Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
File: slpaQ70jhPiS0mXlWLRBHosjK1U.mft (raw, json)
Hash identifier: 10s6KafZpw2qR1l/vcaQD667e8llpcmIibblxKmG0vE=
Subject key identifier: 28:2E:EA:60:A2:BC:3A:14:E0:8A:32:85:CB:70:78:6B:BC:95:D2:06
Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
Certificate issuer: /CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Certificate serial: 019D99D0077ADA446838087824F4DF8DA248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:00:40 +0000
Manifest this update: Fri 17 Apr 2026 05:00:40 +0000
Manifest next update: Sat 18 Apr 2026 05:00:40 +0000
Files and hashes: 1: 2MEGX0xXq-CS52TZ2rRO2bOlBks.roa (hash: /HvTwpT0Q11rSBUmASk+8crSrENE7H5BgnIrEvjimdw=)
2: slpaQ70jhPiS0mXlWLRBHosjK1U.crl (hash: cKC49Ii3v0t/4Gq322vgcvYhdvG4taWuYI2w3puBaI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:07:7a:da:44:68:38:08:78:24:f4:df:8d:a2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Validity
Not Before: Apr 17 05:00:40 2026 GMT
Not After : Apr 18 05:00:40 2026 GMT
Subject: CN=282eea60a2bc3a14e08a3285cb70786bbc95d206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0f:d5:68:4f:62:eb:22:be:18:3a:5d:63:15:
a5:e4:b1:b3:6c:3d:a1:f7:53:48:83:e3:08:20:bc:
1d:2d:30:3e:f6:e4:be:91:24:ce:d1:86:b2:c6:49:
7f:7b:15:2e:04:89:48:d7:2c:11:87:89:5d:dd:6c:
dd:a7:ab:a2:6f:f4:cd:27:8f:d2:1f:b5:29:db:c8:
c0:0b:82:ea:f6:dd:63:74:e4:8b:56:95:42:0c:8e:
52:52:c4:bc:e4:be:bd:4e:6c:4b:c4:54:10:f3:8f:
8e:ea:1e:86:df:5c:20:a1:e5:f8:6d:b6:b6:a4:6a:
2c:f3:8c:31:32:22:c9:95:7a:80:62:fa:18:cc:24:
55:6b:88:6c:b5:83:99:1b:7d:de:1c:f9:17:73:65:
79:bb:3d:7e:64:6e:2a:44:0d:00:07:24:ab:84:a9:
a3:85:96:63:be:0c:79:bd:74:42:a2:51:e9:25:76:
de:02:8c:b9:ea:d8:f5:f8:21:77:a4:69:ff:14:a3:
60:bf:10:47:78:0e:04:0b:07:92:9a:70:4d:1c:c7:
c9:d5:2d:2b:af:39:f7:61:ed:25:9b:1c:86:27:96:
8e:db:e1:0a:e3:6e:78:b4:a8:b7:29:38:ef:43:d8:
90:ee:1c:31:21:ae:0d:a9:42:65:ac:d5:dc:d8:a2:
6a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2E:EA:60:A2:BC:3A:14:E0:8A:32:85:CB:70:78:6B:BC:95:D2:06
X509v3 Authority Key Identifier:
keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c0:3d:ba:1e:ef:3b:83:79:c5:8c:65:9c:06:96:21:0a:e4:
ea:b6:9a:1c:85:cc:ee:5c:e8:ce:63:c0:a0:50:8b:34:f4:4e:
1b:b3:95:80:3f:00:fb:32:75:63:ad:d0:b1:c2:b6:3c:c6:bd:
87:2a:57:d9:19:75:78:ee:73:dc:65:cb:8e:43:26:1f:0e:61:
0f:fb:d6:29:15:f5:a7:d2:a6:2f:6d:99:bb:56:f0:cf:d6:b5:
48:ca:7e:e7:0e:f1:5f:70:06:85:40:c7:98:5a:d5:be:5c:09:
2f:61:af:9e:af:b5:4b:07:90:7a:e2:b4:26:3f:c3:fd:38:67:
a7:6c:a8:5d:87:df:68:6b:db:71:26:83:04:16:23:db:91:46:
85:26:01:3f:48:1e:9e:35:ee:fc:b6:45:d2:d1:9a:37:c4:d5:
e6:37:5c:f1:cf:00:a9:55:50:36:00:82:6b:38:3f:d3:75:ff:
0f:9e:63:2e:5b:b3:27:92:c8:0a:9f:27:c6:de:72:15:85:cf:
d5:7a:d0:ad:ff:b0:59:e9:24:bb:79:10:2a:ac:4d:b7:f5:6a:
73:c2:61:03:22:bb:ec:6b:3e:21:bb:a0:f8:fd:60:70:47:a2:
81:47:21:9a:4c:2b:f5:f3:d3:b7:8e:5c:fe:89:e7:87:0a:ce:
fd:1f:58:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0Ad62kRoOAh4JPTfjaJIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNWE1YTQzYmQyMzg0Zjg5MmQyNjVlNTU4YjQ0MTFlOGIy
MzJiNTUwHhcNMjYwNDE3MDUwMDQwWhcNMjYwNDE4MDUwMDQwWjAzMTEwLwYDVQQD
EygyODJlZWE2MGEyYmMzYTE0ZTA4YTMyODVjYjcwNzg2YmJjOTVkMjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg/VaE9i6yK+GDpdYxWl5LGzbD2h
91NIg+MIILwdLTA+9uS+kSTO0Yayxkl/exUuBIlI1ywRh4ld3Wzdp6uib/TNJ4/S
H7Up28jAC4Lq9t1jdOSLVpVCDI5SUsS85L69TmxLxFQQ84+O6h6G31wgoeX4bba2
pGos84wxMiLJlXqAYvoYzCRVa4hstYOZG33eHPkXc2V5uz1+ZG4qRA0ABySrhKmj
hZZjvgx5vXRColHpJXbeAoy56tj1+CF3pGn/FKNgvxBHeA4ECweSmnBNHMfJ1S0r
rzn3Ye0lmxyGJ5aO2+EK4254tKi3KTjvQ9iQ7hwxIa4NqUJlrNXc2KJqQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgu6mCivDoU4IoyhctweGu8ldIGMB8GA1UdIwQY
MBaAFLJaWkO9I4T4ktJl5Vi0QR6LIytVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS80ZGY5NjktNTdhNi00NWY3LTgwODIt
NWViZGU4YjhjZTFkLzEvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS80ZGY5NjktNTdhNi00NWY3LTgwODItNWViZGU4YjhjZTFk
LzEvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAssA9uh7v
O4N5xYxlnAaWIQrk6raaHIXM7lzozmPAoFCLNPROG7OVgD8A+zJ1Y63QscK2PMa9
hypX2Rl1eO5z3GXLjkMmHw5hD/vWKRX1p9KmL22Zu1bwz9a1SMp+5w7xX3AGhUDH
mFrVvlwJL2Gvnq+1SweQeuK0Jj/D/Thnp2yoXYffaGvbcSaDBBYj25FGhSYBP0ge
njXu/LZF0tGaN8TV5jdc8c8AqVVQNgCCazg/03X/D55jLluzJ5LICp8nxt5yFYXP
1XrQrf+wWekku3kQKqxNt/Vqc8JhAyK77Gs+Ibug+P1gcEeigUchmkwr9fPTt45c
/onnhwrO/R9YNQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:15:05 2026 by rpki-client