Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
File: sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft (raw, json)
Hash identifier: PsbbPAoe+Uo9jU5+r8ECuprTeZ7Qp1psMN89cHMM5yc=
Subject key identifier: 68:9F:99:EF:32:B1:E1:C2:0E:E2:02:0A:9F:1B:91:1B:3F:DE:E0:D7
Authority key identifier: B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
Certificate issuer: /CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Certificate serial: 01A1220AC631C7386883D73657FD7B9CBCA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
Manifest number: 1A95
Signing time: Fri 09 Oct 2026 19:01:33 +0000
Manifest this update: Fri 09 Oct 2026 19:01:33 +0000
Manifest next update: Sat 10 Oct 2026 19:01:33 +0000
Files and hashes: 1: Q-FFM01cbkfw_d8UfrmIQr3mDSE.roa (hash: SPQggi+U+SwusUS7292cc4kZDqdLk+Y6Fxy1n2N8dxo=)
2: sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl (hash: OHZXd6VMpk3JEuYk6CYiGA+r4pIZpdtsPQ27bxXShoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:0a:c6:31:c7:38:68:83:d7:36:57:fd:7b:9c:bc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Validity
Not Before: Oct 9 19:01:33 2026 GMT
Not After : Oct 10 19:01:33 2026 GMT
Subject: CN=689f99ef32b1e1c20ee2020a9f1b911b3fdee0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ef:e3:62:82:28:fa:68:c9:f2:4a:ce:2b:04:
0a:2a:80:c8:c9:18:ae:7b:99:37:9b:9e:1a:d7:6c:
77:65:0a:37:0e:51:2b:d3:3b:57:f2:f8:c5:70:a4:
08:74:19:2f:60:35:4c:16:3e:5a:30:01:b1:bb:52:
00:86:a9:75:dc:af:a7:06:82:a6:87:0c:48:b4:a0:
3a:c5:6e:46:ce:86:bb:65:5d:fc:00:2c:c2:b7:1e:
e2:23:0a:34:69:50:b0:e8:ae:24:c8:c8:62:77:5f:
2d:b2:d0:b7:64:09:53:0a:d3:7b:b8:58:ca:e9:04:
e4:bb:d4:97:5a:1f:d2:16:65:c5:9b:a7:12:12:9d:
33:3c:6a:17:78:52:8f:ba:b8:9e:a1:40:fe:3d:ef:
46:4b:08:80:32:15:e2:c8:71:6c:e9:64:f4:64:4a:
78:a5:f3:c0:ed:cf:5f:ec:85:95:49:43:0b:9a:47:
14:1a:ec:15:0e:14:2a:da:94:e8:ee:0d:0e:28:16:
cb:e7:0f:8f:06:05:2a:fe:1f:65:93:d1:9f:b0:f7:
d3:6c:a0:36:cf:8a:82:54:8f:89:66:e3:89:33:60:
6c:ad:55:73:d9:ef:6f:ee:23:fe:be:9e:58:41:4b:
6a:79:62:52:39:f4:47:b0:19:84:5b:cc:1b:0c:18:
18:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9F:99:EF:32:B1:E1:C2:0E:E2:02:0A:9F:1B:91:1B:3F:DE:E0:D7
X509v3 Authority Key Identifier:
keyid:B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4b:a0:63:75:d6:27:96:cf:c7:38:ca:51:34:99:03:00:d3:
72:60:e9:83:ca:07:b1:d4:94:92:d0:9c:ce:97:00:0f:af:9e:
3a:f2:51:44:ce:e6:6c:d5:2c:1f:da:3a:4e:87:2b:00:30:d9:
ea:a2:4c:6b:55:ea:7d:a1:5a:45:cf:01:b5:cc:07:78:87:3e:
9e:b4:4e:15:29:3b:15:3e:9a:68:5d:95:f5:be:27:e0:4c:f0:
92:de:89:46:36:aa:a2:7d:4f:18:3f:da:72:01:c2:d5:e3:f8:
a4:58:9a:b3:72:ab:dc:8f:1e:3e:ca:48:30:d6:c1:12:c8:cd:
c4:b5:9a:b2:2b:5a:af:1c:3c:08:0f:d8:35:52:bd:fe:ba:15:
7c:05:6e:ad:96:1f:67:19:8a:12:70:af:a6:f0:e7:52:f0:02:
ea:64:ec:19:59:58:29:90:05:a5:b1:67:7d:4c:e5:32:b9:61:
b4:36:65:b8:1a:66:e2:bb:47:53:37:c0:59:17:ef:9b:29:2c:
98:31:d0:04:d2:b1:e5:3a:7b:50:b6:87:1c:b7:a4:cb:76:4c:
bb:36:cb:99:bd:d4:c1:09:c0:44:3c:09:68:09:67:11:4e:31:
de:df:05:a9:1a:b4:f4:ea:49:33:87:48:2c:1d:21:62:34:ab:
15:75:e0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:44:28 2026 by rpki-client