Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
File: spIJTWkd9KfDjxa3VVfpwm1KxpI.mft (raw, json)
Hash identifier: RRhAFqlEPeAKVsGJezKPS1G21qOMv88fY4h5GTeMxRQ=
Subject key identifier: C7:F6:BC:5B:15:DE:C0:55:D1:23:F6:5E:65:D7:CD:58:15:76:D6:D2
Authority key identifier: B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
Certificate issuer: /CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Certificate serial: 019FA6AA8125767005050DCF57B6DFE1DA0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
Manifest number: 18D7
Signing time: Tue 28 Jul 2026 03:00:19 +0000
Manifest this update: Tue 28 Jul 2026 03:00:19 +0000
Manifest next update: Wed 29 Jul 2026 03:00:19 +0000
Files and hashes: 1: 0E-nyOZ29zT4VlvH5MYeOKciQqI.roa (hash: n1KClvottVe9Rxjk6bmhkUknz6tneHeORGIxNcy3VKk=)
2: spIJTWkd9KfDjxa3VVfpwm1KxpI.crl (hash: AmiUxN0iQU33TfJrp+CdkARvbrXG/5a/A2UC+f/nwHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 21:07:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a6:aa:81:25:76:70:05:05:0d:cf:57:b6:df:e1:da:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Validity
Not Before: Jul 28 03:00:19 2026 GMT
Not After : Jul 29 03:00:19 2026 GMT
Subject: CN=c7f6bc5b15dec055d123f65e65d7cd581576d6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d5:1d:db:20:f4:8a:70:ef:ef:f3:85:b5:cd:
93:ab:ca:16:1a:47:f6:45:db:24:86:c3:1f:ed:58:
53:8b:11:8a:3f:55:fc:5f:79:c2:17:88:8e:3f:d8:
01:00:36:c1:a8:7f:69:2f:d6:a9:c4:8b:28:fb:d1:
8f:2d:2a:1e:31:15:1e:09:52:ce:a9:a4:52:61:88:
2f:6b:a9:e3:f7:cd:5d:cc:40:c0:68:cf:99:9d:75:
3f:a5:86:72:a3:c6:53:cf:f6:f6:c4:95:72:0d:f6:
82:17:85:af:68:39:ce:82:31:dd:cb:d7:54:71:8c:
27:0e:6b:d0:26:fe:41:7b:29:18:e2:9b:31:d5:2e:
0f:b1:8b:ed:02:92:06:89:cc:96:23:b6:01:57:1c:
81:45:df:60:2e:2f:9a:91:b5:84:3f:ce:bc:8b:94:
9d:59:ea:7b:1d:ff:45:5f:7b:45:db:d1:8a:4d:fc:
ee:b7:15:da:42:6c:e7:c8:25:a9:bf:0a:0a:4e:ea:
28:82:ab:f9:a4:39:fd:33:87:72:5b:1a:35:e2:88:
cb:59:a3:e3:9c:be:0c:d2:f7:b7:42:b4:fe:8c:80:
1f:72:94:f6:dc:f3:b8:a0:67:23:a7:ce:41:72:63:
51:04:5d:c8:4a:5a:1e:03:8b:18:a4:eb:76:ec:a0:
7f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F6:BC:5B:15:DE:C0:55:D1:23:F6:5E:65:D7:CD:58:15:76:D6:D2
X509v3 Authority Key Identifier:
keyid:B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:2c:86:99:4d:c7:b7:79:1b:69:26:bf:3c:28:b5:ce:01:e2:
60:3a:d9:eb:f7:91:6e:9d:7b:2f:39:fe:d3:db:21:04:1c:33:
