E:0B:CE:4D:C1:15:6D
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 019D386553D381FCA001C1DA5F9D1D53EFF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
Manifest number: 0F74
Signing time: Sun 29 Mar 2026 07:00:57 +0000
Manifest this update: Sun 29 Mar 2026 07:00:57 +0000
Manifest next update: Mon 30 Mar 2026 07:00:57 +0000
Files and hashes: 1: J3HD5d0SMV-R_mfbvG3dJVqlH-Y.roa (hash: tkc15QCtNWavxhUnqZNNlUVnnK/d2SoDMZwxZ/0lGlk=)
2: m6LIV73xO4kHTsWdqgKGOHvaXtE.roa (hash: xs1n0jReKeqXr1lEDMiVoEWUuyrVXL8g65tDgZej+UA=)
3: sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl (hash: jy45vT6NXHUO9riHgxen3eUuXgti2yD/6wC6Ps1QL1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:53:d3:81:fc:a0:01:c1:da:5f:9d:1d:53:ef:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Mar 29 07:00:57 2026 GMT
Not After : Mar 30 07:00:57 2026 GMT
Subject: CN=8020b7693013ae5092dbf9f7f95e0bce4dc1156d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:62:7a:23:09:1a:22:db:fe:6a:2a:aa:64:87:
2e:8e:ed:75:3b:2c:d9:43:01:48:32:05:af:30:2f:
f5:03:33:98:b0:92:73:16:2a:13:5d:f9:2a:f9:c3:
fe:1a:57:97:8d:e9:82:31:2b:27:3e:e3:80:62:8a:
b5:84:cf:7b:d3:d4:ba:af:30:de:a2:46:ee:f8:50:
57:1f:30:44:db:db:b8:5d:0c:a7:7d:13:50:50:d2:
0a:8d:54:1e:c1:48:7a:7d:35:ba:b4:27:15:3c:0f:
6f:92:6d:f3:9a:4b:54:a9:24:8d:e5:6e:e9:68:6f:
e3:38:87:d6:36:36:4c:0a:7a:71:3d:85:75:b2:e2:
82:e0:16:50:8e:88:a9:f7:a6:95:34:60:c4:21:f8:
80:cc:1e:fe:43:ce:27:99:1d:8a:80:b7:a9:eb:58:
44:e0:33:ba:2d:8f:26:75:59:36:e8:a4:7e:43:19:
f8:76:94:9f:9e:21:e0:0b:d9:b1:b5:c3:cd:57:70:
00:1a:d9:64:52:80:ba:e5:31:e0:40:21:4b:c9:7c:
7f:d6:fd:c0:34:d3:e6:a3:9c:a1:5c:6f:1f:2f:d1:
32:92:50:ab:3e:7e:3b:a6:4d:5c:04:ad:76:e5:a8:
92:41:92:b8:b6:2b:2b:56:ef:f0:0c:d4:d3:fe:c5:
8e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:20:B7:69:30:13:AE:50:92:DB:F9:F7:F9:5E:0B:CE:4D:C1:15:6D
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:95:34:c5:84:51:f8:6c:a5:14:b0:be:8b:e4:30:11:89:0b:
4f:0b:a9:d2:be:42:a4:51:e9:d5:c4:49:a8:61:8a:76:45:3e:
37:20:5a:65:36:07:22:40:c0:e1:a2:f7:78:b9:cf:e7:d1:75:
8b:8b:6c:d3:4c:69:64:8f:27:97:f3:4e:d8:95:81:c2:26:6f:
4c:d0:1f:a7:a8:57:5a:97:af:b9:5b:6e:2c:f8:e3:c6:25:44:
9b:e4:cf:ad:1f:4a:cf:1e:c9:57:ee:04:8c:be:9f:b5:5a:6d:
c9:d1:b6:90:6f:41:bc:0b:80:98:05:75:9c:7e:23:94:cc:5c:
02:8b:d4:30:3d:88:a2:a0:d5:c2:99:37:3c:7e:3a:a7:a0:5f:
ff:ec:87:c3:31:53:4b:54:ce:b5:7c:13:c5:69:61:cb:6a:b4:
45:e9:ca:4f:0f:40:e2:04:77:cf:74:e8:cc:0c:9e:0a:b2:a1:
37:de:4d:6e:53:ef:d7:19:ad:b1:37:bb:c6:83:09:6b:9b:3b:
4b:b4:1a:cb:3f:2c:e2:22:95:8c:8d:e5:d6:4c:4a:82:0a:97:
1d:2a:da:37:c6:67:e0:cc:18:24:19:7f:e3:f4:1a:4e:b3:2c:
30:34:a6:fb:0c:70:df:ac:51:e3:33:7a:64:b9:0d:e1:3f:27:
ee:27:61:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:37 2026 by rpki-client