Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json)
Hash identifier: 7sg/3YZyyQfg7iqodmKX9Nf8nWKdUdCgQUmWQ88ghkI=
Subject key identifier: C7:87:83:9B:9F:9C:C6:DD:5D:E6:22:C5:C2:D4:AC:1A:D3:8B:EE:F1
Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Certificate serial: 01A0B6BFFC266B788E3A24A7ECD591393233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
Manifest number: 19F1
Signing time: Fri 18 Sep 2026 23:00:30 +0000
Manifest this update: Fri 18 Sep 2026 23:00:30 +0000
Manifest next update: Sat 19 Sep 2026 23:00:30 +0000
Files and hashes: 1: IIlVo0fidTvQqKtqFi9ULMHfipo.roa (hash: kjOe1mZ+Dl42eBxnVxbtE/VrvseR8cEoFJ+of+SOdBo=)
2: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: p8bpcBpoGvr3mcYEIDpdxgRvrFKG3wPTggWGOueUQ38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:bf:fc:26:6b:78:8e:3a:24:a7:ec:d5:91:39:32:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Validity
Not Before: Sep 18 23:00:30 2026 GMT
Not After : Sep 19 23:00:30 2026 GMT
Subject: CN=c787839b9f9cc6dd5de622c5c2d4ac1ad38beef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:76:a0:21:fd:15:e7:31:e7:55:47:e5:b5:27:
fc:95:5d:b0:e8:a2:8b:42:42:e2:6b:c0:15:d6:8a:
cd:59:68:b2:36:09:ee:25:16:f7:f8:20:93:30:71:
99:a6:7e:5b:f6:a4:64:43:52:90:f1:ef:9f:3c:2a:
40:e6:c6:c7:c4:e8:ce:41:5d:0a:9a:66:91:5f:fc:
cb:b4:96:4f:95:62:e1:20:63:b3:f3:a9:de:a8:3b:
7b:db:42:43:99:fd:34:8b:b2:86:4f:b7:de:92:90:
08:8a:83:50:7c:ec:3a:a7:cd:c5:86:1b:99:c2:1a:
f0:84:d3:11:76:5e:3b:2d:fe:c8:98:91:10:5e:24:
9a:26:cb:66:55:97:65:06:ac:1a:89:40:81:be:40:
3a:e0:ee:d0:41:58:12:64:44:a8:70:31:c1:57:d7:
0d:2a:31:89:f9:a6:39:2d:bd:97:dc:23:65:5c:99:
77:c3:be:cc:93:ad:bf:4b:9b:9d:0f:84:44:66:15:
23:ae:6d:98:26:dd:65:55:74:7e:62:ad:6c:fa:ab:
c5:e8:cc:b8:4b:c3:03:77:2c:2a:e0:5f:40:63:ca:
9d:53:fa:2c:a9:66:43:24:c3:f5:7c:ef:91:fc:a9:
15:d8:fd:55:94:f2:db:3e:c1:05:e1:59:eb:b0:81:
d5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:87:83:9B:9F:9C:C6:DD:5D:E6:22:C5:C2:D4:AC:1A:D3:8B:EE:F1
X509v3 Authority Key Identifier:
keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:eb:9a:bd:e7:66:a3:fe:8d:dd:6c:d8:16:99:3c:e8:ea:f7:
b3:65:96:c5:26:ee:b5:05:f7:d2:f9:fe:2b:14:2a:a4:ad:cd:
85:e0:71:0e:65:70:a3:d7:c5:85:76:bb:c6:9c:1e:78:59:f8:
e0:f9:b1:39:a6:13:24:12:bf:d7:bc:7a:11:49:03:71:a8:d0:
e7:49:9f:bf:ad:76:98:de:6d:ff:e9:0c:ee:98:81:d9:50:5e:
ed:91:a2:30:f5:bb:73:91:7f:e7:26:57:49:a6:8b:9c:99:6e:
8d:17:1f:c8:99:76:23:b2:02:b3:c3:43:b9:03:a5:38:b8:c3:
03:2f:64:67:2b:a9:c0:10:4e:e1:de:81:fb:f5:04:7b:95:10:
9a:19:46:b9:ed:1c:a4:d8:f5:7d:43:de:00:b0:38:09:50:30:
90:bd:c4:52:1e:ea:ac:24:27:56:d7:04:61:b0:87:fd:1e:2e:
5f:fd:0b:4e:06:80:9b:60:f1:f5:f6:df:9a:67:04:7a:7d:e7:
4a:b4:88:28:6a:6b:4d:95:fd:4b:9f:b2:0a:2c:70:cc:4c:c3:
e6:05:32:ae:8f:ec:9f:c3:52:a6:bc:ac:1c:6a:e0:a9:68:da:
42:61:fd:97:6e:1c:86:ec:23:b7:63:03:51:42:ce:41:6c:0c:
3e:68:65:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:35:09 2026 by rpki-client