Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft
File: SPWbrFHUhS0vyW6LTPu5__i0qTk.mft (raw, json)
Hash identifier: 3jj4pzIsb/d/11M0tmILH0tX7dPPnpUU3jOBV0e0Kwo=
Subject key identifier: D3:04:D0:54:1B:B0:DA:64:48:1B:CA:E5:3F:F9:52:F2:89:F9:32:5D
Authority key identifier: 48:F5:9B:AC:51:D4:85:2D:2F:C9:6E:8B:4C:FB:B9:FF:F8:B4:A9:39
Certificate issuer: /CN=48f59bac51d4852d2fc96e8b4cfbb9fff8b4a939
Certificate serial: 019D38D2C535A212A72902B4E48B74B276DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft
Manifest number: 1637
Signing time: Sun 29 Mar 2026 09:00:30 +0000
Manifest this update: Sun 29 Mar 2026 09:00:30 +0000
Manifest next update: Mon 30 Mar 2026 09:00:30 +0000
Files and hashes: 1: FHtQNrQOfizQjvpxizt5OLW0SC4.roa (hash: oak0eNWy1cfTGmlGpcII2x2ElgyncsNilePzPotJ0B4=)
2: SPWbrFHUhS0vyW6LTPu5__i0qTk.crl (hash: 1KZE9d18vdOgI4msZi/NiB/O6YyqvPWIHaWnGKz0gxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:c5:35:a2:12:a7:29:02:b4:e4:8b:74:b2:76:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f59bac51d4852d2fc96e8b4cfbb9fff8b4a939
Validity
Not Before: Mar 29 09:00:30 2026 GMT
Not After : Mar 30 09:00:30 2026 GMT
Subject: CN=d304d0541bb0da64481bcae53ff952f289f9325d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:24:2c:bc:ea:8a:a2:58:a7:3e:34:46:4f:
da:a7:6a:e5:9a:59:f1:b2:c1:0a:b4:a1:78:1e:de:
97:b3:22:14:04:be:2e:11:19:ff:02:eb:b9:78:1e:
23:79:ab:ed:d8:0d:50:4c:15:ab:a8:d7:d6:c8:fc:
aa:bd:56:77:43:54:69:3e:cf:33:8f:0f:89:c0:3d:
f1:a9:cc:65:ff:40:89:4d:3e:70:b0:e7:03:d0:d4:
22:57:52:b5:5e:78:18:a0:3a:ba:fd:10:5d:54:79:
36:84:d1:8a:99:da:64:74:16:97:3b:c0:c9:91:6c:
7b:a8:d7:5f:e5:71:2c:8d:a1:a1:2c:18:43:89:b9:
ed:a2:a8:3d:fa:9d:c0:b0:f5:7a:9b:07:d1:34:4c:
65:d2:23:1f:54:40:84:21:20:26:30:5f:86:4a:0d:
bb:7b:ff:31:b4:ce:07:3c:bd:e2:b4:0e:69:90:95:
1d:bd:7b:ec:1c:03:95:d2:f7:8f:60:1b:e8:e5:76:
41:b9:a9:86:67:d6:b5:4b:18:e1:98:01:7f:d4:dc:
39:32:c4:f7:c6:28:02:6b:d4:2a:79:95:93:fd:a3:
38:bb:55:80:d1:b1:76:b5:fb:30:c8:d9:b6:64:17:
3c:06:5c:6b:13:ba:2c:d3:ba:a0:62:2a:d8:b3:00:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:04:D0:54:1B:B0:DA:64:48:1B:CA:E5:3F:F9:52:F2:89:F9:32:5D
X509v3 Authority Key Identifier:
keyid:48:F5:9B:AC:51:D4:85:2D:2F:C9:6E:8B:4C:FB:B9:FF:F8:B4:A9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:6c:a0:66:b2:26:03:ae:16:16:61:76:56:80:06:bb:49:39:
71:ac:37:a3:f4:04:b1:a6:f0:d2:33:52:b3:2a:2a:65:b8:23:
80:31:1a:c1:3c:98:68:07:0c:82:16:1e:44:f3:fc:21:c8:f7:
73:7e:95:80:bd:ae:1d:ca:4b:1b:70:06:91:e2:23:4f:4d:ad:
c6:f9:a3:86:4e:1f:34:7f:73:65:29:d0:fd:88:29:54:b8:ec:
1e:8d:78:ff:59:a4:fb:64:ad:be:ab:99:be:ae:60:31:b0:29:
0d:5b:5d:7c:13:8a:2c:f8:53:3a:af:23:82:56:b7:ca:ef:a0:
3e:8a:bf:d7:9f:44:d9:1d:52:ed:5f:0f:cf:83:d9:57:93:ff:
f7:41:83:57:51:16:46:aa:08:6d:a7:fe:7e:ef:19:2d:01:c7:
88:8a:2b:8d:74:ca:83:91:b7:b0:2b:94:08:d3:52:67:05:68:
b7:c1:e5:48:dd:10:dc:03:61:42:4b:ab:cf:a9:91:75:0e:e5:
07:3d:b8:d9:b6:01:be:c9:8b:a2:79:98:44:05:db:d0:cd:94:
6b:c7:21:92:7a:c0:2c:a9:1c:2b:4c:35:82:c5:f8:ed:38:d6:
da:9e:b7:a0:da:fd:50:36:2c:0b:72:ee:1a:75:a0:78:36:03:
49:70:c6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:29 2026 by rpki-client