Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
File: Sp0WbGSEc4ly6bM5OBZfRImlFow.mft (raw, json)
Hash identifier: uiE+YVlDxhAnkx1GO+NUzbdxXs6YAdZXIeONQdwwigk=
Subject key identifier: F7:4B:65:EA:3D:7D:7F:5A:56:28:A2:1B:26:22:2B:65:E8:3C:91:26
Authority key identifier: 4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
Certificate issuer: /CN=4a9d166c6484738972e9b33938165f4489a5168c
Certificate serial: 019D389C5BCBA13D3701D12F1EC0EEEDF3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
Manifest number: 0C06
Signing time: Sun 29 Mar 2026 08:01:04 +0000
Manifest this update: Sun 29 Mar 2026 08:01:04 +0000
Manifest next update: Mon 30 Mar 2026 08:01:04 +0000
Files and hashes: 1: Sp0WbGSEc4ly6bM5OBZfRImlFow.crl (hash: L0dHNg60LD9LDAx4DCJYYP2Qs+4mVvJvNiQNAXxxVmM=)
2: ZyKblhYof-lvzcG5wAYzbAd36M4.roa (hash: Ov+QQPf43TIV3qdCbGiYFnfp3OquF/Rfa6pgoiI/wlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:5b:cb:a1:3d:37:01:d1:2f:1e:c0:ee:ed:f3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9d166c6484738972e9b33938165f4489a5168c
Validity
Not Before: Mar 29 08:01:04 2026 GMT
Not After : Mar 30 08:01:04 2026 GMT
Subject: CN=f74b65ea3d7d7f5a5628a21b26222b65e83c9126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:35:de:df:6f:2c:7b:0f:e4:dd:59:d6:9c:c2:
f6:c1:2a:ab:12:a8:8a:37:1c:0e:e9:82:28:e8:4c:
72:e0:20:aa:fb:24:6d:ee:86:ad:25:f9:3a:d7:aa:
3c:f1:27:bf:d0:ed:21:61:89:9c:f6:62:26:4b:90:
9b:18:71:95:e2:aa:31:92:a2:b1:0e:b4:36:5f:5c:
8f:ee:8e:8f:47:fd:e8:e4:40:e8:94:38:b3:2c:49:
9a:d7:66:21:d1:ad:07:c8:7c:50:f3:19:75:a3:43:
8e:72:bc:e7:93:0a:e3:00:f8:d3:3b:69:d2:0b:6f:
f8:6e:3c:70:5b:77:8c:25:9e:c7:c2:49:c5:19:d5:
d9:76:52:3c:0d:bf:ed:8b:32:7b:37:64:cd:81:46:
3f:c7:77:13:07:71:82:93:76:57:7c:c9:4a:dc:66:
d5:a5:c9:82:4a:e9:05:97:4d:ee:c4:1d:ea:b3:66:
a2:51:6e:62:3f:00:d6:a0:46:1e:8a:d0:4c:4a:87:
36:34:dc:db:2f:bc:e5:c9:43:5b:96:28:ba:e7:7d:
cf:4f:c8:02:0e:63:12:8d:56:4a:98:8a:f5:63:a9:
ae:84:0c:df:ae:01:b2:ce:dc:ca:21:35:da:53:ce:
07:be:31:5d:b5:90:b8:32:50:c8:5f:26:38:b5:0e:
9a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4B:65:EA:3D:7D:7F:5A:56:28:A2:1B:26:22:2B:65:E8:3C:91:26
X509v3 Authority Key Identifier:
keyid:4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:16:21:f7:b7:42:57:5f:71:03:91:e8:1b:6f:65:42:04:01:
18:04:75:87:e8:a9:fd:11:a7:93:e0:0c:80:e3:74:b9:b3:d0:
66:e0:2f:ad:44:1d:d5:70:75:d4:8d:a4:22:e4:65:03:4d:12:
80:d5:24:e4:0e:19:9a:50:21:aa:9f:d0:9a:52:d0:ba:7b:ca:
d2:c9:ce:11:6b:45:ef:69:11:3c:59:c1:56:b9:7e:6c:7a:1d:
24:39:93:37:2a:0e:d6:da:a1:c1:b1:3a:e3:be:5d:ed:79:ac:
96:de:4e:4a:ff:7e:b6:22:41:f3:6e:0b:5e:82:e4:f8:85:71:
50:c9:95:c4:0a:38:6d:6f:79:a6:67:b9:1f:2a:16:9d:27:4d:
c0:80:2e:1e:cc:19:4c:74:38:29:d1:ae:21:dd:7c:3c:a7:7b:
ec:70:73:1f:d7:8b:dc:f9:4b:a7:82:86:17:0f:38:59:f2:9b:
98:cb:1e:2b:a1:5a:1b:12:e8:14:f3:80:b5:b5:6f:09:97:c5:
f0:c4:8b:fd:3b:63:2b:8e:d5:91:af:a2:c3:a3:55:e3:e8:c1:
f3:36:94:49:f8:f8:4e:be:ff:8d:2f:06:90:b3:8a:1a:fd:fc:
5b:15:46:9b:ee:51:93:f8:5c:23:ba:ff:57:94:7b:ee:63:8f:
a7:84:8d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:43:54 2026 by rpki-client