Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft
File: SpR3QFKci4QPf4kzCXmshyyj-rg.mft (raw, json)
Hash identifier: Czi1nDwlam9qvWp9tc7up5DShmuLzcfWgnSwl2n9jcA=
Subject key identifier: D9:45:18:0A:28:4B:40:C4:B0:0E:FC:62:0C:B4:A4:63:16:76:0A:8A
Authority key identifier: 4A:94:77:40:52:9C:8B:84:0F:7F:89:33:09:79:AC:87:2C:A3:FA:B8
Certificate issuer: /CN=4a947740529c8b840f7f89330979ac872ca3fab8
Certificate serial: 019D3865629416967AC9A41AC6BF47182DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SpR3QFKci4QPf4kzCXmshyyj-rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft
Manifest number: 0439
Signing time: Sun 29 Mar 2026 07:01:01 +0000
Manifest this update: Sun 29 Mar 2026 07:01:01 +0000
Manifest next update: Mon 30 Mar 2026 07:01:01 +0000
Files and hashes: 1: SpR3QFKci4QPf4kzCXmshyyj-rg.crl (hash: XR5h64uCVJtzInYaH6gqQv/eJhibVpiDCze0Yp09yeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SpR3QFKci4QPf4kzCXmshyyj-rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:62:94:16:96:7a:c9:a4:1a:c6:bf:47:18:2d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a947740529c8b840f7f89330979ac872ca3fab8
Validity
Not Before: Mar 29 07:01:01 2026 GMT
Not After : Mar 30 07:01:01 2026 GMT
Subject: CN=d945180a284b40c4b00efc620cb4a46316760a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d7:a1:20:cd:b2:f6:8e:76:fb:ad:f1:74:18:
61:dc:75:9b:d9:cc:4c:2d:64:bd:c9:a6:0f:39:45:
92:78:fb:74:d1:67:22:41:fc:49:89:08:09:74:27:
4d:07:33:44:2c:b1:b2:8f:ba:fb:18:c9:73:d8:0d:
6c:d2:65:94:0a:8f:29:4f:d3:6a:92:49:8f:18:cc:
13:e4:3e:07:77:2f:9b:d9:ec:aa:31:ac:c5:d0:e6:
88:66:37:2e:2d:59:80:71:bd:be:58:75:43:04:1d:
6f:ce:aa:09:32:b0:5a:fc:90:30:40:c6:48:5c:f3:
3c:f9:72:12:4e:49:3a:5f:9c:2d:60:b1:18:5c:e1:
1e:13:07:ce:b3:eb:e1:79:f0:5b:d0:67:22:e3:b4:
17:3a:ba:db:59:6e:60:f3:59:af:00:cd:9b:4c:a7:
c5:30:05:99:da:36:3c:07:ae:1c:d7:19:7c:cd:18:
84:25:93:f6:23:62:3b:1e:c5:e9:84:74:4e:8d:78:
c0:36:9a:c6:45:23:a0:37:68:fd:07:99:01:30:57:
29:7f:64:19:99:32:2c:47:14:e7:21:a9:6d:96:cb:
c0:54:eb:c1:aa:70:17:39:a0:f7:b6:77:e7:2b:2c:
9c:4d:80:16:aa:bc:09:13:e1:8c:cd:47:6e:7e:09:
ca:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:45:18:0A:28:4B:40:C4:B0:0E:FC:62:0C:B4:A4:63:16:76:0A:8A
X509v3 Authority Key Identifier:
keyid:4A:94:77:40:52:9C:8B:84:0F:7F:89:33:09:79:AC:87:2C:A3:FA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SpR3QFKci4QPf4kzCXmshyyj-rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8f:b7:21:ab:8e:bf:01:83:d7:7d:00:e0:81:90:35:6c:f3:
