Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
File: sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft (raw, json)
Hash identifier: OLGxjs/tdau77zI1lB/E7Rrx78BH9YSpZw9Yu6djHyk=
Subject key identifier: 98:46:8B:7D:81:DB:D1:10:18:61:1D:C9:EE:D7:3E:A7:CC:DB:8D:6A
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 019CAB6B4120569892330CB72EB321E6BF9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
Manifest number: 0F2B
Signing time: Sun 01 Mar 2026 22:00:58 +0000
Manifest this update: Sun 01 Mar 2026 22:00:58 +0000
Manifest next update: Mon 02 Mar 2026 22:00:58 +0000
Files and hashes: 1: J3HD5d0SMV-R_mfbvG3dJVqlH-Y.roa (hash: tkc15QCtNWavxhUnqZNNlUVnnK/d2SoDMZwxZ/0lGlk=)
2: m6LIV73xO4kHTsWdqgKGOHvaXtE.roa (hash: xs1n0jReKeqXr1lEDMiVoEWUuyrVXL8g65tDgZej+UA=)
3: sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl (hash: o3jfrq6FYb9Kh9KJ109ilK+YGZGHTJODBs/gV3FIIoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:41:20:56:98:92:33:0c:b7:2e:b3:21:e6:bf:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Mar 1 22:00:58 2026 GMT
Not After : Mar 2 22:00:58 2026 GMT
Subject: CN=98468b7d81dbd11018611dc9eed73ea7ccdb8d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1a:70:96:1d:09:ac:34:d2:19:87:87:1c:d6:
8b:19:e9:0c:73:5f:82:03:23:6a:94:47:51:48:f9:
10:6c:37:87:b7:a4:bf:8e:15:f4:20:48:52:bd:07:
f0:ef:d6:10:22:f2:36:67:b9:4c:89:90:8e:14:53:
74:8d:83:e3:67:eb:23:8c:47:de:ea:a4:bf:47:25:
ec:76:20:82:71:72:e4:3c:55:35:28:81:1b:29:bb:
eb:2c:14:1c:7f:bd:f7:82:77:19:83:0a:b6:fc:66:
f4:16:2a:25:9f:25:7d:52:80:72:d0:0d:ca:e3:b4:
15:9b:6c:57:f4:b6:25:c4:3a:d1:24:11:c4:e6:7e:
b6:00:91:3a:27:3d:aa:73:57:15:08:36:08:ce:1b:
c9:58:eb:3c:bc:15:20:34:6b:d6:87:b7:d6:8b:1f:
17:a6:ce:43:aa:e6:4b:42:e9:dc:8e:51:f9:bd:78:
9b:15:96:05:21:f8:e4:b0:82:6c:9b:62:77:95:f9:
be:25:14:1a:d2:14:01:bd:5b:86:a6:a2:94:c3:3b:
dc:e0:28:89:f4:49:2f:db:d2:ad:5d:19:a6:c1:69:
2a:6e:df:9a:19:3a:9a:bf:1a:17:aa:2f:93:4f:1f:
15:f9:13:5f:c5:2c:1a:c8:5f:c6:ce:f2:16:64:79:
2c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:46:8B:7D:81:DB:D1:10:18:61:1D:C9:EE:D7:3E:A7:CC:DB:8D:6A
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d0:f1:c9:bd:1b:d5:78:86:17:28:50:9f:b3:65:1d:8e:6d:
87:06:9e:02:d6:57:75:4e:cd:f1:fc:c3:bd:13:26:59:aa:71:
33:a2:7d:38:7b:56:81:5b:eb:df:66:b4:a7:36:d6:9a:2b:38:
06:a0:ca:00:49:04:eb:10:40:b9:99:50:94:7d:ba:f0:43:d1:
7a:22:b1:da:47:ce:ee:74:03:a7:60:0d:36:81:b2:6b:26:d6:
e7:51:0f:82:fb:0d:ac:eb:9c:f5:03:d8:59:fd:8c:84:8f:c9:
a6:38:5d:e4:23:ad:3d:67:48:c9:20:e5:89:8b:a2:b1:b8:a0:
23:b0:dd:25:3b:c7:ec:80:ac:77:c2:9e:15:0d:cd:dc:17:01:
f7:ee:0c:e4:54:20:35:8f:27:33:a5:5d:ea:56:66:10:2b:5c:
44:9d:8f:e6:27:9c:bb:6e:4e:6e:b5:7f:03:72:f6:cb:47:12:
d7:12:b2:90:47:7b:d2:e8:7c:2f:a0:6b:be:54:4a:41:56:c7:
66:73:45:1a:7f:2f:75:5b:8f:29:85:21:5e:0e:e3:9e:9e:7d:
46:c3:4d:3f:18:8c:59:3c:a4:c6:23:53:6b:36:dd:93:b4:46:
2c:9b:32:6e:d5:f1:92:89:4b:9d:c7:a6:5c:57:0e:90:c4:c5:
b2:ef:85:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:31 2026 by rpki-client