7f:f7:d3:d5:06:30:e5:ae:5b:62:83:73:5f:ee:3a:39:66:5b:
49:b1:97:80:91:fe:8f:21:02:79:72:bf:9b:21:fb:43:61:8e:
82:51:13:1b:69:43:55:bb:dc:0d:e2:fc:55:42:88:20:06:12:
a6:3b:8a:5a:a2:88:ef:8f:3c:d1:4a:fe:e6:29:ce:11:4b:b8:
69:95:2f:dd:c5:45:10:13:ed:8c:e3:81:a7:63:bc:7a:23:8d:
40:f3:a6:57:5e:f6:de:83:90:c8:70:de:2a:fb:38:57:ca:60:
53:40:83:bf:e2:27:7f:c7:f1:ca:79:83:14:ce:ac:f5:84:a0:
2b:fe:fe:06:b0:bb:13:11:f6:c8:15:e8:22:9c:c3:e9:1f:43:
46:44:8f:30:cf:d8:5f:62:7e:9f:79:50:f1:67:75:78:c5:e7:
24:d3:3f:fe:89:09:89:cb:3a:2c:7f:79:18:1a:5c:ab:6f:6f:
bc:f7:81:ac:d0:d1:dc:43:0f:d6:80:94:f3:ec:c5:9d:59:c7:
97:89:53:0c:fa:90:be:04:72:6d:83:16:bd:b4:93:cc:bc:07:
1a:4f:99:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+mqoEldnAFBQ3PV7bf4doNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyOTIwOTRkNjkxZGY0YTdjMzhmMTZiNzU1NTdlOWMyNmQ0
YWM2OTIwHhcNMjYwNzI4MDMwMDE5WhcNMjYwNzI5MDMwMDE5WjAzMTEwLwYDVQQD
EyhjN2Y2YmM1YjE1ZGVjMDU1ZDEyM2Y2NWU2NWQ3Y2Q1ODE1NzZkNmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NUd2yD0inDv7/OFtc2Tq8oWGkf2
RdskhsMf7VhTixGKP1X8X3nCF4iOP9gBADbBqH9pL9apxIso+9GPLSoeMRUeCVLO
qaRSYYgva6nj981dzEDAaM+ZnXU/pYZyo8ZTz/b2xJVyDfaCF4WvaDnOgjHdy9dU
cYwnDmvQJv5BeykY4psx1S4PsYvtApIGicyWI7YBVxyBRd9gLi+akbWEP868i5Sd
Wep7Hf9FX3tF29GKTfzutxXaQmznyCWpvwoKTuoogqv5pDn9M4dyWxo14ojLWaPj
nL4M0ve3QrT+jIAfcpT23PO4oGcjp85BcmNRBF3ISloeA4sYpOt27KB/owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMf2vFsV3sBV0SP2XmXXzVgVdtbSMB8GA1UdIwQY
MBaAFLKSCU1pHfSnw48Wt1VX6cJtSsaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3BJSlRXa2Q5S2ZEanhhM1ZWZnB3bTFLeHBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lN2I5MzItZmMyMS00YTYxLWFlZjAt
MTVhMDkzZTJiYjhmLzEvc3BJSlRXa2Q5S2ZEanhhM1ZWZnB3bTFLeHBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lN2I5MzItZmMyMS00YTYxLWFlZjAtMTVhMDkzZTJiYjhm
LzEvc3BJSlRXa2Q5S2ZEanhhM1ZWZnB3bTFLeHBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALyyGmU3H
t3kbaSa/PCi1zgHiYDrZ6/eRbp17Lzn+09shBBwzf/fT1QYw5a5bYoNzX+46OWZb
SbGXgJH+jyECeXK/myH7Q2GOglETG2lDVbvcDeL8VUKIIAYSpjuKWqKI74880Ur+
5inOEUu4aZUv3cVFEBPtjOOBp2O8eiONQPOmV1723oOQyHDeKvs4V8pgU0CDv+In
f8fxynmDFM6s9YSgK/7+BrC7ExH2yBXoIpzD6R9DRkSPMM/YX2J+n3lQ8Wd1eMXn
JNM//okJics6LH95GBpcq29vvPeBrNDR3EMP1oCU8+zFnVnHl4lTDPqQvgRybYMW
vbSTzLwHGk+ZLg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 04:41:31 2026 by rpki-client