Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
File: sl2FaYjGKmAgc-wpOFgd1KWG-48.mft (raw, json)
Hash identifier: OXqtGBk41PalRGzeZLhGG2QSLvHUWM4sgrJ9/OGQ9ao=
Subject key identifier: E9:0E:99:EA:9C:8B:D9:88:67:02:94:5E:45:10:66:CE:0A:D3:D4:3C
Authority key identifier: B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F
Certificate issuer: /CN=b25d856988c62a602073ec2938581dd4a586fb8f
Certificate serial: 019D9A3ED62517BA8C60B011CA3EF457DD45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:01:42 +0000
Manifest this update: Fri 17 Apr 2026 07:01:42 +0000
Manifest next update: Sat 18 Apr 2026 07:01:42 +0000
Files and hashes: 1: 7sxuNjHlIxiavOHQyqNdwSZR25M.roa (hash: fIAdEbyDLTByjgDMXOH4/6dlp6Jlh9eCqm6V/Zxss80=)
2: sl2FaYjGKmAgc-wpOFgd1KWG-48.crl (hash: a1PScY4A/Lg3H5ETIUYXn4RplZ+WCDN5EdGgrHVGZrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:d6:25:17:ba:8c:60:b0:11:ca:3e:f4:57:dd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25d856988c62a602073ec2938581dd4a586fb8f
Validity
Not Before: Apr 17 07:01:42 2026 GMT
Not After : Apr 18 07:01:42 2026 GMT
Subject: CN=e90e99ea9c8bd9886702945e451066ce0ad3d43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:c1:4e:bc:94:3a:02:36:7f:0e:15:b1:2e:
1b:0a:9d:85:03:50:b7:b1:2d:8c:88:5b:2f:86:d6:
34:a8:23:f0:2e:6a:9b:1d:e6:e7:65:18:47:ca:8a:
68:c2:53:71:8a:40:d7:5a:7a:17:68:cb:d1:fe:24:
e4:05:4e:2a:30:e3:69:d7:f8:19:e8:3f:d3:1b:1b:
aa:32:81:da:dc:61:07:70:cd:75:4a:c6:8f:d9:a6:
68:6f:03:7c:98:b0:b7:9a:0d:7b:ee:3d:28:18:ce:
f7:8f:b5:ef:1a:50:54:7e:f4:3a:c6:81:6d:6c:e3:
bf:53:a4:71:52:3c:25:8a:63:69:d9:aa:39:02:12:
f2:65:a3:3b:b1:e9:94:0a:51:b0:23:6a:23:c8:50:
b9:82:47:55:57:4d:15:e1:18:e5:4a:da:2c:38:c0:
39:f0:d2:31:fb:64:cb:36:07:93:19:67:56:57:fb:
28:b5:0f:d8:7b:f2:e8:0e:2c:14:64:a5:4a:6a:01:
ad:80:0a:74:d0:bc:68:fd:29:e5:3c:53:ca:66:0d:
6e:49:3c:5b:ff:f6:88:ca:14:27:20:20:55:d4:91:
6f:a6:6c:63:d9:71:df:ac:a5:73:33:a4:d0:a1:ae:
f2:46:85:6c:9c:bb:24:d9:c3:8e:3f:4d:bb:15:e3:
70:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0E:99:EA:9C:8B:D9:88:67:02:94:5E:45:10:66:CE:0A:D3:D4:3C
X509v3 Authority Key Identifier:
keyid:B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:73:33:d7:72:a6:54:dd:f8:be:fd:e2:03:1e:38:68:50:e0:
4f:0a:ff:85:34:ff:ea:58:ae:0e:93:04:25:0b:2e:8a:35:f1:
a0:b5:a7:f2:b5:43:17:f5:0e:78:c0:1b:52:12:cc:65:cb:9a:
e6:17:62:99:8f:af:10:4f:03:e1:42:e2:6c:5d:0a:3a:a3:1e:
9a:dd:f0:cc:ab:40:1d:b7:5a:a8:ce:ba:0b:43:e6:29:24:72:
f1:0c:33:ca:c3:28:d4:28:8e:19:1f:d4:a4:51:94:23:1b:61:
96:f3:f5:89:fe:f5:37:82:a5:fc:56:74:ea:93:95:b0:0a:80:
65:c8:df:8c:c4:b5:02:d8:6b:ff:4a:49:f7:9a:c8:1d:51:fd:
d2:2f:6a:3f:07:c4:d0:fc:54:ee:85:e8:05:ef:9e:4a:8a:5d:
71:d5:85:c8:0b:1a:df:20:e8:9c:33:0c:f5:df:0f:c0:54:fc:
0a:12:d8:d5:69:5e:33:37:8d:5e:ec:35:f4:ad:58:af:6d:93:
bb:34:89:ef:1d:1e:ac:1c:96:97:33:e2:62:a6:00:c8:4e:0a:
48:c3:39:8f:6f:d2:b0:83:94:26:75:f2:1b:27:b8:cb:ff:14:
ae:8f:22:b9:73:46:f4:56:c2:e7:8d:26:cc:85:4c:fe:e2:bb:
01:e0:a8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:23:22 2026 by rpki-client