Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json)
Hash identifier: b/P34cMr1nVMeWqAFBq897pMHurhJpGZ3WdyXoJ6o+s=
Subject key identifier: 90:D8:14:22:18:13:1B:A9:6D:53:0F:67:C5:55:3C:D8:BF:D2:B2:F0
Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Certificate serial: 019EE367DE17FE17E5EAE5D87C273AAD5434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
Manifest number: 18FF
Signing time: Sat 20 Jun 2026 05:01:35 +0000
Manifest this update: Sat 20 Jun 2026 05:01:35 +0000
Manifest next update: Sun 21 Jun 2026 05:01:35 +0000
Files and hashes: 1: IIlVo0fidTvQqKtqFi9ULMHfipo.roa (hash: kjOe1mZ+Dl42eBxnVxbtE/VrvseR8cEoFJ+of+SOdBo=)
2: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: CJN35yqPbSR/Xl2p4mUl1bcwKGFnREGmcZT9YFyIHHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e3:67:de:17:fe:17:e5:ea:e5:d8:7c:27:3a:ad:54:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Validity
Not Before: Jun 20 05:01:35 2026 GMT
Not After : Jun 21 05:01:35 2026 GMT
Subject: CN=90d8142218131ba96d530f67c5553cd8bfd2b2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cf:ff:08:21:05:de:86:54:fe:69:3c:a3:24:
2b:ec:ea:4c:e5:78:ce:cd:7f:71:5f:b4:e9:01:6a:
79:d3:6a:f5:ed:46:8d:ec:5a:f8:5f:1e:e4:ea:74:
fc:27:a0:b5:e6:91:7c:0c:7c:f3:11:e0:aa:a2:9d:
72:1b:d9:3f:c4:2b:f7:2b:0d:8d:d2:78:2c:3b:f0:
03:cb:5f:ea:36:ff:e8:52:c3:b4:a3:45:11:12:e3:
15:87:c7:e2:ab:19:ff:7a:35:1c:5b:1b:0d:ed:5f:
10:dd:7e:bb:e0:bc:5e:c4:89:df:88:26:dd:95:46:
3e:47:fd:b2:5b:d3:d7:b2:78:32:65:c3:12:45:4c:
3d:b5:ed:a3:c3:d0:12:b8:76:91:f2:88:cd:40:c7:
71:b3:40:dd:08:90:ec:91:f1:a8:02:06:c9:1b:cf:
e1:59:a1:19:55:2c:d9:64:2f:dc:90:fd:d5:98:53:
08:f2:a8:dc:89:c0:54:14:a5:b3:0b:5f:df:ae:c5:
b5:3f:e0:ca:a8:de:d0:1a:71:59:bd:1a:49:82:6f:
98:b6:a9:3e:8d:6a:fe:7f:ce:47:88:27:da:36:81:
99:f8:06:87:5c:94:ac:ba:5d:19:cb:32:f2:ea:87:
9c:e6:02:b5:4f:06:d7:81:2f:21:59:33:e9:10:6a:
cb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D8:14:22:18:13:1B:A9:6D:53:0F:67:C5:55:3C:D8:BF:D2:B2:F0
X509v3 Authority Key Identifier:
keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2e:81:65:b6:f1:c6:ae:98:bd:b8:91:0e:11:e0:b6:37:26:
e0:41:f8:6c:25:a6:17:bc:99:16:7f:82:09:b4:8b:30:39:41:
c2:7a:2e:89:77:ef:5d:88:28:54:f4:2b:1d:51:f8:52:0c:3f:
ff:64:f5:af:97:71:df:c9:b3:a2:b8:60:0b:5e:46:3b:74:28:
3b:18:42:f5:ef:e8:b2:63:dd:0d:51:22:7f:ba:29:c4:9f:fc:
b8:59:56:9f:69:98:c9:b9:04:cd:98:9f:1b:0b:c3:c0:be:27:
63:9e:18:cc:10:d1:b1:0c:00:9a:1e:8e:52:d1:f6:fa:c2:2b:
e2:7e:33:ad:7e:54:96:75:d6:cb:02:26:85:6d:e7:1a:c9:6a:
45:53:db:84:68:4f:b5:ef:67:d8:f3:e7:b5:d4:e0:14:94:c3:
e9:78:48:7b:98:e2:fa:30:1b:54:45:da:6c:3d:ab:6a:8e:a9:
5d:42:6f:76:eb:11:84:8a:a8:1b:15:91:f8:75:8b:63:2d:04:
08:3f:a6:6a:7b:98:4e:ad:f0:a6:ff:f6:49:01:d8:af:28:2f:
1f:1e:97:02:b2:81:de:cf:92:36:1b:ad:0e:fc:b2:58:07:5b:
32:b1:90:6e:be:82:38:46:e2:4b:db:b7:8c:c3:01:9e:df:37:
ed:9c:25:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:05:07 2026 by rpki-client