Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
File: sL0oE0WvbNVBVNTP908ZWjiP_8E.mft (raw, json)
Hash identifier: 5419+KOr3jC1FzqNtK4S6f7tZLbv/O7j5C0btG5XpHE=
Subject key identifier: 8E:29:BC:35:DD:4E:F8:B7:C1:06:B2:06:89:42:21:5A:E1:76:40:9A
Authority key identifier: B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1
Certificate issuer: /CN=b0bd281345af6cd54154d4cff74f195a388fffc1
Certificate serial: 01A0C557A78DB36CC772F6AF6BCD8AE6282A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 19:00:51 +0000
Manifest this update: Mon 21 Sep 2026 19:00:51 +0000
Manifest next update: Tue 22 Sep 2026 19:00:51 +0000
Files and hashes: 1: HKNvKNWPTS8CN6bgJcF5utIakEo.roa (hash: eSN9s7qGbERAlGNaTgQ/bC9Kz0HuoANi8MNnFyNF5ZA=)
2: sL0oE0WvbNVBVNTP908ZWjiP_8E.crl (hash: pN5gXT5Ouq/jqvTpAUOcmfQhTtQpjXV5avKctx6KYVo=)
3: wBI_NU2QpXV6NMet63ptsggHiP4.roa (hash: Cnsdq6Kk8yjq887iBv+JHpuDFWafcOA5VR5IEEIgGWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:a7:8d:b3:6c:c7:72:f6:af:6b:cd:8a:e6:28:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd281345af6cd54154d4cff74f195a388fffc1
Validity
Not Before: Sep 21 19:00:51 2026 GMT
Not After : Sep 22 19:00:51 2026 GMT
Subject: CN=8e29bc35dd4ef8b7c106b2068942215ae176409a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:10:49:4b:6d:fe:c9:65:ee:67:a6:a3:ae:c5:
05:f4:bb:4c:44:29:c1:20:33:1f:9e:9e:1c:d6:93:
25:c6:1d:7c:3e:0c:7e:ef:0d:30:ab:7c:ea:94:d5:
a9:fc:5a:0f:c1:7d:12:a5:21:9c:77:85:6a:c1:2c:
88:90:c1:7d:cd:16:02:4a:45:c8:68:cc:16:d1:55:
5c:4b:24:94:d6:42:38:c9:db:aa:72:76:76:35:3e:
02:a6:f4:af:5e:0b:78:aa:1e:4d:9f:a3:2f:f6:62:
ad:63:45:4b:cd:5d:d5:63:6a:a5:2b:87:b3:67:08:
30:ff:d2:fb:94:c0:a8:0c:38:d0:ec:f3:43:68:32:
db:bc:c9:82:96:db:55:bd:d9:2c:00:3c:0a:7f:0f:
3f:b9:dd:26:ce:60:b1:91:23:65:ea:88:f9:04:ec:
06:9b:dd:ef:22:2a:ce:09:c8:a3:2b:90:21:65:1b:
98:c6:7c:1b:4e:e6:ca:6c:bd:4b:b7:5f:02:65:e6:
71:a9:98:5a:07:c2:d1:63:5d:85:7a:36:cf:8f:d3:
07:9b:38:96:06:ba:20:25:9d:f0:4b:86:c4:ca:c7:
f8:80:fb:f1:b8:fa:2d:5e:9a:1f:83:f2:96:ee:b1:
07:07:18:3a:e2:94:8a:9f:ed:d6:a6:58:23:b5:6e:
1f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:29:BC:35:DD:4E:F8:B7:C1:06:B2:06:89:42:21:5A:E1:76:40:9A
X509v3 Authority Key Identifier:
keyid:B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:97:bf:17:9c:9a:62:25:6e:c9:c7:a5:0b:e5:11:17:0e:fe:
69:d9:d4:0d:44:63:5c:61:b1:21:36:07:8e:9f:04:57:92:3f:
06:ac:d9:49:b2:8c:3a:da:53:15:e4:b4:22:0f:05:13:96:72:
58:89:89:eb:c0:ef:7c:81:23:15:48:9d:be:95:14:38:60:7d:
53:0d:4e:d6:cb:ea:f0:0e:53:39:59:a1:1f:3e:3e:01:3b:50:
b8:5a:73:41:63:d9:cd:58:a8:4e:a3:a6:e6:46:86:3a:56:62:
2e:b2:09:ad:e8:0f:3e:01:31:43:c9:63:ec:e3:16:39:e6:08:
4a:7d:d5:47:b8:28:75:7a:cc:f1:4a:67:70:15:f6:93:dd:b7:
b3:17:6e:fb:51:7a:5b:49:e2:94:50:94:73:ad:db:f7:ce:0a:
85:9e:80:51:6b:35:e2:01:a8:b1:6e:a9:ba:d8:df:40:18:c6:
40:9d:63:c2:15:7d:6b:bd:b0:5d:1a:ce:d4:08:a7:bb:c7:98:
21:9b:55:d0:b0:cd:c0:e5:75:58:b7:29:ab:df:c4:36:a3:69:
bd:b2:ca:f6:6a:f6:47:73:38:e2:14:8b:0d:b3:6e:d9:49:73:
f5:d3:74:c8:39:44:42:48:53:51:59:37:01:e4:a6:03:cb:68:
42:8b:9c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:22:56 2026 by rpki-client