Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
File: sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft (raw, json)
Hash identifier: GUwr5lJz51HYu7gFaThqj6ZcZKWZdt4OIHyhw5iN0c0=
Subject key identifier: D3:8B:F2:2B:46:36:BD:FA:BC:0F:50:AE:18:31:0E:F3:D6:DA:BE:14
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 019DA29C157564AA44259A1C1074BB3E4876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
Manifest number: 0FAB
Signing time: Sat 18 Apr 2026 22:00:31 +0000
Manifest this update: Sat 18 Apr 2026 22:00:31 +0000
Manifest next update: Sun 19 Apr 2026 22:00:31 +0000
Files and hashes: 1: J3HD5d0SMV-R_mfbvG3dJVqlH-Y.roa (hash: tkc15QCtNWavxhUnqZNNlUVnnK/d2SoDMZwxZ/0lGlk=)
2: m6LIV73xO4kHTsWdqgKGOHvaXtE.roa (hash: xs1n0jReKeqXr1lEDMiVoEWUuyrVXL8g65tDgZej+UA=)
3: sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl (hash: 1nphIzYdfjjXubP+5q21L81a/AM+zt09tFJZwoOuqCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:15:75:64:aa:44:25:9a:1c:10:74:bb:3e:48:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Apr 18 22:00:31 2026 GMT
Not After : Apr 19 22:00:31 2026 GMT
Subject: CN=d38bf22b4636bdfabc0f50ae18310ef3d6dabe14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:00:cf:0a:1c:1b:f7:e6:09:8b:17:6b:5e:38:
8c:50:6e:86:74:ed:1b:2b:69:b8:e4:a0:2a:b2:fa:
77:5a:54:38:43:1b:a4:1f:90:ec:30:88:9b:fd:81:
cd:40:0f:a5:93:13:29:fb:ed:b8:63:0a:3a:58:26:
75:97:db:d3:27:0a:58:1a:b9:e8:cf:99:67:8e:89:
b6:73:cc:82:0a:ad:3e:71:36:b8:c2:af:d1:d5:0d:
63:38:b1:cd:85:91:e7:82:cd:9a:71:dc:6d:59:21:
ac:b7:80:6c:ca:c1:e6:ef:81:59:1f:6b:8a:32:71:
d8:9a:c5:26:7b:5f:35:e8:01:5d:33:fd:e7:91:b6:
32:ef:a7:92:c5:24:bd:66:a4:08:55:b7:d0:25:f5:
34:fd:b8:8b:71:b6:9a:f3:5b:b3:94:23:8b:8c:66:
e9:23:eb:e0:56:0f:ba:dd:28:d3:b0:94:97:5c:80:
c2:27:92:04:f3:26:5a:2d:79:f8:46:be:06:33:c6:
07:8b:41:87:fb:43:c5:c5:2c:2e:51:aa:37:08:db:
4a:80:63:99:54:65:f5:76:9f:fd:48:e9:c4:a4:0d:
97:3e:d1:6a:5f:7e:9d:51:b6:6d:5b:a7:7b:e4:30:
fb:cc:70:66:05:89:a0:da:b9:b3:00:56:b6:3a:27:
7c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8B:F2:2B:46:36:BD:FA:BC:0F:50:AE:18:31:0E:F3:D6:DA:BE:14
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:58:77:ee:27:69:de:f3:91:45:1d:f6:60:1c:f3:ce:be:35:
95:11:e4:ef:5f:a3:ab:30:e6:e9:fe:80:38:2f:e3:d5:3a:06:
00:f6:94:9e:84:0d:e7:7f:21:53:9f:02:27:8d:b0:08:45:5a:
e8:39:de:17:be:7e:b2:3e:c0:10:19:62:a3:b2:d1:9f:37:83:
40:5f:9e:ff:bc:34:23:46:fd:43:e0:16:df:dd:50:3e:b2:15:
0b:94:a7:3f:d3:40:bc:64:f5:2a:98:7f:9a:01:69:b8:49:47:
b3:e7:d3:96:30:63:1e:fd:06:f1:10:b1:16:5e:b7:6d:e4:97:
b3:4e:54:a5:9e:ff:75:5b:41:04:ed:a0:77:9a:1f:f3:f8:62:
fe:72:c9:77:02:76:bc:0c:ef:76:38:16:a0:dc:66:d8:13:3d:
ae:a9:d1:65:df:1c:f1:98:5a:e6:e5:aa:87:98:8b:83:af:32:
b0:4c:05:57:b1:a8:33:17:ad:d1:03:bf:f6:56:6d:71:d9:e9:
43:c7:b2:d1:07:6c:d3:43:7b:00:2f:08:98:4c:25:3f:67:31:
27:3e:f2:85:0f:71:07:df:2d:23:88:bc:e3:5d:47:6a:cf:5b:
b9:38:81:c1:5c:20:d7:ff:e6:8c:3d:c5:24:ba:a2:c6:e1:06:
a3:c0:03:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:21:46 2026 by rpki-client