Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
File: spIJTWkd9KfDjxa3VVfpwm1KxpI.mft (raw, json)
Hash identifier: B27nkewr2sudxxvpiAUxPy+89LC78IuwqpanZ78uPiM=
Subject key identifier: A2:0B:2C:9D:26:1B:BE:D3:BB:B6:91:40:D4:39:A4:FF:C6:5A:F6:1F
Authority key identifier: B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
Certificate issuer: /CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Certificate serial: 019FA4BC1E05CE80239FB96F280A8B270FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
Manifest number: 18D6
Signing time: Mon 27 Jul 2026 18:00:19 +0000
Manifest this update: Mon 27 Jul 2026 18:00:19 +0000
Manifest next update: Tue 28 Jul 2026 18:00:19 +0000
Files and hashes: 1: 0E-nyOZ29zT4VlvH5MYeOKciQqI.roa (hash: n1KClvottVe9Rxjk6bmhkUknz6tneHeORGIxNcy3VKk=)
2: spIJTWkd9KfDjxa3VVfpwm1KxpI.crl (hash: sbT8l7UfcPyR6LrFeFvWYmlEhvF2jPh0mLjYVHjvMD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 18:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:bc:1e:05:ce:80:23:9f:b9:6f:28:0a:8b:27:0f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Validity
Not Before: Jul 27 18:00:19 2026 GMT
Not After : Jul 28 18:00:19 2026 GMT
Subject: CN=a20b2c9d261bbed3bbb69140d439a4ffc65af61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:26:62:14:cb:5d:5f:65:98:ce:2f:05:ab:b1:
62:c3:2f:47:c7:d1:50:d6:e8:63:0b:b0:b0:e9:5a:
76:c5:57:1f:89:b6:9f:6e:55:31:9b:0a:7c:b0:28:
63:e0:02:94:f5:b6:7a:d7:b1:52:54:60:b1:2d:32:
0d:9a:48:70:2a:10:00:3f:5e:cf:cc:72:83:8b:63:
30:3e:8b:33:15:b7:04:55:74:a4:eb:85:e9:9b:b2:
55:27:e0:ab:82:c7:4e:87:48:52:a4:37:8e:2f:b3:
12:0b:42:d9:da:4b:ea:90:4f:5a:93:3a:2c:1a:23:
76:43:9e:08:b9:6a:42:48:92:39:ef:05:45:83:a8:
8c:1e:9c:1e:c4:10:6f:74:88:61:d9:db:7c:a2:78:
4d:2e:89:a1:68:15:e9:ad:a2:54:11:19:27:52:e8:
2e:31:70:88:f6:91:13:b4:06:24:52:12:cf:b9:69:
c8:6e:66:2f:94:95:22:72:cf:a8:60:4e:08:2c:18:
3c:b7:dd:06:1e:8f:b3:ef:d1:0e:fd:5d:9d:b1:b4:
b5:36:20:45:f6:1b:0f:73:7b:79:b1:3c:c4:a7:48:
8f:5f:a3:94:5c:97:90:f6:0d:a9:81:ec:cd:1e:a5:
24:b2:f6:35:29:90:9f:2b:98:02:b2:98:b3:65:21:
de:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0B:2C:9D:26:1B:BE:D3:BB:B6:91:40:D4:39:A4:FF:C6:5A:F6:1F
X509v3 Authority Key Identifier:
keyid:B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:21:83:27:19:3d:da:45:7b:34:89:c8:19:50:86:f2:4f:3a:
aa:b3:89:80:bb:4d:1f:bb:02:f7:93:e4:45:41:f5:4d:d0:51:
3f:0c:a4:31:04:32:b1:ee:4b:78:8f:20:a6:af:2b:e9:b3:ae:
a2:9c:6f:d3:d7:d1:4c:52:46:82:a9:1b:23:33:18:af:89:1c:
9c:08:e4:29:56:39:f0:6f:04:08:6d:21:76:18:54:ad:b7:c7:
bc:5f:7a:aa:87:ac:07:41:9b:ab:a4:98:7f:ce:5f:c1:b2:7c:
c0:4b:7a:d9:ed:67:8d:f9:e8:c5:74:90:7b:ac:fc:2e:7c:8e:
51:75:62:d1:23:d1:32:d0:85:86:3f:1d:eb:da:59:3c:88:53:
58:3f:5a:5f:25:c5:44:2f:91:b9:a9:15:16:64:91:9a:72:9a:
4b:53:62:9c:20:f4:1b:3d:52:9f:2e:4f:47:bd:fb:fb:74:7f:
ca:6e:4e:ae:3e:47:6a:6b:da:c4:1b:3d:61:da:02:f7:51:ca:
78:19:c4:9d:7d:94:9b:1c:1b:57:4b:67:f2:f4:fe:e5:0d:40:
fd:27:50:5d:9d:6f:13:79:ab:1b:99:61:b8:81:65:29:bf:5b:
7b:9e:ad:12:a9:e5:d0:af:4f:24:ff:31:16:5c:73:1e:0a:af:
01:4f:5c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:34:27 2026 by rpki-client