Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
File: Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft (raw, json)
Hash identifier: D9djwGPZMwibdSyljygxw9J1WUHCprl3lYq3c5AD/Dc=
Subject key identifier: CD:73:8A:EA:3C:6F:82:41:CB:FC:76:C2:73:F1:70:03:28:7B:8E:FB
Authority key identifier: 4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
Certificate issuer: /CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Certificate serial: 019D390A5A7F3A4536A9519E0C8164656576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
Manifest number: 0C9D
Signing time: Sun 29 Mar 2026 10:01:12 +0000
Manifest this update: Sun 29 Mar 2026 10:01:12 +0000
Manifest next update: Mon 30 Mar 2026 10:01:12 +0000
Files and hashes: 1: Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl (hash: a+/+tCmr28fgb95POtaVHP+Ga+k4LUe6AGzQKtOS5lk=)
2: jaXIMGohDtqmN9HK0RSue183PUM.roa (hash: /dhEKzEAshSscrjSIfqANdXDpyu38QD3HTeuahz7d5g=)
3: sl2grtF62EGJRr--AtlkQoKUOgo.roa (hash: 8IWHvB3aWoMq1k/0X1fLbANShkPS5Vl92y6S/fnPKKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:5a:7f:3a:45:36:a9:51:9e:0c:81:64:65:65:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Validity
Not Before: Mar 29 10:01:12 2026 GMT
Not After : Mar 30 10:01:12 2026 GMT
Subject: CN=cd738aea3c6f8241cbfc76c273f17003287b8efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5e:16:ea:8b:72:18:26:15:82:1a:96:42:32:
df:40:d2:78:5f:df:69:6a:38:ca:14:90:87:b4:6b:
a0:65:ca:a6:1d:5f:6c:fa:2c:ce:88:b0:4b:e7:77:
29:7a:0a:fb:bc:41:ce:90:c1:29:9a:d0:8f:33:75:
3b:27:a0:4b:9e:fa:f2:3f:23:17:b7:32:35:cb:e1:
13:b0:e5:37:2d:f9:a3:e8:7d:61:50:98:c8:a7:8d:
d0:0f:0d:09:e8:54:61:16:33:d3:ae:90:8e:e8:15:
38:8c:54:35:8e:d4:3a:01:7d:a3:74:77:41:f6:1c:
72:bc:40:84:a1:54:3e:92:7a:63:47:f4:42:00:80:
10:15:7b:2a:c3:11:bb:44:6d:e3:5a:a8:2d:00:f3:
6a:8f:57:73:69:ce:bc:17:42:21:d2:cb:71:1e:78:
4d:ea:39:fc:12:17:f1:1b:6f:5e:f1:55:6e:57:38:
8f:14:e0:8d:f8:f4:e3:97:c0:ee:17:3d:2f:26:63:
8d:e4:02:f5:00:98:11:43:f2:e7:f7:9c:91:53:e2:
6d:2f:cc:d8:1a:f0:6c:57:1a:ce:fd:a0:d7:d1:91:
7a:25:4f:21:3c:6e:a2:09:17:4f:db:eb:db:61:11:
b5:6a:ec:e3:c2:e8:ed:28:63:e2:ff:b0:a6:0d:47:
97:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:73:8A:EA:3C:6F:82:41:CB:FC:76:C2:73:F1:70:03:28:7B:8E:FB
X509v3 Authority Key Identifier:
keyid:4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:08:a6:3a:c2:46:72:2f:db:07:65:70:25:08:dc:b3:f1:32:
b3:6d:40:42:b2:3d:8c:ce:4b:8e:1d:ac:c7:79:d1:95:4a:ab:
19:62:60:af:74:2b:2f:7e:d4:74:3f:cb:b3:af:35:48:43:69:
1b:f3:45:f3:c2:63:c7:8f:52:73:ce:29:94:15:76:70:19:10:
bb:14:e8:db:5d:de:ec:0e:59:86:ad:46:f4:fd:e1:75:fe:1b:
4d:e2:27:bb:57:39:43:90:fb:73:52:a5:5b:56:52:af:e8:e5:
a4:36:7c:a5:00:4c:c1:4b:d1:ba:81:94:26:54:01:44:a1:62:
2f:e7:08:c3:e3:c4:1e:42:cf:b8:40:ff:65:dd:1d:ed:c7:7e:
85:a5:c7:c2:07:46:1b:22:9f:5b:0b:62:3f:da:b1:55:e1:77:
5f:eb:3e:9f:a7:46:3d:86:b1:10:3d:fa:74:6f:f3:fd:7f:75:
48:8a:2f:ee:0c:d7:4b:48:a3:51:16:d4:3c:6c:c2:99:23:c3:
20:30:ab:35:b8:9a:43:a3:59:f4:8c:bb:35:c3:02:2c:e4:6b:
71:35:de:61:06:74:bb:eb:b2:db:84:e2:38:f4:8e:bc:22:2f:
ab:42:40:18:a8:fa:33:4a:ba:3b:3a:28:8c:56:30:d8:60:ac:
16:64:81:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:09 2026 by rpki-client