Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json)
Hash identifier: oerpvy8YZQK6MPo0HXqAU82Qk7Zzm2nmx49XGsnKQZw=
Subject key identifier: 02:10:06:33:F6:E9:46:72:1E:4C:DB:E4:21:E0:0C:83:45:14:7D:CD
Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Certificate serial: 019EE179687D43682B30E8E1B8D020C9F228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
Manifest number: 18FE
Signing time: Fri 19 Jun 2026 20:01:30 +0000
Manifest this update: Fri 19 Jun 2026 20:01:30 +0000
Manifest next update: Sat 20 Jun 2026 20:01:30 +0000
Files and hashes: 1: IIlVo0fidTvQqKtqFi9ULMHfipo.roa (hash: kjOe1mZ+Dl42eBxnVxbtE/VrvseR8cEoFJ+of+SOdBo=)
2: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: 7MZ1HCC+repy2pXUeg8AH8XORvogCao+4h6TyrHX6Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 20:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e1:79:68:7d:43:68:2b:30:e8:e1:b8:d0:20:c9:f2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Validity
Not Before: Jun 19 20:01:30 2026 GMT
Not After : Jun 20 20:01:30 2026 GMT
Subject: CN=02100633f6e946721e4cdbe421e00c8345147dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:38:8a:aa:6f:91:1d:7c:1d:14:49:1b:32:c3:
c9:eb:fc:d2:9c:06:87:4f:66:d9:c7:cb:3a:2a:3b:
22:5d:bb:66:7e:91:4e:c5:53:6b:bd:3d:83:23:94:
b1:39:7e:07:6a:4f:e5:40:c9:dd:7e:39:45:c1:f9:
d0:21:7b:63:f2:77:61:c5:31:81:b6:ac:4b:ab:63:
56:ed:61:91:a2:56:79:9e:8f:60:45:bd:0e:17:fe:
97:55:15:2f:7f:c5:ab:31:08:c5:95:bb:2e:5f:39:
7d:cb:c0:09:53:b6:dc:e3:2c:99:09:e7:8e:98:93:
bd:a7:2f:e4:51:86:fa:4a:c4:31:ff:e2:3d:6c:ab:
af:ff:ee:d8:01:9d:d7:22:3a:8c:e2:52:fb:4b:fe:
5e:82:51:12:9b:d5:29:38:e9:3f:37:ca:6a:f5:6f:
7e:37:57:8b:fb:0f:38:a1:45:96:68:5c:2c:6c:79:
23:a9:f8:04:d8:d4:37:09:47:35:7e:e0:ec:ec:10:
05:4f:c7:4a:f5:47:ee:ff:5d:6f:12:b8:b6:c0:67:
3b:c1:13:9c:27:30:7c:5f:22:90:c3:2f:a7:0e:58:
d1:32:a4:4e:38:ca:c0:aa:9f:29:63:29:5e:92:26:
33:c6:fb:ee:c6:c7:79:7e:90:ab:15:00:8b:a1:2c:
e9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:10:06:33:F6:E9:46:72:1E:4C:DB:E4:21:E0:0C:83:45:14:7D:CD
X509v3 Authority Key Identifier:
keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:91:80:34:db:ff:42:43:5f:85:22:17:93:ca:11:9a:c1:5d:
0f:8f:4c:27:83:3a:ba:16:68:02:59:86:c5:ce:2f:15:10:e5:
c7:3c:d0:24:dd:53:ee:ee:b5:0c:75:a8:fb:28:93:04:a8:42:
40:7f:3d:ed:2b:cb:83:46:c7:9b:d2:88:b8:df:89:27:18:b0:
68:e6:e9:59:af:7e:9d:67:16:0c:4a:23:4b:ef:10:fd:a4:87:
66:c5:06:04:54:1d:bc:2b:c8:7d:42:d9:ab:cf:b1:f0:e0:0b:
ba:eb:88:41:78:5a:1c:52:e9:7d:70:56:de:48:0a:c4:23:bd:
9e:94:e0:54:48:8d:40:b5:ed:cf:dc:c0:17:68:fe:a2:9a:8a:
6c:2b:65:13:49:cb:91:e1:bc:a4:1f:3b:c6:eb:2d:e2:d3:7f:
60:f9:eb:0c:b2:09:0a:95:b8:48:98:37:d7:8a:3e:ce:7c:f3:
85:0e:2b:58:38:6a:5d:a3:a8:8f:33:eb:a1:3e:b6:e6:fc:85:
be:9c:68:14:df:bf:69:40:4b:5f:d1:7a:9b:f0:ba:cf:c0:6b:
19:60:db:3d:4f:07:23:27:63:de:cc:29:ed:7e:65:eb:41:dc:
f7:3d:ea:ba:bf:2d:81:2e:49:e5:47:1a:58:2f:52:d1:69:83:
21:26:fc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 07:46:51 2026 by rpki-client