Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
File: sL0oE0WvbNVBVNTP908ZWjiP_8E.mft (raw, json)
Hash identifier: hGb2shStNGKo8qwj8P6W8cLs23K6r8meUmTBFuGWDY8=
Subject key identifier: 64:E7:D7:24:BE:CC:3E:FE:E9:BC:78:01:33:6E:C3:35:DB:70:7D:4A
Authority key identifier: B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1
Certificate issuer: /CN=b0bd281345af6cd54154d4cff74f195a388fffc1
Certificate serial: 019CABD96BEB0BFF82A3678D13749B3C099A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:01:18 +0000
Manifest this update: Mon 02 Mar 2026 00:01:18 +0000
Manifest next update: Tue 03 Mar 2026 00:01:18 +0000
Files and hashes: 1: HKNvKNWPTS8CN6bgJcF5utIakEo.roa (hash: eSN9s7qGbERAlGNaTgQ/bC9Kz0HuoANi8MNnFyNF5ZA=)
2: sL0oE0WvbNVBVNTP908ZWjiP_8E.crl (hash: 9rcs3ijQWiGIVKBeplaXWG+zM4fv90UuDpK/VOGo8vQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:6b:eb:0b:ff:82:a3:67:8d:13:74:9b:3c:09:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd281345af6cd54154d4cff74f195a388fffc1
Validity
Not Before: Mar 2 00:01:18 2026 GMT
Not After : Mar 3 00:01:18 2026 GMT
Subject: CN=64e7d724becc3efee9bc7801336ec335db707d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e4:5e:b9:6b:59:9b:55:2b:c4:f0:34:c2:46:
0a:68:ba:89:78:ef:ff:fd:8b:1f:97:39:97:6b:77:
e3:89:b6:f1:a2:f6:e2:91:3f:9e:c2:68:18:e8:0f:
5c:e9:76:dc:14:88:d5:ad:59:e9:f1:be:c0:75:bf:
36:ee:95:dd:5b:59:8e:bd:ac:0c:ec:f0:ed:66:22:
74:9e:8c:2a:a6:d4:65:c2:e9:34:7e:b0:40:0a:9d:
04:3e:7b:62:7b:14:cf:dd:d6:19:85:20:41:7f:00:
bd:a4:21:4a:27:70:96:c3:56:e5:8a:e0:9b:bc:db:
80:95:8b:9b:f4:91:94:d7:63:0a:0d:0a:21:b9:c5:
9a:35:2e:48:15:2e:78:2d:0a:f7:9c:57:88:6a:c2:
91:f6:f5:f0:72:f9:7a:40:e0:d9:a8:23:27:bc:a7:
b8:b5:28:a3:d6:2c:9c:68:66:2b:88:86:a2:29:28:
00:3d:d4:f4:db:ab:78:e1:93:12:39:14:21:12:94:
b2:41:4f:64:c4:c2:e8:2d:a8:f9:0f:88:31:10:8d:
42:9c:07:7a:59:3f:c9:5b:f5:77:94:e7:03:72:79:
b8:60:69:6a:49:14:e2:39:d3:7d:f0:10:ef:eb:6b:
c4:88:3f:d9:a6:9d:9a:30:45:87:58:c4:2e:15:46:
e2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E7:D7:24:BE:CC:3E:FE:E9:BC:78:01:33:6E:C3:35:DB:70:7D:4A
X509v3 Authority Key Identifier:
keyid:B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:cf:1e:37:b4:71:ee:77:f4:8d:ba:f7:14:5f:dd:71:43:2e:
fb:9b:82:f8:1e:73:d3:32:4e:31:19:6d:89:40:28:95:64:15:
