Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
File: SDletMDuLapTks2Z_EXvvEp1TpA.mft (raw, json)
Hash identifier: aoC30mFbu+VOijNYLp3EbOltvRDsS1LWNsQqE+1IYZ4=
Subject key identifier: C1:1D:81:58:EC:C2:23:37:62:98:E4:F9:08:0C:49:84:B8:1F:04:E0
Authority key identifier: 48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
Certificate issuer: /CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Certificate serial: 01A1201CA5253B11206B04D27CFF3D4550F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
Manifest number: 1A9C
Signing time: Fri 09 Oct 2026 10:01:50 +0000
Manifest this update: Fri 09 Oct 2026 10:01:50 +0000
Manifest next update: Sat 10 Oct 2026 10:01:50 +0000
Files and hashes: 1: SDletMDuLapTks2Z_EXvvEp1TpA.crl (hash: 0+nDRYBR2TTIymA/GwntY5GBX4cECOxC7aEs/5OrzqQ=)
2: ZC-eqVWmQyn8Ex7WQIhy7hzoaVk.roa (hash: ybFrRdgkZD5E+Ah31fjps8/gl91qfmlbI01osf1paVw=)
3: oYj8IRsjMXERXaM9fv_aTVNDMiM.roa (hash: 1h5HkPjPP0vcntiwcGgkqpVFeA7WFjBNEknGQLJcQbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:1c:a5:25:3b:11:20:6b:04:d2:7c:ff:3d:45:50:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Validity
Not Before: Oct 9 10:01:50 2026 GMT
Not After : Oct 10 10:01:50 2026 GMT
Subject: CN=c11d8158ecc223376298e4f9080c4984b81f04e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:98:25:cc:98:8c:80:c7:15:8a:a7:24:27:
ea:8e:4c:99:97:06:90:38:64:9a:e6:3a:e2:36:be:
04:8c:26:84:59:80:35:9a:25:ac:3b:a0:8f:91:e0:
30:4f:30:0d:4f:ff:4b:49:8d:10:1a:fc:ae:22:9b:
48:f4:16:f9:99:59:a8:63:43:a1:28:d6:68:6e:96:
d5:31:9d:39:f8:6e:18:38:49:c1:96:be:74:84:95:
85:96:50:23:82:5e:0e:03:09:7e:db:45:a5:36:bc:
d4:f5:0c:b0:d2:66:a2:32:68:bb:c4:cc:d1:77:60:
00:28:81:15:9f:a6:fa:af:d0:20:e7:98:09:04:6f:
2e:d7:f4:77:bc:c9:c0:dd:fb:68:68:84:c4:4a:e9:
91:33:b1:7a:15:63:67:56:1e:35:a9:cc:ce:ef:d3:
b6:54:3d:5b:f9:3a:53:e5:b8:0e:ad:21:69:b8:2e:
60:f8:6c:16:18:33:ce:b1:ab:5c:89:2e:6f:61:2f:
f2:eb:0f:41:8f:bd:8d:26:06:e2:31:ce:67:15:01:
5c:f6:54:dc:26:b1:e9:2a:61:b4:53:e7:ff:06:84:
18:44:c3:a9:80:55:67:56:7d:84:f0:78:4a:f1:a1:
b4:91:bb:f3:67:47:16:13:88:71:8d:bf:16:db:bb:
72:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1D:81:58:EC:C2:23:37:62:98:E4:F9:08:0C:49:84:B8:1F:04:E0
X509v3 Authority Key Identifier:
keyid:48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8a:d1:e5:2b:2b:d2:18:74:41:32:8c:12:f8:64:08:89:75:
