Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
File: Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft (raw, json)
Hash identifier: PJUiI2hW3PjCD7gBLyJQcxFtQ3TY5+i4gl9/19qh30g=
Subject key identifier: 62:81:15:E7:2B:29:84:86:D9:0F:2C:E8:1D:B9:23:B2:8E:F2:03:E5
Authority key identifier: 4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
Certificate issuer: /CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Certificate serial: 01A119AB90EF99EEF6A4FEEF39F7FE5CA064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
Manifest number: 0E9F
Signing time: Thu 08 Oct 2026 04:00:36 +0000
Manifest this update: Thu 08 Oct 2026 04:00:36 +0000
Manifest next update: Fri 09 Oct 2026 04:00:36 +0000
Files and hashes: 1: Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl (hash: GpycdtkNzt8oxHmnEncxmPSgFD4H1SwjIIi+vsnt0qs=)
2: jaXIMGohDtqmN9HK0RSue183PUM.roa (hash: /dhEKzEAshSscrjSIfqANdXDpyu38QD3HTeuahz7d5g=)
3: sl2grtF62EGJRr--AtlkQoKUOgo.roa (hash: 8IWHvB3aWoMq1k/0X1fLbANShkPS5Vl92y6S/fnPKKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:ab:90:ef:99:ee:f6:a4:fe:ef:39:f7:fe:5c:a0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Validity
Not Before: Oct 8 04:00:36 2026 GMT
Not After : Oct 9 04:00:36 2026 GMT
Subject: CN=628115e72b298486d90f2ce81db923b28ef203e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:99:11:69:55:c2:57:e2:44:53:58:71:5a:24:
48:f1:5a:0d:18:58:1a:c9:b1:11:50:57:6c:e6:90:
bd:11:55:bf:d9:2d:1f:67:a5:6d:6e:28:a5:42:30:
a6:ad:5b:ed:78:8a:fe:38:ce:64:8a:12:da:24:2a:
77:06:d8:f4:8c:bd:0b:83:4a:80:be:d1:86:16:02:
19:7b:d7:91:38:44:60:96:45:da:3c:6e:fa:c3:02:
83:97:93:c6:6a:f0:5d:7a:47:e6:e1:77:7c:af:11:
16:9f:4f:13:75:b1:ce:52:b3:20:29:bd:60:d1:56:
93:ad:b7:2f:da:dd:1d:ea:48:2d:66:6d:25:24:ef:
9a:0e:09:7a:f8:97:74:2d:eb:8f:1d:9e:67:8d:f8:
9f:a3:fc:38:a6:2f:ef:d2:64:bd:fa:21:b4:d4:59:
9c:96:c0:a5:95:41:06:b5:ec:94:36:48:64:07:a2:
23:be:92:e0:3c:d6:32:9c:6f:98:3b:b9:bd:5d:c1:
84:19:b0:e6:c3:e5:df:3b:08:42:41:12:4a:0f:47:
48:d9:09:75:07:aa:45:c0:ab:35:e8:bc:70:b2:6a:
87:08:cf:43:13:8b:8d:f3:51:58:ba:6f:b2:dd:41:
58:d7:8f:1c:2f:1e:5f:1f:e7:1b:c2:79:2f:43:61:
6a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:81:15:E7:2B:29:84:86:D9:0F:2C:E8:1D:B9:23:B2:8E:F2:03:E5
X509v3 Authority Key Identifier:
keyid:4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:37:c1:05:05:b7:10:4f:f2:d1:cd:dc:92:60:b4:99:b0:74:
0a:d6:45:50:3e:d4:03:2b:ec:e2:bf:6f:7a:6e:68:de:a7:a4:
53:89:57:09:dc:41:8c:cf:38:aa:c5:b8:8b:7c:13:94:b1:e8:
ec:1c:bb:e7:9f:aa:51:75:2a:2e:e9:4b:0b:ee:04:3d:bc:c7:
ed:ae:4a:fe:07:03:7b:fd:0d:ae:7f:eb:af:a4:3d:61:c5:91:
81:e3:4e:aa:b6:f4:d8:93:f7:45:ac:bf:06:d9:8b:06:48:c8:
ff:b8:10:25:fd:7f:22:a5:e1:cc:b5:f5:11:c0:a5:11:8c:97:
e8:dc:d8:fb:52:0e:8f:b8:42:1d:d0:96:28:18:82:54:c3:0e:
80:31:0d:0b:d2:58:cf:89:54:a3:9d:75:db:bd:8b:66:ff:e4:
2f:aa:1b:05:dd:40:df:36:ea:29:6e:c9:76:fe:93:3d:b9:42:
ce:14:a2:5f:d0:3d:2f:8a:4a:0e:e8:a3:2c:22:b1:6b:33:54:
13:3d:d8:af:70:8d:65:59:21:bf:21:ec:38:a0:0a:ec:79:66:
62:74:f7:8c:65:65:38:5d:fb:e7:e0:2b:fe:24:ad:46:4e:fc:
58:b0:0f:a2:c2:29:cc:1b:fb:bd:d5:d8:66:fe:ca:af:6d:28:
2c:49:79:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:56:09 2026 by rpki-client