Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
File: SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft (raw, json)
Hash identifier: 5HRKESETiy8WE5ljM2mVBK+2cyHJ7zdak1TL4bMcR0s=
Subject key identifier: 23:24:4F:0C:FD:34:12:D8:45:50:5C:73:3C:E4:41:07:06:13:CE:6D
Authority key identifier: 4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
Certificate issuer: /CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Certificate serial: 019D38D2B44F1714474CE2B4FBDBB3ABE470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
Manifest number: 135A
Signing time: Sun 29 Mar 2026 09:00:25 +0000
Manifest this update: Sun 29 Mar 2026 09:00:25 +0000
Manifest next update: Mon 30 Mar 2026 09:00:25 +0000
Files and hashes: 1: 7Z28ccV7b3JOrHBg1UIO3OEvwT0.roa (hash: 1nSmk3+PfoqP0CPu2acD9nLC2qFRu+YJXluMww4fQsw=)
2: E3n9esmOrOiobKpJnsNX1UEdPcY.roa (hash: dbM92eMK8IhOySdV1MJ9MEgIxZl7Dktml8lfCphXSgw=)
3: SWLNmYYm6Zq0D2jQ9d5JvtPt1cA.roa (hash: jzLKP/SbyyXvM8oP+/GO3/4crN42V8JTzUOZ8ggXFRk=)
4: SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl (hash: Cr09c5G4aRJgDsAupdpaye+g8AcsQNAYRGiH2qN15rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b4:4f:17:14:47:4c:e2:b4:fb:db:b3:ab:e4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Validity
Not Before: Mar 29 09:00:25 2026 GMT
Not After : Mar 30 09:00:25 2026 GMT
Subject: CN=23244f0cfd3412d845505c733ce441070613ce6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:38:a8:6d:3c:75:e9:f2:e9:09:ba:9e:65:
e5:0a:bf:ff:1a:0d:5f:10:91:c3:9d:c9:24:89:d2:
16:01:41:15:59:ff:9a:45:0f:1d:b5:a0:6e:a0:53:
1d:fe:3e:6a:d6:02:57:5e:31:b7:5a:0b:7e:97:45:
43:8c:47:ca:a3:24:79:84:05:e9:e5:a6:17:73:14:
1b:2c:79:7b:cf:1f:e3:31:ac:2a:e4:11:8c:34:05:
c6:c6:6b:7b:f4:02:5f:56:37:bc:ca:d9:16:f5:24:
1a:57:fe:2d:d2:53:e5:d7:58:c9:12:f9:4d:32:0d:
51:11:fc:d8:8b:96:39:7e:16:67:f5:eb:c4:b3:fe:
a4:88:08:24:37:e0:68:10:e4:d4:3b:db:e1:ca:71:
48:a6:e4:bc:3a:eb:a4:53:ba:f5:41:00:e8:2c:5a:
b6:10:2a:64:e6:e6:f4:b9:dd:c6:d3:3f:2e:76:27:
ed:65:d1:44:7a:b9:b2:2d:9e:9c:16:1a:e7:ba:e8:
9b:6a:18:fb:fd:08:6d:e7:2d:f7:79:52:5a:15:da:
a5:f8:55:4f:76:58:03:90:0f:ff:95:96:4a:8b:7e:
3d:3f:16:9d:1f:4a:76:1f:d6:3f:dd:89:87:fa:69:
a1:13:85:24:95:af:4a:a9:1e:16:4f:0b:34:76:cb:
af:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:24:4F:0C:FD:34:12:D8:45:50:5C:73:3C:E4:41:07:06:13:CE:6D
X509v3 Authority Key Identifier:
keyid:4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3d:f2:65:4d:27:da:40:2e:ab:89:37:0e:68:31:b1:a4:4d:
a1:23:89:cc:1b:d1:20:c8:1f:38:83:3f:a2:ab:60:d7:05:c9:
cf:58:43:d5:72:d2:ff:43:33:fe:95:03:da:06:bd:4a:5f:6b:
c9:13:3b:57:37:bb:9c:5a:a6:db:ab:c8:7d:5e:d0:9d:aa:33:
de:3c:33:df:04:e9:c3:85:64:33:41:f2:16:d3:e8:91:cf:d5:
b5:2b:bb:29:c5:bf:98:50:20:f4:eb:a6:e4:e6:f1:44:1f:7d:
11:65:b8:bf:71:46:6d:1e:b0:54:6d:75:44:cd:81:b1:26:a4:
55:e6:8a:b3:cd:21:5a:57:e5:61:44:c1:c5:ac:0d:d4:11:10:
85:87:80:42:a1:c9:1e:2a:1d:ad:f0:64:b9:99:dd:bd:c0:d0:
a5:bb:9f:37:8a:a4:a5:ff:f2:2b:fd:cf:ee:1c:7a:d8:cc:05:
04:0c:eb:27:6a:00:04:6a:0a:36:10:2d:f3:0c:8f:f8:9c:b1:
20:71:9d:1d:98:fd:7e:af:8a:a5:a3:62:b8:fa:e4:29:e4:94:
c1:9f:ea:c8:ef:87:f7:a0:15:33:b2:8a:2b:3b:45:96:5e:ad:
97:37:ef:9b:62:8f:97:ed:8f:28:69:78:50:86:a3:0e:a3:ba:
33:a1:4a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:15 2026 by rpki-client