Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
File: sLGxJtrAqgt3lIZADt5yVLJe6qY.mft (raw, json)
Hash identifier: R4wGyYiYDJ507RVYcOhUzTyZ3B+peTCCcsnL9V9wzKM=
Subject key identifier: 1A:E9:F9:5E:17:51:55:A5:8A:4F:F7:30:0F:A1:33:A5:5F:5D:04:C1
Authority key identifier: B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6
Certificate issuer: /CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
Certificate serial: 019CAD90A54C8D81BA04A4BB51DBB08D4A78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
Manifest number: 17DA
Signing time: Mon 02 Mar 2026 08:01:03 +0000
Manifest this update: Mon 02 Mar 2026 08:01:03 +0000
Manifest next update: Tue 03 Mar 2026 08:01:03 +0000
Files and hashes: 1: 3CIM-rszzFckhjZbgzPmZtOKZv4.roa (hash: VqajRiaghj0MLKmKn/iBz4Zyi+LNEnSguYlblCLEBTI=)
2: sLGxJtrAqgt3lIZADt5yVLJe6qY.crl (hash: vd8Ts/anqSN90YbTkBzLx9goMeoYPnOWbs1PTxf1w7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:a5:4c:8d:81:ba:04:a4:bb:51:db:b0:8d:4a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
Validity
Not Before: Mar 2 08:01:03 2026 GMT
Not After : Mar 3 08:01:03 2026 GMT
Subject: CN=1ae9f95e175155a58a4ff7300fa133a55f5d04c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:c3:7a:dd:22:2f:4e:7e:57:ef:9e:53:92:
29:c4:ba:e6:72:8f:cd:8a:75:68:08:d5:91:dc:97:
8f:eb:d5:4a:9c:e5:42:91:13:b6:71:03:0a:f3:47:
c2:80:0f:2d:0e:43:36:c4:32:2d:3c:d8:00:a1:93:
34:17:ef:69:24:ba:20:1e:0d:34:b5:72:f1:c3:81:
0a:a2:7a:71:69:c7:3a:89:13:8b:8f:fb:12:f9:29:
a2:a9:cc:bf:cd:67:d5:cf:78:ba:90:9a:89:ad:1c:
60:e8:ed:21:4f:6c:12:a6:50:0a:48:85:d0:b3:0c:
2a:f0:ee:ae:4b:87:78:2a:9a:49:dd:72:a1:66:30:
02:ec:a8:52:1f:c8:fa:c7:e4:be:58:b1:c1:03:65:
19:e6:0f:74:c2:a3:ee:7e:ca:1c:76:f7:6b:16:75:
aa:82:c0:8a:f5:15:98:69:cc:1c:c8:02:a1:57:90:
5f:92:78:e7:d8:ac:ab:72:5f:7c:38:4a:56:d0:21:
fa:a8:08:b7:22:8a:54:c6:87:17:27:f0:fd:a6:54:
a2:68:5b:e8:5b:69:32:b1:31:a1:3c:c6:94:bb:4e:
71:4c:09:53:5f:3e:42:59:f1:56:07:0d:d1:dc:f6:
54:91:df:54:19:f3:cb:41:85:26:47:b8:ab:d1:cc:
b7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E9:F9:5E:17:51:55:A5:8A:4F:F7:30:0F:A1:33:A5:5F:5D:04:C1
X509v3 Authority Key Identifier:
keyid:B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:65:1d:98:46:36:0e:e5:92:7b:1a:07:e1:3b:09:bd:db:d6:
fb:e7:72:8f:c7:3c:ca:4e:dd:7d:de:9f:6e:f9:ce:cb:df:f6:
66:82:5a:38:a2:1c:fe:b9:57:8a:da:db:9f:fe:bf:4f:21:92:
21:40:b9:25:78:b5:21:a9:d8:c2:0b:e3:07:f8:80:7c:65:d8:
cd:9e:f1:e9:dc:8b:5c:15:be:e2:a4:b9:7a:4e:0c:a8:14:5a:
fc:80:ea:c5:11:0b:18:5b:8a:07:44:8e:e9:15:b0:7c:53:0e:
77:18:e5:72:a9:6d:94:69:df:9c:f0:bb:05:05:3a:18:d4:ad:
1a:0f:dc:d9:f8:92:c5:af:bb:b2:1b:46:25:82:72:6c:f4:79:
10:b9:6c:f9:a2:c5:be:16:39:7d:9a:28:83:54:53:a1:78:9f:
01:b9:4a:c6:b9:32:9c:aa:6e:ed:6b:ea:88:02:8f:80:2f:38:
a3:ea:66:22:7f:46:9a:25:60:be:d6:c1:a4:d9:35:8c:88:b3:
c3:26:8f:69:1b:a6:79:73:2a:9f:d2:13:9b:98:ae:ea:c7:9e:
94:c6:ba:f6:f6:aa:81:b5:fd:c2:fa:fd:fd:1d:22:8f:e1:9a:
08:3b:59:9d:19:77:ac:fb:1e:35:cc:af:79:8e:42:15:4a:5a:
77:cc:e5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:50 2026 by rpki-client