Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
File: slpaQ70jhPiS0mXlWLRBHosjK1U.mft (raw, json)
Hash identifier: kNCT3fbWw4I8M6lkgGt4FxDdXUnwkodP6edM1rZcTg0=
Subject key identifier: 21:4E:81:2F:16:D5:36:80:E7:23:EE:A8:0E:E4:35:7C:68:AA:6D:DF
Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
Certificate issuer: /CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Certificate serial: 019CAA592F36D9C3ACEDB7F1695A99FA8944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 17:01:37 +0000
Manifest this update: Sun 01 Mar 2026 17:01:37 +0000
Manifest next update: Mon 02 Mar 2026 17:01:37 +0000
Files and hashes: 1: 2MEGX0xXq-CS52TZ2rRO2bOlBks.roa (hash: /HvTwpT0Q11rSBUmASk+8crSrENE7H5BgnIrEvjimdw=)
2: slpaQ70jhPiS0mXlWLRBHosjK1U.crl (hash: eRHzyNNKmMbOZ92GTZjxM8gaW1q8XPszdib7QeRFPIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:2f:36:d9:c3:ac:ed:b7:f1:69:5a:99:fa:89:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Validity
Not Before: Mar 1 17:01:37 2026 GMT
Not After : Mar 2 17:01:37 2026 GMT
Subject: CN=214e812f16d53680e723eea80ee4357c68aa6ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:dc:a6:7c:9a:49:64:00:4a:9f:7f:26:91:
46:f6:73:9e:80:69:ca:36:c6:f9:45:23:20:50:91:
b1:ca:b9:59:e6:dd:ef:52:95:44:e1:bb:ee:ca:1b:
79:c2:00:66:7a:e9:2d:f0:99:b0:40:7f:6f:66:c1:
0e:40:60:2b:36:2a:6d:59:4b:7b:4e:5b:16:02:ee:
de:81:55:6d:33:32:2b:81:94:fd:98:29:7d:88:82:
16:75:97:de:99:65:d2:80:14:49:f7:11:76:fe:4e:
a4:98:4e:db:8d:2b:a1:ac:d0:be:c7:86:fd:ac:8b:
03:5b:1b:31:a1:c1:2f:94:37:fc:78:2d:6d:9a:20:
26:54:98:d8:20:e0:ca:df:f1:88:1e:3d:d0:19:c0:
23:69:60:0a:07:82:c8:31:f6:58:fb:35:72:b6:d2:
22:aa:02:1c:a4:b4:74:49:bf:05:32:ba:fd:75:0a:
37:65:87:02:75:9b:ef:90:3c:a5:b6:f3:a6:46:ef:
f8:dd:17:10:b0:9a:60:9f:27:2c:96:6a:2e:9f:3a:
08:d6:15:4e:13:55:9a:4d:8b:51:31:fc:58:4f:1e:
99:82:ec:86:77:df:50:56:61:3c:6d:fe:ca:f1:13:
f4:6e:16:6b:40:6c:75:f7:e1:4c:d4:35:e4:72:bf:
ea:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4E:81:2F:16:D5:36:80:E7:23:EE:A8:0E:E4:35:7C:68:AA:6D:DF
X509v3 Authority Key Identifier:
keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2d:16:ac:50:3c:e4:a6:9c:51:ac:61:ff:42:e0:57:53:8c:
25:74:8d:a6:ab:87:03:c0:fe:f1:f2:45:1f:50:e1:91:f2:a0:
14:86:32:35:ab:86:6d:a1:92:f8:5f:9d:c5:7d:d1:ef:99:cb:
16:b9:f3:66:82:f8:38:1c:3f:3b:ac:09:d1:f5:00:08:0b:82:
cd:e4:ee:d1:df:c0:8a:eb:0d:05:e4:05:03:68:01:79:fc:ea:
e1:62:a7:5c:35:48:68:02:12:8e:6b:67:d8:8e:db:56:95:1c:
01:9b:da:0d:3b:65:77:46:2a:69:dd:3c:44:2f:b3:71:c7:51:
86:a2:11:6a:f4:25:16:ed:4b:da:45:a7:53:ba:e9:60:94:d5:
70:98:fe:40:78:ee:d7:cd:a6:04:c5:b9:1c:31:ef:74:d8:11:
0f:fb:82:82:36:65:a6:5d:8e:42:36:6e:b5:9c:5f:55:76:f8:
3b:cb:aa:be:46:ef:26:af:cb:a4:d3:f3:7f:b6:d7:57:a9:91:
01:c9:6d:76:12:0b:0a:4b:19:ed:12:4f:14:4b:69:71:cc:4d:
39:e6:ba:9d:2b:8c:be:1d:68:02:09:ab:04:0f:29:82:32:d0:
f3:fe:19:7b:ee:79:d2:fb:06:8c:cc:1d:d4:f4:63:20:1e:43:
7c:ac:d3:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWS822cOs7bfxaVqZ+olEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNWE1YTQzYmQyMzg0Zjg5MmQyNjVlNTU4YjQ0MTFlOGIy
MzJiNTUwHhcNMjYwMzAxMTcwMTM3WhcNMjYwMzAyMTcwMTM3WjAzMTEwLwYDVQQD
EygyMTRlODEyZjE2ZDUzNjgwZTcyM2VlYTgwZWU0MzU3YzY4YWE2ZGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb7cpnyaSWQASp9/JpFG9nOegGnK
Nsb5RSMgUJGxyrlZ5t3vUpVE4bvuyht5wgBmeukt8JmwQH9vZsEOQGArNiptWUt7
TlsWAu7egVVtMzIrgZT9mCl9iIIWdZfemWXSgBRJ9xF2/k6kmE7bjSuhrNC+x4b9
rIsDWxsxocEvlDf8eC1tmiAmVJjYIODK3/GIHj3QGcAjaWAKB4LIMfZY+zVyttIi
qgIcpLR0Sb8FMrr9dQo3ZYcCdZvvkDyltvOmRu/43RcQsJpgnycslmounzoI1hVO
E1WaTYtRMfxYTx6ZguyGd99QVmE8bf7K8RP0bhZrQGx19+FM1DXkcr/qHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFOgS8W1TaA5yPuqA7kNXxoqm3fMB8GA1UdIwQY
MBaAFLJaWkO9I4T4ktJl5Vi0QR6LIytVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS80ZGY5NjktNTdhNi00NWY3LTgwODIt
NWViZGU4YjhjZTFkLzEvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS80ZGY5NjktNTdhNi00NWY3LTgwODItNWViZGU4YjhjZTFk
LzEvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADi0WrFA8
5KacUaxh/0LgV1OMJXSNpquHA8D+8fJFH1DhkfKgFIYyNauGbaGS+F+dxX3R75nL
FrnzZoL4OBw/O6wJ0fUACAuCzeTu0d/AiusNBeQFA2gBefzq4WKnXDVIaAISjmtn
2I7bVpUcAZvaDTtld0Yqad08RC+zccdRhqIRavQlFu1L2kWnU7rpYJTVcJj+QHju
182mBMW5HDHvdNgRD/uCgjZlpl2OQjZutZxfVXb4O8uqvkbvJq/LpNPzf7bXV6mR
AcltdhILCksZ7RJPFEtpccxNOea6nSuMvh1oAgmrBA8pgjLQ8/4Ze+550vsGjMwd
1PRjIB5DfKzTKg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:28:51 2026 by rpki-client