Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json)
Hash identifier: /aDtfg+N8QDF+gPIV/1UVKASY/mXM+PRdqpqqPkw2AQ=
Subject key identifier: 63:BD:62:FD:F0:F5:43:5F:44:29:DB:E1:13:51:68:E3:91:55:1F:BA
Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Certificate serial: 019FCB26254F87F0585F0CB45981E465CF3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
Manifest number: 1977
Signing time: Tue 04 Aug 2026 05:01:42 +0000
Manifest this update: Tue 04 Aug 2026 05:01:42 +0000
Manifest next update: Wed 05 Aug 2026 05:01:42 +0000
Files and hashes: 1: IIlVo0fidTvQqKtqFi9ULMHfipo.roa (hash: kjOe1mZ+Dl42eBxnVxbtE/VrvseR8cEoFJ+of+SOdBo=)
2: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: 5CWXUKgK2JaHfhUtj5m/l1u7f4woNwPcWQDdlNEeFkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 05:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:26:25:4f:87:f0:58:5f:0c:b4:59:81:e4:65:cf:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Validity
Not Before: Aug 4 05:01:42 2026 GMT
Not After : Aug 5 05:01:42 2026 GMT
Subject: CN=63bd62fdf0f5435f4429dbe1135168e391551fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2e:61:60:36:0e:2f:c5:50:1b:17:aa:ef:0f:
5a:fe:a7:84:f6:45:17:55:06:03:83:a7:25:1e:10:
77:26:e2:f3:ff:dd:b6:7d:41:10:82:e4:60:f7:5d:
6f:c7:8a:47:65:75:56:cc:be:fe:4e:9f:d8:e4:66:
d3:9d:50:74:e3:38:32:d0:0f:26:22:70:62:95:e3:
39:d7:10:f4:29:37:6e:d7:43:a2:30:ee:bd:38:dd:
0e:f1:9d:03:76:5c:3e:05:ee:03:44:f0:72:4e:59:
fe:58:54:e8:0d:63:62:38:e1:ab:16:12:99:2e:a1:
3b:8e:93:b5:17:45:d1:32:66:17:8a:e0:98:1c:f6:
ac:ba:5d:33:31:e8:55:0e:3b:b1:e0:3c:11:02:87:
11:4a:37:61:98:e1:de:d7:27:26:f7:b0:c7:5b:33:
4d:15:f8:62:e5:92:29:72:49:c8:56:43:1e:20:bd:
3e:00:ab:34:95:17:97:f2:94:7e:95:15:43:b9:a7:
dd:41:3d:f0:a1:10:6d:b7:11:9e:01:bb:71:99:b6:
95:69:2b:dd:04:e5:49:ea:bd:7e:f3:dc:da:42:37:
39:c1:09:d2:ce:cd:55:38:d9:52:cb:eb:ce:9c:ed:
4d:0c:fa:7a:ce:db:ca:2f:5c:b4:c1:a7:1f:8d:fc:
1c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BD:62:FD:F0:F5:43:5F:44:29:DB:E1:13:51:68:E3:91:55:1F:BA
X509v3 Authority Key Identifier:
keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a0:8d:a3:e0:80:0b:ce:b0:8e:b0:95:1c:9e:b3:e5:83:ce:
92:e0:b3:30:61:e5:80:0b:17:dc:0c:c4:c9:52:85:07:9d:bf:
30:33:64:ba:31:a0:b2:46:b0:5e:eb:ae:3e:1b:2c:b1:78:b3:
c9:ba:79:c7:81:d1:03:64:6a:ea:82:c2:7d:d3:7d:4e:1c:11:
f7:d2:12:a3:43:04:1f:9a:c6:90:9f:2e:3b:58:c2:89:dc:ae:
12:05:a8:36:f8:bd:3b:86:78:ed:9c:40:72:34:6e:65:1e:1c:
93:bf:35:b3:35:fe:d9:95:99:40:b9:05:b3:cb:23:8a:f0:ca:
23:a6:62:f9:dd:2c:d9:1f:3e:9f:e0:0d:fe:90:bc:c5:9e:c8:
19:30:7f:28:dd:e8:1c:5d:a4:13:ba:6c:9e:ee:b6:a9:8f:cc:
f2:67:3b:f6:33:dc:7c:7a:54:c3:36:67:a7:0a:37:76:78:5c:
87:d9:83:fb:63:c3:56:4b:7c:e8:06:44:b6:7d:df:be:33:56:
c8:f5:1b:3e:a8:10:29:6e:39:10:e0:cf:37:15:db:03:70:14:
6b:48:f9:28:13:60:e2:46:b9:45:60:20:65:21:f1:13:19:d7:
8d:90:d7:50:a7:e1:90:6b:c7:98:7a:31:fe:ca:1a:0d:38:2f:
c0:f3:7d:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/LJiVPh/BYXwy0WYHkZc86MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOWRiMDBjYjE0YTM0YTE5M2Y4NGFjYTE0NGIyYWViMWYz
YzAyYzgwHhcNMjYwODA0MDUwMTQyWhcNMjYwODA1MDUwMTQyWjAzMTEwLwYDVQQD
Eyg2M2JkNjJmZGYwZjU0MzVmNDQyOWRiZTExMzUxNjhlMzkxNTUxZmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi5hYDYOL8VQGxeq7w9a/qeE9kUX
VQYDg6clHhB3JuLz/922fUEQguRg911vx4pHZXVWzL7+Tp/Y5GbTnVB04zgy0A8m
InBileM51xD0KTdu10OiMO69ON0O8Z0Ddlw+Be4DRPByTln+WFToDWNiOOGrFhKZ
LqE7jpO1F0XRMmYXiuCYHPasul0zMehVDjux4DwRAocRSjdhmOHe1ycm97DHWzNN
Ffhi5ZIpcknIVkMeIL0+AKs0lReX8pR+lRVDuafdQT3woRBttxGeAbtxmbaVaSvd
BOVJ6r1+89zaQjc5wQnSzs1VONlSy+vOnO1NDPp6ztvKL1y0wacfjfwc3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGO9Yv3w9UNfRCnb4RNRaOORVR+6MB8GA1UdIwQY
MBaAFEqdsAyxSjShk/hKyhRLKusfPALIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83NjEyYjAtM2UyNC00Y2U3LWExY2Et
YzFjNjYwNzhlNWJhLzEvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy83NjEyYjAtM2UyNC00Y2U3LWExY2EtYzFjNjYwNzhlNWJh
LzEvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6CNo+CA
C86wjrCVHJ6z5YPOkuCzMGHlgAsX3AzEyVKFB52/MDNkujGgskawXuuuPhsssXiz
ybp5x4HRA2Rq6oLCfdN9ThwR99ISo0MEH5rGkJ8uO1jCidyuEgWoNvi9O4Z47ZxA
cjRuZR4ck781szX+2ZWZQLkFs8sjivDKI6Zi+d0s2R8+n+AN/pC8xZ7IGTB/KN3o
HF2kE7psnu62qY/M8mc79jPcfHpUwzZnpwo3dnhch9mD+2PDVkt86AZEtn3fvjNW
yPUbPqgQKW45EODPNxXbA3AUa0j5KBNg4ka5RWAgZSHxExnXjZDXUKfhkGvHmHox
/soaDTgvwPN9Zw==
-----END CERTIFICATE-----
Generated at Tue Aug 4 13:40:56 2026 by rpki-client