Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
File: sPoMerwQeWkV4zW6GXgORz4CeWk.mft (raw, json)
Hash identifier: YM9VyYuZdzw4qpUEQamgnWQ7sqCdJEVwM4M5XhvjgTk=
Subject key identifier: CC:BB:45:38:12:D0:2A:86:42:AC:45:4E:A4:D4:49:63:88:14:A0:9D
Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
Certificate issuer: /CN=b0fa0c7abc10796915e335ba19780e473e027969
Certificate serial: 019EE7B29C6D2BBC84B0AE037B821EEB91B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
Manifest number: 1461
Signing time: Sun 21 Jun 2026 01:01:42 +0000
Manifest this update: Sun 21 Jun 2026 01:01:42 +0000
Manifest next update: Mon 22 Jun 2026 01:01:42 +0000
Files and hashes: 1: LefKdaCkJCuLWYomPbn7aYaCwt8.roa (hash: dTxOv7XhsigiPPaBEnDTEGV1JBMdxI+S2HXrs+TPL+s=)
2: sPoMerwQeWkV4zW6GXgORz4CeWk.crl (hash: qJyb67VmYSrOkITjKYlP3y0v8y4RlUbkfP759gC93s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 01:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e7:b2:9c:6d:2b:bc:84:b0:ae:03:7b:82:1e:eb:91:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969
Validity
Not Before: Jun 21 01:01:42 2026 GMT
Not After : Jun 22 01:01:42 2026 GMT
Subject: CN=ccbb453812d02a8642ac454ea4d449638814a09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:86:bc:cb:09:28:c8:87:ca:1b:0c:7c:5c:
98:97:b9:e2:61:5d:bd:1e:a1:7e:a5:11:27:2c:44:
6d:79:31:9d:0b:d3:b0:90:de:fd:b3:e5:9f:5e:f2:
9f:d7:35:d6:7b:b7:d5:52:db:b9:d0:bf:f2:1a:8a:
92:c8:09:0b:91:41:a8:83:61:0a:bb:35:98:6e:c4:
8d:ed:14:3d:ce:3b:4e:e0:15:07:12:e9:ef:34:b4:
f0:87:f1:f9:19:1a:17:1f:3d:a7:7f:2a:97:d3:0c:
c3:51:42:49:ce:a0:0f:c2:32:54:a3:50:96:09:a3:
3c:4e:d0:ca:86:d6:3f:f5:37:73:1b:1a:73:82:eb:
24:78:98:a1:c4:db:02:a0:d9:20:8f:90:c0:7d:66:
93:92:bd:ea:73:65:05:28:6e:96:34:6d:52:e7:b9:
c3:d0:39:68:5c:34:54:2d:d8:65:4c:2c:91:d5:e3:
4b:15:0e:c2:6f:51:54:60:8d:11:c6:29:6e:14:20:
ed:9a:60:d9:32:06:18:79:c6:73:81:62:68:3b:df:
d9:6b:b0:4a:67:39:a9:80:5a:ef:3b:52:db:8b:f0:
00:17:1c:66:35:b3:57:2a:0d:aa:ac:89:58:4e:93:
9a:35:77:b7:04:64:98:0f:8e:96:bc:cd:7f:06:dc:
29:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BB:45:38:12:D0:2A:86:42:AC:45:4E:A4:D4:49:63:88:14:A0:9D
X509v3 Authority Key Identifier:
keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e6:a6:71:e4:a6:64:9b:a5:be:fa:92:08:b6:90:fa:01:d4:
1a:27:94:6e:5f:de:3d:64:a1:36:c6:06:4d:09:0a:5c:04:9c:
78:3a:36:ad:25:c9:1e:76:41:43:39:41:7e:6a:ad:a5:e9:6c:
ae:18:cc:bb:73:8f:4a:5a:15:5f:14:7b:9a:75:1f:2b:6f:03:
dd:c6:4d:1f:0e:6a:a0:e0:8a:31:f7:fb:bd:91:72:56:22:97:
0e:bd:1e:33:9e:c1:0c:1f:36:16:92:46:24:bc:84:41:47:6b:
5c:86:16:0c:83:2f:2d:d4:cb:64:81:05:a4:64:fc:79:c1:e3:
95:26:3e:f6:99:da:0e:0b:a5:b5:03:c0:a8:9a:93:bb:0b:41:
a1:5c:d6:fe:b4:e3:9d:d6:5d:2a:b9:6b:d4:80:7f:ef:f9:0a:
61:86:63:27:6b:24:0e:06:2c:ad:0c:43:19:e3:f7:0a:9f:fd:
e0:07:5a:c2:01:15:dd:d7:e6:4f:cc:ab:4b:92:77:04:2b:6f:
2b:8a:67:7f:34:79:77:bb:12:e2:6a:54:9c:f6:3c:f1:c6:d3:
3d:79:84:e5:df:05:3f:dc:a9:69:17:2b:48:94:7f:d9:ea:ca:
0d:f4:c2:f6:ea:26:a3:f7:a0:f0:b2:06:d0:31:d0:ea:f0:b0:
a6:03:b9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 09:02:05 2026 by rpki-client