92:95:fa:88:a7:fa:48:b8:af:19:cc:38:99:07:4f:cd:0c:62:
89:79:51:23:f9:14:f0:b9:c1:c6:05:3d:ba:f5:1a:6a:43:a5:
bc:3d:82:1c:78:bd:cc:01:87:37:84:31:75:41:9e:d5:3f:86:
5c:22:38:31:e3:7e:96:88:2d:f9:01:71:d7:29:af:0f:14:c5:
b0:ea:81:22:14:84:35:27:fb:14:f4:86:e6:63:89:f1:77:73:
64:fd:7e:6e:07:a0:5a:f9:d6:47:26:f7:b4:56:81:6d:5e:e1:
0f:1c:23:f3:a2:8f:92:8e:bc:44:f2:3c:d4:46:81:8b:8a:9d:
a7:9f:07:0b:1c:87:6b:58:a0:7e:d3:2a:77:05:4e:5d:1d:00:
7b:ee:cc:5d:45:57:5c:3d:2c:1c:0f:4c:08:71:e8:60:dc:90:
83:07:cd:31:f8:1d:be:ee:b9:3a:fa:80:da:90:3f:76:46:67:
4c:fc:5d:06:09:91:53:e6:cc:6c:3b:a9:3f:a7:34:fc:18:3c:
b0:66:c8:ff:ca:03:a7:ef:79:32:23:7a:42:97:cc:29:cc:ba:
7a:6b:2b:28:c2:6d:7a:d1:e9:0d:07:f2:d8:5d:39:eb:ea:88:
c7:cd:a7:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEgHKUlOxEgawTSfP89RVD1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4Mzk1ZWI0YzBlZTJkYWE1MzkyY2Q5OWZjNDVlZmJjNGE3
NTRlOTAwHhcNMjYxMDA5MTAwMTUwWhcNMjYxMDEwMTAwMTUwWjAzMTEwLwYDVQQD
EyhjMTFkODE1OGVjYzIyMzM3NjI5OGU0ZjkwODBjNDk4NGI4MWYwNGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn6YJcyYjIDHFYqnJCfqjkyZlwaQ
OGSa5jriNr4EjCaEWYA1miWsO6CPkeAwTzANT/9LSY0QGvyuIptI9Bb5mVmoY0Oh
KNZobpbVMZ05+G4YOEnBlr50hJWFllAjgl4OAwl+20WlNrzU9Qyw0maiMmi7xMzR
d2AAKIEVn6b6r9Ag55gJBG8u1/R3vMnA3ftoaITESumRM7F6FWNnVh41qczO79O2
VD1b+TpT5bgOrSFpuC5g+GwWGDPOsatciS5vYS/y6w9Bj72NJgbiMc5nFQFc9lTc
JrHpKmG0U+f/BoQYRMOpgFVnVn2E8HhK8aG0kbvzZ0cWE4hxjb8W27ty1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEdgVjswiM3Ypjk+QgMSYS4HwTgMB8GA1UdIwQY
MBaAFEg5XrTA7i2qU5LNmfxF77xKdU6QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0RsZXRNRHVMYXBUa3MyWl9FWHZ2RXAxVHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83YTk5NjEtMjEzZS00Y2M0LThmOTYt
N2Y1NzliYTA5OGJlLzEvU0RsZXRNRHVMYXBUa3MyWl9FWHZ2RXAxVHBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83YTk5NjEtMjEzZS00Y2M0LThmOTYtN2Y1NzliYTA5OGJl
LzEvU0RsZXRNRHVMYXBUa3MyWl9FWHZ2RXAxVHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4rR5Ssr
0hh0QTKMEvhkCIl1kpX6iKf6SLivGcw4mQdPzQxiiXlRI/kU8LnBxgU9uvUaakOl
vD2CHHi9zAGHN4QxdUGe1T+GXCI4MeN+logt+QFx1ymvDxTFsOqBIhSENSf7FPSG
5mOJ8XdzZP1+bgegWvnWRyb3tFaBbV7hDxwj86KPko68RPI81EaBi4qdp58HCxyH
a1igftMqdwVOXR0Ae+7MXUVXXD0sHA9MCHHoYNyQgwfNMfgdvu65OvqA2pA/dkZn
TPxdBgmRU+bMbDupP6c0/Bg8sGbI/8oDp+95MiN6QpfMKcy6emsrKMJtetHpDQfy
2F056+qIx82nWg==
-----END CERTIFICATE-----
Generated at Fri Oct 9 15:21:01 2026 by rpki-client