f6:ac:35:50:5e:8c:04:99:b5:db:a9:5c:df:1b:93:9e:58:b0:
4c:e0:df:67:84:00:7b:72:f0:e2:fe:13:6f:c5:de:c4:9c:99:
fd:90:a6:73:e2:c8:88:ae:88:e2:67:8d:a1:25:26:57:3f:10:
0c:43:d8:96:fd:e3:eb:21:de:22:ce:92:19:4e:ed:64:55:7f:
fd:ca:78:f5:df:c7:14:62:c9:0c:5e:29:9f:f2:3d:65:6d:39:
cf:19:c5:41:ab:58:75:fe:2d:72:ca:90:be:05:d4:d2:f3:22:
40:bd:d9:41:03:d0:37:f1:27:69:15:62:93:82:02:8b:c7:f4:
29:d3:14:21:81:05:73:86:7d:7c:a6:14:73:95:09:a5:ec:ee:
2f:e7:41:ff:43:70:88:06:04:66:62:dc:f8:a2:34:35:9b:1c:
78:82:72:42:e7:dd:86:1d:f3:c4:c2:8b:25:2d:c6:4d:b8:c3:
05:97:f2:55:a6:ab:81:a7:0a:6c:70:64:d5:5f:c4:2d:11:09:
f2:3f:d8:07:6f:25:db:90:7e:35:10:60:05:ec:55:f1:ce:ec:
7c:7d:79:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2WvrC/+Co2eNE3SbPAmaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYmQyODEzNDVhZjZjZDU0MTU0ZDRjZmY3NGYxOTVhMzg4
ZmZmYzEwHhcNMjYwMzAyMDAwMTE4WhcNMjYwMzAzMDAwMTE4WjAzMTEwLwYDVQQD
Eyg2NGU3ZDcyNGJlY2MzZWZlZTliYzc4MDEzMzZlYzMzNWRiNzA3ZDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuReuWtZm1UrxPA0wkYKaLqJeO//
/YsflzmXa3fjibbxovbikT+ewmgY6A9c6XbcFIjVrVnp8b7Adb827pXdW1mOvawM
7PDtZiJ0nowqptRlwuk0frBACp0EPntiexTP3dYZhSBBfwC9pCFKJ3CWw1bliuCb
vNuAlYub9JGU12MKDQohucWaNS5IFS54LQr3nFeIasKR9vXwcvl6QODZqCMnvKe4
tSij1iycaGYriIaiKSgAPdT026t44ZMSORQhEpSyQU9kxMLoLaj5D4gxEI1CnAd6
WT/JW/V3lOcDcnm4YGlqSRTiOdN98BDv62vEiD/Zpp2aMEWHWMQuFUbiKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTn1yS+zD7+6bx4ATNuwzXbcH1KMB8GA1UdIwQY
MBaAFLC9KBNFr2zVQVTUz/dPGVo4j//BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0wwb0UwV3ZiTlZCVk5UUDkwOFpXamlQXzhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mNWZkZWItM2ExNC00YTllLTg4MTUt
ZTU2YjY5MGZkMzBlLzEvc0wwb0UwV3ZiTlZCVk5UUDkwOFpXamlQXzhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9mNWZkZWItM2ExNC00YTllLTg4MTUtZTU2YjY5MGZkMzBl
LzEvc0wwb0UwV3ZiTlZCVk5UUDkwOFpXamlQXzhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAM8eN7Rx
7nf0jbr3FF/dcUMu+5uC+B5z0zJOMRltiUAolWQV9qw1UF6MBJm126lc3xuTnliw
TODfZ4QAe3Lw4v4Tb8XexJyZ/ZCmc+LIiK6I4meNoSUmVz8QDEPYlv3j6yHeIs6S
GU7tZFV//cp49d/HFGLJDF4pn/I9ZW05zxnFQatYdf4tcsqQvgXU0vMiQL3ZQQPQ
N/EnaRVik4ICi8f0KdMUIYEFc4Z9fKYUc5UJpezuL+dB/0NwiAYEZmLc+KI0NZsc
eIJyQufdhh3zxMKLJS3GTbjDBZfyVaargacKbHBk1V/ELREJ8j/YB28l25B+NRBg
BexV8c7sfH15oA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:34:19 2026 by rpki-client