Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json)
Hash identifier: Scou0pZvUD49nEtCI73zjuSRxTi9LSkgHPQkIEk3/aA=
Subject key identifier: 3A:3B:29:F4:DB:DD:44:C8:D7:8A:9D:99:2A:E0:82:CC:30:F2:D6:A2
Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Certificate serial: 019DDEB146A069E4E5A7C42AD422C5B30862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
Manifest number: 1878
Signing time: Thu 30 Apr 2026 14:00:52 +0000
Manifest this update: Thu 30 Apr 2026 14:00:52 +0000
Manifest next update: Fri 01 May 2026 14:00:52 +0000
Files and hashes: 1: IIlVo0fidTvQqKtqFi9ULMHfipo.roa (hash: kjOe1mZ+Dl42eBxnVxbtE/VrvseR8cEoFJ+of+SOdBo=)
2: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: BZmEqVgrSg5sh2gph3PcFNsIsMYKswRzGNR6B0oN7iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:b1:46:a0:69:e4:e5:a7:c4:2a:d4:22:c5:b3:08:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Validity
Not Before: Apr 30 14:00:52 2026 GMT
Not After : May 1 14:00:52 2026 GMT
Subject: CN=3a3b29f4dbdd44c8d78a9d992ae082cc30f2d6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b9:67:c3:b5:e6:9b:4e:5e:6f:5b:da:5e:b0:
db:79:9a:0b:6d:52:96:bf:3d:78:33:91:2b:7e:08:
83:ba:cc:a7:f7:6e:98:9f:2b:c7:5a:e3:88:a8:4c:
27:51:54:5e:d4:f8:2e:7b:d5:45:55:cf:c6:f1:2d:
17:80:68:a5:73:74:9a:9d:2f:b9:44:9a:27:db:85:
79:71:1f:94:1c:1a:79:04:ed:0c:74:6d:1d:e4:1f:
f7:d9:b8:7a:db:00:bc:29:72:c0:af:cf:1a:11:27:
c8:78:9b:45:34:80:23:2f:df:1f:f3:35:ad:2f:36:
ca:0e:d7:c2:10:d7:7c:1a:c5:92:08:b8:d1:e3:a1:
40:82:34:8b:01:03:de:d7:20:37:0a:4c:b5:b7:55:
e1:8e:af:5d:4f:69:0f:b4:d3:e1:04:ff:99:1e:cb:
f8:b3:31:d5:24:c4:c7:4d:77:03:1f:e8:b0:51:80:
e3:d0:79:50:2c:6a:b5:b5:54:6b:71:39:b6:db:e1:
15:ec:0c:d5:e9:38:34:21:8c:8a:6c:b1:ca:4b:ce:
cf:6c:d8:b9:74:ae:2d:21:11:55:28:af:7d:4c:c5:
ee:b6:41:ca:91:d7:23:c4:5d:4b:91:3f:4d:ae:fc:
48:4c:c6:34:09:d7:50:d9:f1:e3:94:f1:d0:ce:d1:
5f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3B:29:F4:DB:DD:44:C8:D7:8A:9D:99:2A:E0:82:CC:30:F2:D6:A2
X509v3 Authority Key Identifier:
keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1f:18:8b:10:92:e5:ac:8d:09:2d:da:a7:09:c8:b3:19:2a:
d1:8d:4e:4a:33:81:25:b7:3e:f9:c7:ce:58:2c:8d:c3:f1:ac:
a3:39:37:96:f1:cf:c6:49:b5:a9:aa:e8:f5:89:27:a2:f6:1e:
73:d8:72:a9:17:d4:f3:8f:a2:86:56:c3:18:69:f0:4e:e4:c4:
03:88:fd:06:cb:cc:44:fd:87:61:9e:d7:08:0b:8d:8d:f6:0f:
8e:ab:2e:45:f7:d2:f0:4d:61:4d:37:fa:ff:8f:32:7a:da:2e:
80:8d:b9:12:d1:b9:c4:79:bc:4b:15:96:96:16:5b:da:f3:7a:
1d:08:3b:9e:d8:5b:eb:46:94:80:75:f3:c0:f5:fa:15:4c:53:
14:a8:dd:85:c4:90:56:6e:78:10:06:5b:6f:c0:30:1f:08:26:
70:a7:c4:8b:14:05:77:90:56:be:60:f5:d6:e7:5d:a6:a7:0e:
34:38:5c:2a:f8:d3:ed:b9:62:0b:2a:f5:a6:25:ab:b1:bb:31:
08:51:f2:d2:a1:fa:f0:9d:c5:6b:2e:ac:bb:9a:72:a4:e5:12:
88:74:0a:07:c9:63:39:1f:63:4c:7a:47:ef:4d:a6:03:95:1f:
7a:fa:1c:a0:29:39:96:f7:0d:c7:31:6b:c8:e8:e8:26:a3:a1:
cd:98:bf:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 21:25:45 2026 by rpki-client