Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json)
Hash identifier: nBQr9hK4gL1a3cV2N2t/yFuPl6HM0oyGh0kRXIppuiw=
Subject key identifier: 9A:40:C1:58:39:D5:B2:0B:1B:86:F9:21:0E:4B:C8:C8:0B:B1:BA:1C
Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Certificate serial: 019CF6F340F1BB0B45462C047867626CA84F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
Manifest number: 1800
Signing time: Mon 16 Mar 2026 14:01:02 +0000
Manifest this update: Mon 16 Mar 2026 14:01:02 +0000
Manifest next update: Tue 17 Mar 2026 14:01:02 +0000
Files and hashes: 1: IIlVo0fidTvQqKtqFi9ULMHfipo.roa (hash: kjOe1mZ+Dl42eBxnVxbtE/VrvseR8cEoFJ+of+SOdBo=)
2: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: v9ZZYenb98kVhEOL7wS3Sk6e/MVQwfRyPjCrMtJ1lp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:f3:40:f1:bb:0b:45:46:2c:04:78:67:62:6c:a8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Validity
Not Before: Mar 16 14:01:02 2026 GMT
Not After : Mar 17 14:01:02 2026 GMT
Subject: CN=9a40c15839d5b20b1b86f9210e4bc8c80bb1ba1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b7:e3:a4:1f:d5:3b:dd:03:b0:d6:1f:15:5c:
85:7a:0a:fa:7e:49:32:b7:d8:2d:6b:cc:09:f3:b1:
89:6c:03:84:56:bc:6d:33:3d:ee:48:93:5e:c3:2a:
ed:af:6a:39:52:60:8e:8d:ad:3d:4d:f6:d2:3c:5c:
91:06:71:de:16:77:c1:d8:f4:65:5a:39:9c:5a:52:
43:cf:ba:80:3e:54:77:71:87:39:a5:bc:4f:75:d5:
4f:4a:3f:16:fa:61:f6:b9:59:73:a1:be:9f:33:95:
58:79:44:5e:c6:a4:dd:11:7b:10:83:69:df:10:dd:
5b:0b:c0:dd:75:e4:79:21:7a:d9:44:cf:b5:c9:7e:
e7:a6:f9:ed:e8:9c:69:09:66:c7:7e:54:35:d0:56:
5a:89:82:65:d6:8d:4c:bc:91:65:da:96:ad:38:ab:
8d:cd:34:11:c3:73:34:b1:1f:01:10:2e:e8:c6:30:
ad:b8:11:32:4e:7e:0e:81:4b:5d:4b:45:4a:29:0c:
71:8b:3b:57:64:ab:91:51:c5:4e:c6:a5:a0:d1:49:
f8:5f:87:ba:1d:f6:f1:73:8e:d8:d6:2a:7e:9b:76:
2b:47:1e:e1:c3:6a:be:bc:6d:4c:12:ba:13:18:ba:
3d:c2:a3:c2:57:ef:a1:3b:23:d4:bb:31:fc:4d:71:
04:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:40:C1:58:39:D5:B2:0B:1B:86:F9:21:0E:4B:C8:C8:0B:B1:BA:1C
X509v3 Authority Key Identifier:
keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:88:67:f8:86:a7:67:11:7b:21:7a:a3:c5:ec:84:58:da:7e:
c9:c7:d8:f4:66:67:25:db:18:e1:9f:9c:ec:43:30:52:80:c6:
fe:32:76:cb:a7:59:a4:b8:d0:a4:e3:4c:b4:56:80:25:8f:02:
a5:23:37:cd:53:a0:bb:14:23:2f:94:a5:d0:03:b9:0c:a7:a4:
9b:8d:80:22:8c:bb:34:47:7a:4f:3a:4d:c4:83:44:a2:b3:b2:
32:76:3e:bb:b8:14:92:be:ab:bd:63:f3:31:a9:fe:3d:48:e7:
70:37:21:23:5a:d6:58:c8:7d:df:a8:4e:c7:e5:65:34:de:88:
98:e9:ab:97:ec:71:b4:ae:93:b8:5f:c7:66:44:8e:ae:02:1a:
ac:1a:94:50:24:b7:4c:9b:02:b4:13:90:9e:1a:cb:2f:5d:3b:
ee:42:90:4a:02:f9:c7:54:eb:f7:35:13:8f:fd:52:a8:f1:ac:
c8:2c:89:7c:d9:f9:1d:46:cf:43:42:c1:dc:df:ca:32:63:db:
35:97:17:8a:ae:e4:e0:a1:38:18:fb:91:52:4d:07:2f:6d:d1:
2d:60:83:16:72:e3:85:cb:96:7a:f2:2b:22:ad:e5:f2:4f:c4:
90:a3:af:e0:59:73:a7:b5:28:1f:4c:a7:1e:f9:79:95:78:39:
97:65:3f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 20:35:43 2026 by rpki-client