fb:0a:00:52:5a:ab:b7:61:7c:aa:50:91:88:8c:e9:76:e6:42:
0f:4f:22:24:18:91:d0:d7:74:39:23:2f:e9:69:66:e7:1e:9f:
5f:ac:46:b7:e6:4a:57:90:be:53:ed:b3:b5:b1:10:23:e6:74:
2c:75:fe:11:20:73:d8:7b:48:6a:fa:e2:f8:d1:d9:34:17:fd:
da:73:4c:00:75:7f:5a:ff:6b:2d:98:2c:3e:8e:fa:3f:83:6b:
b4:cc:cf:e3:58:30:8e:38:2c:e0:a3:fc:fc:50:96:76:37:90:
dd:ed:53:30:54:89:b8:8f:3b:be:fb:dd:b3:3b:4e:a7:56:61:
21:22:8e:a9:dd:83:46:c8:d4:07:c8:0f:11:e0:ff:d8:88:f7:
5b:bf:fd:a3:e9:7f:00:01:b8:86:95:b6:a8:f9:eb:13:b6:e4:
32:aa:3b:9f:2c:e7:57:94:f2:af:c5:1a:06:d1:5d:00:56:98:
c9:5d:80:ee:44:55:c6:34:3e:34:41:cb:c1:ed:de:28:48:3d:
79:a7:38:9d:1d:b7:83:b3:e0:a2:92:9d:8b:f4:1a:0c:df:9f:
01:23:2d:f5:16:6f:b0:74:c5:6d:b3:bc:f7:68:8a:1d:cd:64:
07:af:ee:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZWKUFpZ6yaQaxr9HGC2jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOTQ3NzQwNTI5YzhiODQwZjdmODkzMzA5NzlhYzg3MmNh
M2ZhYjgwHhcNMjYwMzI5MDcwMTAxWhcNMjYwMzMwMDcwMTAxWjAzMTEwLwYDVQQD
EyhkOTQ1MTgwYTI4NGI0MGM0YjAwZWZjNjIwY2I0YTQ2MzE2NzYwYThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59ehIM2y9o52+63xdBhh3HWb2cxM
LWS9yaYPOUWSePt00WciQfxJiQgJdCdNBzNELLGyj7r7GMlz2A1s0mWUCo8pT9Nq
kkmPGMwT5D4Hdy+b2eyqMazF0OaIZjcuLVmAcb2+WHVDBB1vzqoJMrBa/JAwQMZI
XPM8+XISTkk6X5wtYLEYXOEeEwfOs+vhefBb0Gci47QXOrrbWW5g81mvAM2bTKfF
MAWZ2jY8B64c1xl8zRiEJZP2I2I7HsXphHROjXjANprGRSOgN2j9B5kBMFcpf2QZ
mTIsRxTnIaltlsvAVOvBqnAXOaD3tnfnKyycTYAWqrwJE+GMzUdufgnKawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlFGAooS0DEsA78Ygy0pGMWdgqKMB8GA1UdIwQY
MBaAFEqUd0BSnIuED3+JMwl5rIcso/q4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3BSM1FGS2NpNFFQZjRrekNYbXNoeXlqLXJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lOTBkNmItNTJlMC00MTk1LTg4YWYt
N2RiMjVhZDdjZDRjLzEvU3BSM1FGS2NpNFFQZjRrekNYbXNoeXlqLXJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9lOTBkNmItNTJlMC00MTk1LTg4YWYtN2RiMjVhZDdjZDRj
LzEvU3BSM1FGS2NpNFFQZjRrekNYbXNoeXlqLXJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4+3IauO
vwGD130A4IGQNWzz+woAUlqrt2F8qlCRiIzpduZCD08iJBiR0Nd0OSMv6Wlm5x6f
X6xGt+ZKV5C+U+2ztbEQI+Z0LHX+ESBz2HtIavri+NHZNBf92nNMAHV/Wv9rLZgs
Po76P4NrtMzP41gwjjgs4KP8/FCWdjeQ3e1TMFSJuI87vvvdsztOp1ZhISKOqd2D
RsjUB8gPEeD/2Ij3W7/9o+l/AAG4hpW2qPnrE7bkMqo7nyznV5Tyr8UaBtFdAFaY
yV2A7kRVxjQ+NEHLwe3eKEg9eac4nR23g7PgopKdi/QaDN+fASMt9RZvsHTFbbO8
92iKHc1kB6/uyQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:42 2026 by rpki-client