Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
File: sPoMerwQeWkV4zW6GXgORz4CeWk.mft (raw, json)
Hash identifier: s+kd2zuQlJRw+KAgyt1MnPXkUPq1T8yXg7G9f07X7L4=
Subject key identifier: 6C:38:98:77:00:2A:68:03:73:E3:33:7E:DA:F2:15:3B:F3:F3:8F:75
Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
Certificate issuer: /CN=b0fa0c7abc10796915e335ba19780e473e027969
Certificate serial: 01A0B72E8C413902BFCA4FD4E2D5C2D76F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
Manifest number: 1551
Signing time: Sat 19 Sep 2026 01:01:16 +0000
Manifest this update: Sat 19 Sep 2026 01:01:16 +0000
Manifest next update: Sun 20 Sep 2026 01:01:16 +0000
Files and hashes: 1: LefKdaCkJCuLWYomPbn7aYaCwt8.roa (hash: dTxOv7XhsigiPPaBEnDTEGV1JBMdxI+S2HXrs+TPL+s=)
2: sPoMerwQeWkV4zW6GXgORz4CeWk.crl (hash: emkH9ZokDrByRnP50y359K+UbptUtid8krr38CMjDDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:2e:8c:41:39:02:bf:ca:4f:d4:e2:d5:c2:d7:6f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969
Validity
Not Before: Sep 19 01:01:16 2026 GMT
Not After : Sep 20 01:01:16 2026 GMT
Subject: CN=6c389877002a680373e3337edaf2153bf3f38f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4c:c1:99:01:c3:9b:8f:d9:0f:3c:3b:dd:ce:
14:97:77:ed:82:94:0c:37:4e:1a:5b:41:b1:05:9d:
3c:47:e5:91:69:5c:cc:a5:d7:aa:94:19:f7:52:82:
6b:7e:7b:51:be:e2:8a:7f:68:42:69:02:22:c7:ba:
84:23:1e:a2:09:fb:d4:c7:72:e5:e6:bf:27:21:1b:
8e:a7:78:62:86:5e:59:45:37:63:c2:a7:76:33:92:
63:41:4e:a2:5b:57:7f:ca:77:7c:6b:b7:b3:c6:fa:
af:7e:7f:95:ab:b7:8f:81:62:30:00:13:5c:cb:ea:
ac:78:9f:c0:79:7e:89:31:24:2e:2e:cc:af:8a:b4:
af:f2:6d:df:3a:9c:b9:60:61:c7:21:88:f4:0e:66:
36:c7:4a:69:f7:9f:8a:6c:b7:c8:05:ec:22:19:71:
1e:85:27:ea:52:fa:39:a6:4b:a5:a7:98:09:70:62:
13:a4:45:6f:f0:9c:8c:04:6e:10:0a:3a:50:8a:87:
48:58:dc:ec:d2:f7:f9:c4:0b:32:3f:91:60:b1:df:
23:26:bb:4e:ee:66:6b:35:39:6c:c2:a2:90:6c:32:
a5:64:16:98:47:e4:5a:f9:cc:4e:39:58:ed:b2:cf:
eb:0a:ae:d4:c4:7c:bb:98:ad:f3:14:cc:5a:61:6b:
1f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:38:98:77:00:2A:68:03:73:E3:33:7E:DA:F2:15:3B:F3:F3:8F:75
X509v3 Authority Key Identifier:
keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:db:a2:04:43:f4:7d:b0:dc:00:6f:50:ae:2d:46:13:2b:82:
b8:2d:c1:62:a6:cb:f0:9f:44:c5:05:dd:f8:5c:f1:47:16:30:
53:0c:22:a3:18:ed:64:86:b4:12:fc:58:9e:70:ec:09:a8:a0:
32:a9:f5:c1:e1:e4:a0:20:64:8b:90:02:55:c9:d2:5e:03:a0:
7c:78:ce:be:74:80:e4:33:56:d2:e4:f9:51:c2:8b:72:b1:48:
d9:a6:ef:5d:85:2c:0a:54:c6:44:bb:24:00:44:b1:c1:ea:6c:
06:4b:fc:61:51:6f:53:40:3c:52:3e:51:7a:23:cb:ec:5a:c8:
80:f7:a9:07:1f:76:9b:58:5d:9b:67:b3:ff:3e:3c:95:de:4b:
50:b2:ec:f6:13:1c:cf:d4:0a:ec:0a:46:19:02:29:26:5d:38:
ee:20:73:79:55:17:70:aa:92:00:51:f2:b4:38:36:48:a3:d3:
5e:2c:96:c7:f1:2d:7a:d3:26:72:dd:a2:5f:64:a5:ca:6e:e1:
d9:9a:a8:30:76:b4:1e:2f:73:5d:3f:90:56:7e:0c:2a:6e:30:
42:41:fe:f1:78:8d:f5:0d:74:c1:3e:ce:20:85:fb:82:1b:e3:
64:b0:20:41:b5:6b:00:4f:ba:a9:dc:76:1a:f4:61:ee:d3:04:
32:47:86:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:59:17 2026 by rpki-client