Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
File: sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft (raw, json)
Hash identifier: NxgrMTyGAL4Gh1bwRypir/Qb7j76MY5dr7NxJnLIABQ=
Subject key identifier: 73:6F:D9:CA:73:ED:55:B8:B7:E1:41:96:28:FB:47:6A:CB:8C:61:7F
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 019EC06D8E87C3BD77B4153E4D3C43512078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
Manifest number: 103F
Signing time: Sat 13 Jun 2026 10:01:05 +0000
Manifest this update: Sat 13 Jun 2026 10:01:05 +0000
Manifest next update: Sun 14 Jun 2026 10:01:05 +0000
Files and hashes: 1: J3HD5d0SMV-R_mfbvG3dJVqlH-Y.roa (hash: tkc15QCtNWavxhUnqZNNlUVnnK/d2SoDMZwxZ/0lGlk=)
2: m6LIV73xO4kHTsWdqgKGOHvaXtE.roa (hash: xs1n0jReKeqXr1lEDMiVoEWUuyrVXL8g65tDgZej+UA=)
3: sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl (hash: DR1/qqU0qwVcg5p/+CxBOL8ISH8Fej5USyOJWuDQ5mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:8e:87:c3:bd:77:b4:15:3e:4d:3c:43:51:20:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Jun 13 10:01:05 2026 GMT
Not After : Jun 14 10:01:05 2026 GMT
Subject: CN=736fd9ca73ed55b8b7e1419628fb476acb8c617f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:12:42:5b:cd:02:8b:6c:81:d5:20:2f:fd:7c:
d8:c6:51:8d:56:d4:0b:0a:4d:c6:50:09:a1:e7:08:
29:f6:f7:f3:2f:71:d6:bf:95:f8:7f:d1:cf:7c:93:
78:65:67:03:e6:54:31:72:73:ae:80:15:c0:34:b8:
e6:23:f4:34:db:a0:ea:43:8f:5a:4c:67:e1:a4:90:
a1:e6:a2:0e:30:74:50:f4:3c:3d:8e:84:11:68:04:
9f:27:33:34:56:64:05:78:61:8d:a9:84:07:ad:6c:
c2:7f:08:8a:4c:8f:83:18:0f:70:6d:cf:7f:4a:9f:
e4:b1:52:c7:13:7a:a5:e5:42:f6:93:54:91:c7:09:
b8:d7:8f:2f:84:48:00:de:51:64:cd:81:cf:8d:f0:
19:2f:41:b0:2c:92:03:75:c0:6f:db:8c:52:f0:d8:
87:13:aa:34:19:46:13:12:b8:19:b7:ed:53:76:b9:
19:a4:c6:b3:74:1a:f9:87:f3:19:72:47:3f:51:17:
2d:0c:7a:ee:52:30:73:2b:ae:8a:f8:07:26:fa:c1:
8d:96:e4:9b:a7:37:4a:98:eb:d4:db:42:78:37:6e:
83:99:83:1d:34:77:36:e8:15:48:a1:8e:74:a8:2f:
8b:be:dc:ed:df:25:28:ca:db:e9:bb:fa:d1:ae:b5:
bd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6F:D9:CA:73:ED:55:B8:B7:E1:41:96:28:FB:47:6A:CB:8C:61:7F
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f4:b7:28:5d:22:0d:e0:a6:b4:4c:7f:bf:22:a4:51:b8:fb:
59:e6:83:6f:04:51:1f:04:67:89:7c:bb:53:15:d3:a6:62:17:
d2:5d:23:83:8d:b9:23:35:a5:ab:63:ac:50:ae:d2:e1:71:fc:
c6:bd:3e:1b:b8:01:e6:3e:cc:f0:d1:6d:88:3c:bd:5b:8d:8d:
99:59:10:21:16:d3:d0:ee:76:08:cd:1d:94:e8:14:27:9a:6f:
54:23:3b:eb:5f:3a:85:76:9d:71:7c:96:77:ef:52:49:03:3b:
ab:f9:f4:5e:94:d8:6a:e3:57:63:50:e4:ae:25:50:4a:b9:34:
c8:1e:d9:24:6e:7b:79:e5:12:4e:dc:1f:7e:4c:44:cd:c9:cc:
df:b3:2f:d2:18:d4:c7:24:c3:56:76:cb:bf:36:5e:4e:6c:3f:
8a:09:da:8a:f0:cb:59:bf:b6:3b:dc:77:fc:c2:ea:6a:a5:64:
84:8a:c2:e4:e1:f4:9a:e5:f2:fe:26:30:c9:46:bb:01:40:48:
fd:a8:65:2b:4b:91:3b:44:19:81:83:34:6f:0e:ab:7d:1e:f0:
2e:8b:8a:0b:27:20:b3:57:96:40:cd:67:d6:03:23:85:49:1b:
bf:a5:fd:af:b9:d6:40:dd:b2:f1:ec:92:6c:fb:5e:01:e0:59:
04:8d:be:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:21:24 2026 by rpki-client