Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
File: spIJTWkd9KfDjxa3VVfpwm1KxpI.mft (raw, json)
Hash identifier: zOvloS0gV773Goh5CHNFF4DpH1fnsIup3NnBIrhnd+w=
Subject key identifier: D6:25:18:F3:7F:79:8D:C3:6B:47:4F:54:3F:ED:55:B7:4A:7E:06:05
Authority key identifier: B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
Certificate issuer: /CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Certificate serial: 01A09057529E8B4740CE6867915A2BBB7FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
Manifest number: 1950
Signing time: Fri 11 Sep 2026 12:00:36 +0000
Manifest this update: Fri 11 Sep 2026 12:00:36 +0000
Manifest next update: Sat 12 Sep 2026 12:00:36 +0000
Files and hashes: 1: 0E-nyOZ29zT4VlvH5MYeOKciQqI.roa (hash: n1KClvottVe9Rxjk6bmhkUknz6tneHeORGIxNcy3VKk=)
2: spIJTWkd9KfDjxa3VVfpwm1KxpI.crl (hash: JUurB4WP11dpa8X801PTVZhK3fPhQyBzP0l3TVeB3iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:57:52:9e:8b:47:40:ce:68:67:91:5a:2b:bb:7f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Validity
Not Before: Sep 11 12:00:36 2026 GMT
Not After : Sep 12 12:00:36 2026 GMT
Subject: CN=d62518f37f798dc36b474f543fed55b74a7e0605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:ab:5c:b5:df:66:86:8c:89:44:e9:f3:49:
7a:d4:c5:af:96:0e:a5:ad:21:db:30:d9:81:67:59:
36:02:c2:c8:e6:ec:42:49:65:b3:4b:3b:49:62:ab:
bc:2a:b2:36:07:fa:f4:fd:5a:53:1e:7c:85:26:db:
c5:f4:f0:d3:c0:52:76:a7:83:81:b8:41:8d:c3:b3:
ce:69:ff:3d:80:87:61:b6:0d:79:b0:a2:b3:ff:53:
2c:a0:1f:ff:fd:a1:1b:e5:a1:fc:82:29:5c:ab:ca:
35:e8:0a:d7:a9:80:c3:ed:ac:a8:22:e3:16:9c:a4:
63:ff:2b:5a:0f:c2:70:08:d0:4d:4b:f9:ec:c6:fd:
6d:1d:99:7c:41:d6:80:c4:ef:c9:86:ab:3d:93:10:
ae:c1:6d:40:6a:46:91:46:c1:32:6e:01:9f:69:ab:
af:0a:cb:7b:74:d0:ab:af:4c:18:10:75:b8:af:80:
89:da:a3:b2:66:fa:f1:25:28:54:7e:92:b3:38:b8:
64:d1:f8:43:21:83:4c:b4:26:b3:fc:ab:6c:93:91:
5a:f6:52:90:31:e3:c0:4e:55:42:d8:08:a0:73:29:
64:46:8e:2f:e4:4d:be:bc:4b:07:1a:3d:57:24:1d:
79:77:fd:fc:96:b5:ae:75:d2:0a:d9:2c:52:de:5f:
27:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:25:18:F3:7F:79:8D:C3:6B:47:4F:54:3F:ED:55:B7:4A:7E:06:05
X509v3 Authority Key Identifier:
keyid:B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8c:0a:f0:95:fe:65:4d:04:07:2d:97:85:d5:fd:08:19:be:
dc:44:51:7f:01:21:12:e9:7a:ec:68:0b:0a:18:88:b3:77:09:
e7:06:a3:44:b5:62:c3:c7:dc:f8:37:66:41:9b:ce:e6:24:ee:
13:a5:ca:b7:ad:ec:4e:75:e3:cd:4c:da:c3:ca:cf:2d:bd:f5:
af:06:94:91:97:5c:59:d2:cb:a4:89:22:86:85:87:ac:9e:8e:
d9:70:16:e5:90:ea:44:63:bb:b8:fe:5f:9a:95:32:9f:b9:44:
5b:87:af:82:c5:75:09:1e:9b:bb:2c:52:3c:f1:c8:73:fb:80:
06:75:40:47:af:dc:a2:8f:79:13:92:ba:87:8a:cf:18:50:5d:
91:42:01:47:d5:6f:11:70:2b:a1:3b:41:82:32:fa:30:cb:be:
23:6f:69:a6:74:0d:5f:1d:97:d7:32:40:7e:34:76:70:bc:62:
8b:92:b6:b5:43:92:97:05:a4:ac:2b:fb:ef:d4:c1:b4:98:3e:
10:63:ed:1a:48:93:84:0a:9c:b2:2a:92:50:bf:96:58:0f:46:
6a:31:12:99:66:5d:d7:b3:5f:4d:61:9e:a7:f2:2f:6a:da:2b:
d1:25:22:a8:79:cb:03:51:1e:4f:c6:f2:0e:e3:05:08:43:71:
6c:07:d4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 17:05:39 2026 by rpki-client