Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.mft
File: SPEmUDG2es3hHypnONAjRpnRgBc.mft (raw, json)
Hash identifier: 5juU3xeJdIW6ShhcQdrhpGUUnuaPOTi7pbRVoNBOrQQ=
Subject key identifier: 3B:2A:4F:8C:51:2D:21:2C:5A:36:5E:81:EB:09:F3:C6:B9:4A:62:35
Authority key identifier: 48:F1:26:50:31:B6:7A:CD:E1:1F:2A:67:38:D0:23:46:99:D1:80:17
Certificate issuer: /CN=48f1265031b67acde11f2a6738d0234699d18017
Certificate serial: 019D3A544A2C10A5F44D3875796B28E95456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPEmUDG2es3hHypnONAjRpnRgBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.mft
Manifest number: 02A7
Signing time: Sun 29 Mar 2026 16:01:35 +0000
Manifest this update: Sun 29 Mar 2026 16:01:35 +0000
Manifest next update: Mon 30 Mar 2026 16:01:35 +0000
Files and hashes: 1: SPEmUDG2es3hHypnONAjRpnRgBc.crl (hash: zuUhk3CNevEBLZU7mFDl68uSwGj4ImhJIHqdmkrcKTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SPEmUDG2es3hHypnONAjRpnRgBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:4a:2c:10:a5:f4:4d:38:75:79:6b:28:e9:54:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f1265031b67acde11f2a6738d0234699d18017
Validity
Not Before: Mar 29 16:01:35 2026 GMT
Not After : Mar 30 16:01:35 2026 GMT
Subject: CN=3b2a4f8c512d212c5a365e81eb09f3c6b94a6235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:c3:be:0e:07:4d:57:a7:46:2f:1d:4a:e2:
c1:35:bd:0c:9d:4c:bf:a1:aa:0e:0b:79:66:aa:09:
ad:eb:44:da:b2:1f:56:30:c5:76:29:30:f3:3d:fc:
0a:b8:99:d7:86:f2:f4:3b:b7:53:77:9d:c4:36:c5:
49:c4:d4:f5:2f:f3:19:88:e5:46:c3:79:ee:77:fb:
88:7b:84:2e:ae:55:18:dc:c8:17:a0:5d:40:ef:1c:
f4:ed:cc:96:61:23:5d:d4:f2:98:3c:58:43:88:dd:
f8:82:37:67:dd:a4:3c:32:c3:bf:e7:47:cf:c0:19:
5e:9f:12:7d:8c:b5:eb:3a:0b:12:55:d3:c3:d8:d2:
be:f6:84:f9:0b:ec:6e:0f:a0:a8:e1:82:f0:db:2e:
dc:48:29:d9:7a:30:54:a6:12:18:37:1e:1e:ba:65:
14:e8:96:3f:a1:94:70:34:f5:6f:b7:62:1d:72:c0:
48:61:ae:60:27:a4:8c:91:0f:4d:9c:68:ca:33:b8:
bc:32:93:ed:66:65:a4:a6:ab:5e:01:01:cb:78:06:
4d:dc:86:7d:fe:ac:6c:96:a8:24:9f:34:7e:30:33:
c3:fb:e1:58:76:7a:9d:74:b8:d6:7c:3c:a1:04:3d:
28:f0:96:11:0a:fd:bf:c6:14:07:cd:9a:96:74:34:
fb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2A:4F:8C:51:2D:21:2C:5A:36:5E:81:EB:09:F3:C6:B9:4A:62:35
X509v3 Authority Key Identifier:
keyid:48:F1:26:50:31:B6:7A:CD:E1:1F:2A:67:38:D0:23:46:99:D1:80:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPEmUDG2es3hHypnONAjRpnRgBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e1:9f:8d:aa:7e:bd:00:2e:84:72:fc:3e:0f:d3:b1:a9:e0:
ef:70:ce:d1:10:f4:38:08:4d:8c:df:32:e1:e7:ef:45:1d:6d:
88:5b:b2:d2:1c:be:c6:fb:5a:d7:27:f1:ef:4b:46:ca:3c:ed:
32:92:1d:13:2a:39:8f:88:11:3e:48:1a:7f:d7:1f:9e:e1:b1:
73:75:82:e2:07:1b:36:f6:2c:34:01:e5:d9:69:10:9c:1a:f1:
d1:a0:ae:de:fe:a7:3f:62:17:c9:11:99:21:a4:0f:ad:76:6f:
e1:a1:38:f9:da:8d:15:51:5e:79:7e:d9:22:a8:89:3b:a5:61:
0b:8f:95:c0:4e:ef:23:b3:bc:d8:35:24:66:7b:65:cf:31:de:
36:51:de:b8:ec:b8:bf:f8:67:82:06:20:72:4c:05:8c:38:b6:
39:e0:84:2d:d6:a4:b8:4e:c1:85:ee:10:61:c2:8d:9c:83:f4:
ab:1e:70:25:70:3f:3c:ec:b9:b9:eb:b4:c7:70:2b:f0:30:2b:
87:27:32:55:80:bd:1b:3f:01:b9:e1:03:b6:ee:90:ec:3e:bd:
15:0b:09:de:d7:e1:c3:5d:66:28:50:70:87:3c:03:c6:38:71:
a0:ad:a6:e8:12:92:95:ee:95:97:a2:5e:f8:da:70:40:dc:c3:
80:50:79:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06VEosEKX0TTh1eWso6VRWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZjEyNjUwMzFiNjdhY2RlMTFmMmE2NzM4ZDAyMzQ2OTlk
MTgwMTcwHhcNMjYwMzI5MTYwMTM1WhcNMjYwMzMwMTYwMTM1WjAzMTEwLwYDVQQD
EygzYjJhNGY4YzUxMmQyMTJjNWEzNjVlODFlYjA5ZjNjNmI5NGE2MjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBHDvg4HTVenRi8dSuLBNb0MnUy/
oaoOC3lmqgmt60Tash9WMMV2KTDzPfwKuJnXhvL0O7dTd53ENsVJxNT1L/MZiOVG
w3nud/uIe4QurlUY3MgXoF1A7xz07cyWYSNd1PKYPFhDiN34gjdn3aQ8MsO/50fP
wBlenxJ9jLXrOgsSVdPD2NK+9oT5C+xuD6Co4YLw2y7cSCnZejBUphIYNx4eumUU
6JY/oZRwNPVvt2IdcsBIYa5gJ6SMkQ9NnGjKM7i8MpPtZmWkpqteAQHLeAZN3IZ9
/qxslqgknzR+MDPD++FYdnqddLjWfDyhBD0o8JYRCv2/xhQHzZqWdDT7ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsqT4xRLSEsWjZegesJ88a5SmI1MB8GA1UdIwQY
MBaAFEjxJlAxtnrN4R8qZzjQI0aZ0YAXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1BFbVVERzJlczNoSHlwbk9OQWpScG5SZ0JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zMGJhMzYtODM0ZS00YzA0LWE3MDIt
NzJlYzMwODZmMGU4LzEvU1BFbVVERzJlczNoSHlwbk9OQWpScG5SZ0JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8zMGJhMzYtODM0ZS00YzA0LWE3MDItNzJlYzMwODZmMGU4
LzEvU1BFbVVERzJlczNoSHlwbk9OQWpScG5SZ0JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAieGfjap+
vQAuhHL8Pg/Tsang73DO0RD0OAhNjN8y4efvRR1tiFuy0hy+xvta1yfx70tGyjzt
MpIdEyo5j4gRPkgaf9cfnuGxc3WC4gcbNvYsNAHl2WkQnBrx0aCu3v6nP2IXyRGZ
IaQPrXZv4aE4+dqNFVFeeX7ZIqiJO6VhC4+VwE7vI7O82DUkZntlzzHeNlHeuOy4
v/hnggYgckwFjDi2OeCELdakuE7Bhe4QYcKNnIP0qx5wJXA/POy5ueu0x3Ar8DAr
hycyVYC9Gz8BueEDtu6Q7D69FQsJ3tfhw11mKFBwhzwDxjhxoK2m6BKSle6Vl6Je
+NpwQNzDgFB5rQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:48:29 2026 by rpki-client