Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
File: slpaQ70jhPiS0mXlWLRBHosjK1U.mft (raw, json)
Hash identifier: aHOQE1k5pWYlMKHUwiymhoO2fvXoabpJMWY7cS/+Iu0=
Subject key identifier: 4D:40:63:12:CF:9F:4D:4C:84:51:69:75:B3:83:26:F3:24:AB:DE:C1
Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
Certificate issuer: /CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Certificate serial: 019EC149698100F35EA85CFC2443A0F6E143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 14:01:14 +0000
Manifest this update: Sat 13 Jun 2026 14:01:14 +0000
Manifest next update: Sun 14 Jun 2026 14:01:14 +0000
Files and hashes: 1: 2MEGX0xXq-CS52TZ2rRO2bOlBks.roa (hash: /HvTwpT0Q11rSBUmASk+8crSrENE7H5BgnIrEvjimdw=)
2: slpaQ70jhPiS0mXlWLRBHosjK1U.crl (hash: +OLrFB8r1XPHTIv53F7eOaH13YDyY0px56PZAQzzq7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:69:81:00:f3:5e:a8:5c:fc:24:43:a0:f6:e1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Validity
Not Before: Jun 13 14:01:14 2026 GMT
Not After : Jun 14 14:01:14 2026 GMT
Subject: CN=4d406312cf9f4d4c84516975b38326f324abdec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:df:72:32:f2:0b:97:a9:65:6a:af:ec:62:5c:
15:62:05:4b:c5:c0:6e:e0:fe:4c:e9:e9:c1:f2:d6:
8d:6f:9c:08:10:bf:89:b7:5c:48:8e:70:aa:36:1e:
55:24:59:fd:42:74:d9:35:6d:12:d9:34:4f:8c:3a:
6f:d0:8a:9d:38:cc:c1:f1:7c:b1:5d:39:e0:09:41:
98:8f:09:98:aa:ba:2c:cd:ef:2a:23:97:b3:c2:b0:
8c:ce:d4:fc:48:73:3a:53:4a:92:c4:17:99:d2:9d:
67:a3:7d:3d:0b:96:ef:a1:f3:50:6c:a9:c3:86:ee:
ca:81:80:7e:f0:a4:2e:43:d3:44:a2:9e:2d:73:16:
f0:7b:f8:6c:64:0c:d4:19:95:ed:7b:95:90:3b:64:
44:d6:87:9e:b4:a9:02:89:f0:bc:0d:35:90:b6:46:
9a:d6:ee:07:e2:45:90:5d:39:df:fb:da:0b:4a:e3:
b5:99:19:4c:18:7c:7c:c2:66:24:56:3f:9f:a7:f0:
89:99:75:8e:ed:cb:a6:c8:fd:c8:f7:76:d3:9d:1a:
a8:5f:0b:16:30:06:5f:f5:02:37:9d:20:2b:3d:b4:
a4:db:ff:55:ee:81:34:62:2d:45:30:6a:73:a4:51:
07:e2:89:97:ee:2e:cf:71:0f:38:f9:df:c8:03:1b:
e4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:40:63:12:CF:9F:4D:4C:84:51:69:75:B3:83:26:F3:24:AB:DE:C1
X509v3 Authority Key Identifier:
keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e1:a2:56:90:68:f8:c5:1e:f5:7b:37:24:59:06:d3:13:a7:
a6:2a:8f:ef:e2:cf:93:80:91:a8:00:0a:40:ce:ea:56:f1:93:
4b:6d:f4:ac:94:4a:bd:6b:79:ab:d8:43:d0:43:8b:44:9a:4d:
6d:e3:e6:6f:dd:57:95:7a:e7:38:17:6d:0e:24:33:fb:c7:d4:
de:bf:59:17:b5:00:7d:2e:1d:02:6e:2b:b6:02:86:ff:65:bf:
5a:0c:4e:0c:28:e7:1a:f0:5b:2e:dc:e4:21:fb:27:b3:25:1c:
8f:68:c6:6a:83:5f:4f:b0:52:d3:c9:cf:e8:65:17:36:8d:13:
7a:a6:ac:1a:b4:51:52:e8:33:8b:38:00:90:e9:b9:cc:8d:c6:
a3:69:e4:0d:ce:10:89:54:d6:38:63:96:fc:3c:76:b3:ea:98:
41:b2:54:39:6c:fc:d0:9f:48:b6:17:e6:52:7f:31:19:ea:ec:
ce:5c:fe:f7:66:e6:39:d5:a8:f1:65:a5:ec:c7:e2:d3:08:89:
ec:ea:71:e1:79:fb:a1:37:21:5f:33:89:8c:12:15:06:74:1e:
f1:34:51:da:18:e4:cf:20:3b:54:a3:a2:94:9c:4f:70:db:a6:
d8:82:5c:6f:64:48:fd:dd:38:76:8e:7d:14:6b:62:e8:28:dc:
1e:82:35:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:22:55 2026 by rpki-client