Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
File: sl2FaYjGKmAgc-wpOFgd1KWG-48.mft (raw, json)
Hash identifier: CZn1k+q3LxuXxr8QjvdgFHwG7gXWKQKLTq4d+od73qQ=
Subject key identifier: 25:03:C0:E6:D7:73:58:88:E8:9A:2B:56:58:20:5E:8A:BE:CA:97:86
Authority key identifier: B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F
Certificate issuer: /CN=b25d856988c62a602073ec2938581dd4a586fb8f
Certificate serial: 019CAAC61546066618068ED81A375ABE043B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:00:34 +0000
Manifest this update: Sun 01 Mar 2026 19:00:34 +0000
Manifest next update: Mon 02 Mar 2026 19:00:34 +0000
Files and hashes: 1: 7sxuNjHlIxiavOHQyqNdwSZR25M.roa (hash: fIAdEbyDLTByjgDMXOH4/6dlp6Jlh9eCqm6V/Zxss80=)
2: sl2FaYjGKmAgc-wpOFgd1KWG-48.crl (hash: IT2J9RoEFvzfpdZw4+3HvqCKfUThncMafQxMIq8Mc4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:15:46:06:66:18:06:8e:d8:1a:37:5a:be:04:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25d856988c62a602073ec2938581dd4a586fb8f
Validity
Not Before: Mar 1 19:00:34 2026 GMT
Not After : Mar 2 19:00:34 2026 GMT
Subject: CN=2503c0e6d7735888e89a2b5658205e8abeca9786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:bc:d0:07:b4:74:82:00:38:c1:43:6f:bf:
cf:98:c8:29:5e:85:d8:45:73:b3:bd:f6:42:58:bc:
7c:58:d2:15:a0:f8:3c:a5:ec:92:3c:01:08:0f:7c:
e9:c9:5c:8d:c4:62:d5:75:75:cb:e9:39:b5:5b:1d:
ab:4a:dd:6c:99:8e:e4:4e:8c:4a:48:24:b6:b0:25:
54:3c:29:00:79:34:6e:b3:70:c0:c4:03:06:4a:a5:
c3:fd:3e:19:d7:db:6f:89:43:32:f9:e5:0e:7c:6e:
13:b5:26:c5:b2:50:40:6a:63:e4:55:06:fb:ab:15:
3c:5e:32:18:a0:f7:01:1d:97:90:1a:ee:87:e5:c3:
49:82:01:65:5f:87:df:5e:08:2b:1d:6a:07:03:6a:
0e:f1:fc:8d:50:79:23:93:5c:82:43:c5:d8:5c:ff:
40:91:ef:6c:35:9b:86:b9:79:20:17:44:45:44:19:
fc:1f:3f:e3:25:73:b0:16:63:2a:3d:dd:17:a3:c0:
c6:25:d6:a8:61:91:f4:07:b4:de:bb:6b:d1:42:ea:
e2:c7:23:a3:de:fe:5d:55:bf:c0:e3:d7:06:e1:ab:
2d:ee:ae:3c:28:8d:18:61:5e:a5:fe:5e:fa:3f:0d:
f3:0f:7b:10:4b:84:dd:d0:8d:ab:95:dd:9d:e7:a9:
31:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:03:C0:E6:D7:73:58:88:E8:9A:2B:56:58:20:5E:8A:BE:CA:97:86
X509v3 Authority Key Identifier:
keyid:B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:25:dd:21:2c:7a:b5:88:13:9c:15:43:a2:f0:73:a3:23:4d:
10:6a:b7:d7:74:d2:75:26:93:f2:6b:8e:f1:84:fe:11:e4:8e:
2b:a3:16:ee:ac:ef:b6:0c:ea:6b:69:40:a1:c4:18:02:cc:30:
08:f7:4d:7f:d4:23:14:d2:48:04:75:9c:bf:76:2f:c1:d8:31:
2c:97:bb:32:d3:0e:dd:d0:4b:f4:14:ce:56:76:1a:a2:ed:4f:
54:da:b8:0c:07:24:e2:61:65:f5:00:a4:b8:42:8b:b8:39:ed:
2c:18:0f:4e:cd:10:40:3b:25:0f:73:81:12:ac:9b:a0:c7:95:
bf:46:55:cf:89:db:be:0d:5c:c1:58:93:22:f6:2e:2a:74:6b:
86:0d:0d:a4:d1:e6:45:84:32:d1:6c:93:13:8d:e2:31:c5:99:
db:36:dc:04:79:9a:cd:93:f9:af:d8:c0:75:65:ca:fe:dc:89:
da:1f:4c:df:75:5c:09:d9:13:90:b3:77:30:fb:40:96:4e:2b:
64:6c:e4:1c:d6:0e:74:6f:2c:f8:fb:1a:b1:1f:50:6e:78:26:
56:0d:dd:8f:d7:59:9e:95:3b:3c:b1:af:4b:f6:35:e7:f3:5d:
ac:4f:1e:3e:73:5f:17:1a:98:83:c1:f7:48:38:30:00:03:93:
49:ad:f4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:04:16 2026 by rpki-client