Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
File: spIJTWkd9KfDjxa3VVfpwm1KxpI.mft (raw, json)
Hash identifier: niBSrRvvpI5qGvs5B2PbRA7y2o7EoCIR9M9NeSsDRQA=
Subject key identifier: EC:29:51:11:A2:A9:0A:EB:16:2A:E0:4C:12:5D:84:B2:1B:46:F3:C7
Authority key identifier: B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
Certificate issuer: /CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Certificate serial: 019EBCFE1401989246639B834AE7D39E85B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
Manifest number: 185E
Signing time: Fri 12 Jun 2026 18:00:28 +0000
Manifest this update: Fri 12 Jun 2026 18:00:28 +0000
Manifest next update: Sat 13 Jun 2026 18:00:28 +0000
Files and hashes: 1: 0E-nyOZ29zT4VlvH5MYeOKciQqI.roa (hash: n1KClvottVe9Rxjk6bmhkUknz6tneHeORGIxNcy3VKk=)
2: spIJTWkd9KfDjxa3VVfpwm1KxpI.crl (hash: arv40Li/7kkpBecSW2TbDNcSpHtKg33DK8ERQc1xTDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:fe:14:01:98:92:46:63:9b:83:4a:e7:d3:9e:85:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Validity
Not Before: Jun 12 18:00:28 2026 GMT
Not After : Jun 13 18:00:28 2026 GMT
Subject: CN=ec295111a2a90aeb162ae04c125d84b21b46f3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7d:70:81:ad:8a:ce:7d:8e:86:df:37:b5:f8:
77:bc:3e:77:1e:5d:1d:42:24:85:93:37:7b:25:4d:
70:c1:3e:6c:75:2b:0a:65:46:25:4c:e6:b6:86:fd:
55:97:21:da:02:48:1d:ba:cf:37:8e:e8:a9:8a:e4:
9c:f3:80:b7:9d:5c:e7:ab:0e:09:7c:c6:e3:10:db:
e2:b6:e9:63:01:9c:cf:86:5e:64:e7:23:92:64:d3:
1c:05:46:ea:65:b1:18:71:08:8d:9e:ab:10:9c:04:
44:0a:d3:f2:da:05:6e:b7:70:41:12:a5:79:49:b8:
a9:48:9f:8e:c6:24:b2:49:6b:a9:8a:7a:01:67:28:
23:bd:c5:c2:87:aa:4b:e1:e3:75:dd:c4:12:6e:4c:
b6:aa:2d:9d:e7:d4:8d:b4:69:f0:e3:58:f2:49:c9:
41:e4:12:8c:87:56:ad:46:17:4e:ea:5a:46:a6:5b:
98:d0:ee:e5:bf:22:d2:1a:ed:e9:cb:ea:96:cd:5c:
ae:0e:ff:9a:0c:8c:5d:49:e5:7d:83:e7:4e:34:b4:
8e:56:3d:5d:c0:b7:53:be:10:26:d7:dd:ec:39:47:
c9:3c:8a:2b:3c:7d:29:f9:f9:85:4f:cb:4d:fe:bf:
89:1b:9f:23:90:f5:d0:10:52:7d:d8:0a:c6:de:cd:
43:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:29:51:11:A2:A9:0A:EB:16:2A:E0:4C:12:5D:84:B2:1B:46:F3:C7
X509v3 Authority Key Identifier:
keyid:B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1a:c8:ac:61:8f:c1:28:17:f1:9e:0b:f2:47:b5:58:a7:cb:
92:86:ae:9d:f0:db:49:ac:85:9f:fb:b1:81:59:f6:27:e7:fc:
f0:d2:36:b5:35:bb:69:4c:23:12:12:47:86:6f:8e:a1:c7:d3:
43:70:00:54:66:12:79:d0:b8:50:56:17:46:64:b0:ab:16:8a:
58:39:75:ba:d6:c7:0f:8c:e9:fc:e9:b4:d5:76:95:c8:25:6e:
ef:1f:ed:a7:02:c9:fc:3c:59:9d:35:4a:5c:47:f5:cd:d6:47:
e9:d9:83:43:84:1c:91:84:df:32:60:28:14:02:f0:36:5a:55:
4e:cf:ec:c2:bb:c0:1c:77:6e:bb:59:c8:6d:fa:d4:b6:aa:12:
3b:b6:8a:87:29:9c:c5:1b:f4:bb:86:26:e3:ed:d3:62:9a:d9:
47:88:8f:bc:37:37:04:94:98:ba:92:6d:a0:99:f3:fa:64:a9:
6d:75:ea:04:22:a2:57:66:cb:42:6c:39:4a:fb:78:76:ff:d6:
50:23:3f:34:12:ff:7b:9b:19:de:e5:f6:74:1a:0c:55:fd:e4:
ed:ef:a8:88:b1:76:45:cd:0c:7f:72:69:79:51:6d:de:ad:0d:
7f:a2:b3:08:be:63:85:78:d9:4f:d2:fb:61:2b:05:e5:f9:39:
96:18:94:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 02:22:22 2026 by rpki-client