Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
File: Sp0WbGSEc4ly6bM5OBZfRImlFow.mft (raw, json)
Hash identifier: UF8sJbd+9+0AI1JzYG6bCtylS2JXGBSMaBw7YPLU2p0=
Subject key identifier: 21:E2:77:08:75:D7:B7:53:CB:52:63:E2:FB:59:E6:C7:D9:02:33:33
Authority key identifier: 4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
Certificate issuer: /CN=4a9d166c6484738972e9b33938165f4489a5168c
Certificate serial: 01A175F09DD89C732E1A3AFFDC7AEDA8FBA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
Manifest number: 0E38
Signing time: Mon 26 Oct 2026 02:01:05 +0000
Manifest this update: Mon 26 Oct 2026 02:01:05 +0000
Manifest next update: Tue 27 Oct 2026 02:01:05 +0000
Files and hashes: 1: Sp0WbGSEc4ly6bM5OBZfRImlFow.crl (hash: Iyl/ZVnN4yrafq7QA/Db4Q0SrloM9Okawtju6IYdv84=)
2: ZyKblhYof-lvzcG5wAYzbAd36M4.roa (hash: Ov+QQPf43TIV3qdCbGiYFnfp3OquF/Rfa6pgoiI/wlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:f0:9d:d8:9c:73:2e:1a:3a:ff:dc:7a:ed:a8:fb:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9d166c6484738972e9b33938165f4489a5168c
Validity
Not Before: Oct 26 02:01:05 2026 GMT
Not After : Oct 27 02:01:05 2026 GMT
Subject: CN=21e2770875d7b753cb5263e2fb59e6c7d9023333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:fb:be:3f:fc:5e:26:d1:86:83:eb:37:06:
02:73:9e:6f:e9:96:9d:32:d0:ff:08:76:ed:18:3f:
c0:2b:6d:1c:b4:ed:ea:6c:00:c5:14:ef:78:e3:93:
b7:d8:d4:37:65:da:26:19:ec:69:f2:94:7c:53:d6:
09:08:20:62:f9:8e:f2:45:7f:9e:3f:46:0c:4b:c1:
80:5c:1f:c8:00:a0:b2:5c:c5:9d:4e:20:82:fc:66:
8a:01:06:d7:66:56:22:eb:20:5f:97:8d:36:9b:36:
68:d4:64:5a:62:36:81:6a:ef:92:4b:65:81:d3:76:
b1:c9:c0:36:5c:66:34:bc:34:ac:b6:cc:c0:44:d0:
29:71:48:1a:85:76:2c:a0:7a:f4:f5:8f:36:9a:52:
74:6f:1e:0c:2d:cd:4f:96:b6:db:ea:88:64:1f:d9:
f6:3a:68:38:33:73:f1:87:af:3c:33:23:03:b0:7b:
07:19:d1:7b:c3:14:77:5e:1b:2e:45:3f:82:c4:70:
42:6e:e4:ab:cc:1a:94:97:4a:40:b8:c6:24:cf:d4:
14:11:f6:fd:60:a8:4b:05:f5:f7:a2:05:b1:f7:f3:
7f:c3:c2:37:8a:cf:a2:f6:1a:ad:43:a2:b5:9a:0c:
da:2b:69:85:5f:a4:dd:73:65:3c:04:39:4b:a1:8c:
e2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E2:77:08:75:D7:B7:53:CB:52:63:E2:FB:59:E6:C7:D9:02:33:33
X509v3 Authority Key Identifier:
keyid:4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:71:d1:29:0d:88:ce:71:10:43:67:d6:92:4a:11:d8:5e:31:
fe:c0:d2:8f:23:48:13:3e:2f:73:86:f3:4c:25:bb:a9:49:19:
c1:a9:d1:f5:0b:b8:54:b0:12:52:fb:bc:2b:63:4d:cb:a2:a3:
22:76:9d:a0:85:6d:1a:17:46:73:c4:bb:a8:6d:26:8a:38:e5:
c0:5d:a1:d4:7d:5c:6a:70:d1:e0:d4:09:2f:f0:28:24:b2:b8:
33:4f:25:51:66:e6:13:a1:d4:a4:10:7f:bd:5f:30:2f:73:e6:
3b:a0:f1:dc:93:71:e4:fa:91:3c:7f:d6:18:b3:fc:1a:4d:8e:
84:9f:a3:04:8b:70:04:25:f4:e6:53:27:09:8e:e5:7d:3a:89:
d9:2c:ce:89:82:ab:64:5d:d0:87:e7:b9:5b:2e:f6:84:78:64:
56:42:28:2a:75:a0:31:a9:a9:94:27:9f:6d:ca:28:fa:58:4a:
67:35:84:25:88:62:15:53:ce:a3:22:74:84:57:42:25:84:ce:
88:d8:71:cd:06:0a:a5:4a:c7:b5:3c:94:9a:fb:b5:42:e1:9a:
1a:5b:83:7c:67:d7:2b:47:2c:be:52:79:b3:6a:e7:7a:2b:45:
0d:4d:6c:40:67:48:a4:3d:6c:3b:4f:41:c2:d9:50:cc:a5:d2:
e2:3e:9a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:00:25 2026 by rpki-client