Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.mft
File: SlTv4Cq-cPyDIgbU6_mdck6LH1o.mft (raw, json)
Hash identifier: nWZh+ma9tuxplCn1tkqo1UsOjlKn/aHHVkUqgmOxtdo=
Subject key identifier: 40:FB:62:06:A0:ED:BC:BE:8E:B7:76:FA:49:06:7C:88:E0:ED:86:CF
Authority key identifier: 4A:54:EF:E0:2A:BE:70:FC:83:22:06:D4:EB:F9:9D:72:4E:8B:1F:5A
Certificate issuer: /CN=4a54efe02abe70fc832206d4ebf99d724e8b1f5a
Certificate serial: 019DA52FC30383D3207CD633A11D391AE7CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SlTv4Cq-cPyDIgbU6_mdck6LH1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.mft
Manifest number: 67
Signing time: Sun 19 Apr 2026 10:01:03 +0000
Manifest this update: Sun 19 Apr 2026 10:01:03 +0000
Manifest next update: Mon 20 Apr 2026 10:01:03 +0000
Files and hashes: 1: SlTv4Cq-cPyDIgbU6_mdck6LH1o.crl (hash: 6xIi7QdPVrq8rw5uIhYrPie8Poguyur1nSY0AOuGYfg=)
2: XqMaYvhCHSlYHuAgcBJ3D1XcKOw.roa (hash: sJ5W26p1BLswbXARJ6bN/ijwMZCfu7E6N/+XnCa8Kg8=)
3: mSLcPcPlbCaKloucUE197Adzr1c.roa (hash: gW1hk3WhDt/+PalHQ3CRB51/zaP5eafiQ6SCna2I/+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/SlTv4Cq-cPyDIgbU6_mdck6LH1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:c3:03:83:d3:20:7c:d6:33:a1:1d:39:1a:e7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a54efe02abe70fc832206d4ebf99d724e8b1f5a
Validity
Not Before: Apr 19 10:01:03 2026 GMT
Not After : Apr 20 10:01:03 2026 GMT
Subject: CN=40fb6206a0edbcbe8eb776fa49067c88e0ed86cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:fa:e1:f4:3a:5a:76:a4:4c:4c:c3:01:3c:
08:e5:ba:40:c8:9b:02:a6:29:be:25:47:3a:f5:8e:
02:77:bc:d6:08:65:fc:f8:3f:90:d0:c4:e6:5a:f2:
07:40:40:01:9f:03:27:2b:86:a9:69:d5:be:1a:e1:
77:fb:5f:63:ef:fa:6e:37:c4:a1:04:d4:8d:4a:b9:
54:d2:58:19:49:56:1f:35:59:04:2a:93:a4:15:1d:
e4:b7:f2:71:6d:97:18:f8:14:61:5f:ce:28:58:6d:
6d:64:23:e2:81:49:ac:da:00:01:ee:6a:41:89:71:
e0:c3:79:2b:ca:72:9b:42:1b:e0:b4:9d:41:e0:c0:
dc:8d:42:7f:77:39:19:5b:b2:ee:3f:a5:2a:ef:71:
e6:b1:a6:e3:ff:6b:12:b0:e3:d5:78:88:68:12:08:
2c:e6:25:63:be:27:46:33:ac:39:74:e1:b6:65:c0:
74:3f:b9:d8:e5:cf:93:e7:23:95:5e:4e:18:83:7b:
19:9e:54:a9:7d:16:1d:62:70:56:fd:28:45:07:78:
2d:86:29:ce:dd:3e:54:2c:8b:a9:90:89:da:22:4d:
ef:8f:c1:ea:c2:e9:e0:f5:62:16:c3:3c:5e:11:ce:
b6:0a:87:1c:d1:da:05:b9:a5:e2:e4:53:3e:26:a8:
db:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FB:62:06:A0:ED:BC:BE:8E:B7:76:FA:49:06:7C:88:E0:ED:86:CF
X509v3 Authority Key Identifier:
keyid:4A:54:EF:E0:2A:BE:70:FC:83:22:06:D4:EB:F9:9D:72:4E:8B:1F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlTv4Cq-cPyDIgbU6_mdck6LH1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ae:e5:c9:e4:1b:e8:56:5e:72:b3:f0:02:12:38:82:c6:34:
bb:79:5d:93:55:cb:79:3b:68:9a:07:17:7c:87:cf:87:bc:ad:
f7:a2:8a:b3:aa:70:18:fc:9a:63:02:41:5e:aa:d7:b7:59:76:
03:5d:f9:5f:67:e4:57:c5:89:2b:f9:95:87:62:9d:d7:bd:96:
de:b5:55:33:bd:5e:c9:d6:e2:62:aa:f3:b0:b4:15:48:ae:3b:
5f:6f:2d:02:1e:83:1e:a8:56:32:ed:12:d3:47:72:43:ee:95:
36:b2:12:21:d0:2e:72:8a:7b:f2:f8:42:dc:c6:65:23:08:86:
e3:32:2d:4c:b0:be:c9:da:be:07:dd:db:fd:78:38:92:52:04:
1a:42:c5:68:d6:71:4f:41:5f:c4:fa:1a:e8:2a:74:88:90:00:
d3:ed:89:bf:89:d3:c6:b3:2e:42:08:8d:eb:2b:43:6f:f3:ac:
31:ec:63:50:0e:94:9d:2e:20:72:9f:a6:3e:26:92:f7:b0:e9:
83:05:a5:7e:35:63:55:4f:08:9d:44:61:bf:15:2f:ea:cf:ea:
48:7d:25:61:fb:9d:99:72:62:3b:59:12:ad:fc:34:ab:eb:1a:
3b:a3:d0:e8:c9:5a:fd:74:3f:fc:b3:3a:fa:25:4d:ad:23:4d:
39:a4:b5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:26:55 2026 by rpki-client