Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
File: sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft (raw, json)
Hash identifier: X7r30VJkmfbqcFA//C0+SZ8kuNdP2a7GCrgeri1qOcc=
Subject key identifier: 23:A0:07:34:9A:1F:95:D3:B6:32:F2:EA:03:9F:F0:F5:1F:88:31:AC
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 01A0C5FCC6BC1B154F3912A1429798497575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
Manifest number: 114B
Signing time: Mon 21 Sep 2026 22:01:12 +0000
Manifest this update: Mon 21 Sep 2026 22:01:12 +0000
Manifest next update: Tue 22 Sep 2026 22:01:12 +0000
Files and hashes: 1: J3HD5d0SMV-R_mfbvG3dJVqlH-Y.roa (hash: tkc15QCtNWavxhUnqZNNlUVnnK/d2SoDMZwxZ/0lGlk=)
2: m6LIV73xO4kHTsWdqgKGOHvaXtE.roa (hash: xs1n0jReKeqXr1lEDMiVoEWUuyrVXL8g65tDgZej+UA=)
3: sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl (hash: qKWuUSjkFnqrDkAJU0W2aQdgiu9mUwXpv2PuHbVl8Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:c6:bc:1b:15:4f:39:12:a1:42:97:98:49:75:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Sep 21 22:01:12 2026 GMT
Not After : Sep 22 22:01:12 2026 GMT
Subject: CN=23a007349a1f95d3b632f2ea039ff0f51f8831ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:42:b7:36:ee:94:f9:0c:e0:91:e5:b6:90:a1:
ab:cc:fd:5c:67:d8:dd:36:d3:9f:78:4e:c3:90:a0:
30:2f:ff:c9:20:78:dd:21:72:c4:c7:26:59:87:c8:
f6:08:5f:cd:a3:5c:d0:94:2a:e4:25:d2:fc:ef:9f:
f2:24:c7:65:20:fd:ff:b9:a5:72:a3:bc:d4:6b:55:
b3:e3:f0:b6:3e:00:d3:05:f9:78:13:42:01:53:51:
37:a9:9d:ae:c0:d7:22:6c:ea:6b:65:cd:ba:68:57:
2d:05:04:5e:4c:7d:55:a1:b1:b3:53:d0:0e:6f:bc:
48:90:9f:6a:80:91:25:d4:bd:f3:98:ce:4d:7e:c3:
b6:b7:71:d7:d8:be:54:42:54:1f:cc:0a:3e:a5:42:
d9:3a:3d:a6:e2:5b:d8:4b:d0:e6:58:3f:7c:a9:0f:
7d:53:7b:7a:79:c9:58:99:a7:06:25:15:6e:81:3f:
56:9b:79:a7:30:ae:29:e4:3c:ad:d1:df:8f:a6:2b:
0b:bd:24:2d:7c:3a:57:bf:59:c3:8d:c0:bc:b6:df:
a0:72:b6:2e:eb:b7:ba:25:50:06:5b:b3:34:6b:d2:
ce:3d:39:4b:5e:1c:bb:cc:35:41:76:d0:25:6d:9f:
6b:fb:be:6f:8c:68:15:c7:13:01:99:a4:2d:aa:0a:
9f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A0:07:34:9A:1F:95:D3:B6:32:F2:EA:03:9F:F0:F5:1F:88:31:AC
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d7:e9:17:b9:91:7e:ac:50:a7:a3:db:1c:0d:e3:c6:7c:98:
03:3f:b1:05:40:ce:bc:af:c6:97:53:49:65:90:e9:df:40:04:
c0:2d:7b:a0:21:23:72:29:8a:39:dc:4c:b5:50:38:79:50:5c:
e0:cf:02:92:34:9e:86:4a:60:00:af:d7:9c:14:38:13:f1:dc:
cc:a5:0b:dc:a3:25:c2:ab:d6:38:04:46:eb:2c:78:70:06:81:
79:49:cf:d8:10:f4:2b:72:2f:1f:4c:ea:c9:d9:18:27:a1:52:
ae:c6:46:75:22:55:57:d0:75:4f:6d:af:8b:7f:c6:0e:4d:01:
90:6e:e0:d8:c9:93:c7:e5:d2:d2:8c:85:1e:a9:2d:a5:4c:a2:
7c:3b:35:64:32:3d:4e:31:8a:61:d0:fe:71:c5:24:6b:4c:3e:
b6:0a:a9:62:37:2b:3c:66:a7:cb:3c:17:55:a7:05:72:74:14:
cb:b2:9c:ce:dc:cb:d2:30:d8:04:30:a2:cf:29:3e:13:03:8c:
e2:0c:51:ea:b9:96:23:55:b4:f4:89:67:c5:31:c4:66:14:db:
8a:e9:2d:68:4e:40:f9:a0:1e:75:5e:6d:00:33:d8:6d:74:ed:
47:52:89:1a:20:39:d4:4d:20:56:4c:25:73:9c:07:05:89:af:
84:5d:21:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:34:53 2026 by rpki-client