Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
File: sPoMerwQeWkV4zW6GXgORz4CeWk.mft (raw, json)
Hash identifier: EB3XmKnvyQEj9dbH+CYZ9Xi9y4+cw8ESWnNfY0b9WrQ=
Subject key identifier: FF:E5:CA:41:0E:16:C6:64:1C:22:FE:27:68:EC:85:FA:E0:8E:F9:F3
Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
Certificate issuer: /CN=b0fa0c7abc10796915e335ba19780e473e027969
Certificate serial: 019DDF1FD4FA83BA52B33AE486199C904095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
Manifest number: 13D8
Signing time: Thu 30 Apr 2026 16:01:38 +0000
Manifest this update: Thu 30 Apr 2026 16:01:38 +0000
Manifest next update: Fri 01 May 2026 16:01:38 +0000
Files and hashes: 1: LefKdaCkJCuLWYomPbn7aYaCwt8.roa (hash: dTxOv7XhsigiPPaBEnDTEGV1JBMdxI+S2HXrs+TPL+s=)
2: sPoMerwQeWkV4zW6GXgORz4CeWk.crl (hash: /tk0uNIAXg4mfzE1EX0Hqdmq9Oork7JOpReYQrAe7ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 14:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:df:1f:d4:fa:83:ba:52:b3:3a:e4:86:19:9c:90:40:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969
Validity
Not Before: Apr 30 16:01:38 2026 GMT
Not After : May 1 16:01:38 2026 GMT
Subject: CN=ffe5ca410e16c6641c22fe2768ec85fae08ef9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:68:e0:7a:ed:a4:4a:73:6e:8e:25:d5:3b:ff:
ed:09:75:bf:22:05:19:0b:92:5e:b0:aa:bc:95:41:
09:b4:4a:16:60:32:06:6b:77:d4:38:84:e4:97:50:
2f:0a:b1:db:20:bf:b3:9f:1a:7d:9b:2d:5d:2b:8f:
57:50:17:b5:e4:83:32:cc:63:62:87:6d:e9:bb:e2:
63:8a:79:d4:81:68:b7:ed:af:8c:94:ad:d5:a2:c6:
3e:03:7c:aa:e9:f3:78:31:66:c6:6f:b2:a7:0f:01:
12:d5:55:da:fc:1d:3a:32:26:0d:89:61:4a:21:31:
4b:2d:33:47:6f:4c:07:0c:62:c6:d5:02:8d:14:cd:
fb:96:e8:46:28:ac:b3:5d:c7:f3:f2:78:1c:72:f9:
84:c2:bd:94:43:a9:d1:cb:6d:cd:1d:61:1a:3a:19:
b0:2a:26:4e:b2:ce:2c:e1:78:63:f8:f4:01:68:39:
4a:bd:17:36:f2:36:78:82:a9:bc:39:b8:55:f7:36:
c4:47:fe:10:42:bc:bc:54:00:85:9e:99:fe:77:8f:
72:19:54:30:0e:a4:75:28:a3:fd:5a:2c:b9:59:29:
46:f0:56:fa:15:d9:ad:18:3a:92:ab:39:58:ab:c4:
74:61:ec:df:d2:b4:fc:19:a2:4d:d6:73:89:00:ad:
9c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E5:CA:41:0E:16:C6:64:1C:22:FE:27:68:EC:85:FA:E0:8E:F9:F3
X509v3 Authority Key Identifier:
keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:bb:87:c0:cf:fb:b7:4a:4a:ae:5d:01:50:a3:a3:c5:85:7e:
20:84:43:ab:bc:b0:8d:8f:37:01:2d:9e:25:47:73:ca:cb:54:
14:ee:c3:ce:0e:51:63:ac:4d:7d:62:16:41:0a:87:69:f6:e4:
c6:b1:ce:6e:e9:30:1d:9b:a3:49:cc:bc:c9:8c:b0:05:d6:d3:
16:18:b9:bb:be:ad:a8:91:96:da:2a:d7:93:ce:2c:cc:2e:f6:
4d:17:2a:7f:06:01:0f:f9:f7:f6:ba:7f:72:94:6e:44:e9:94:
77:b2:e6:c4:cf:4c:ee:16:bd:5b:1a:cf:8e:9d:38:cb:96:47:
c0:e9:9e:1b:b9:51:06:30:fd:3b:44:d0:55:ed:58:81:45:a2:
85:e4:d7:47:64:84:5b:d9:4c:b1:bc:dc:a3:68:99:e7:06:c1:
c2:a7:e9:d0:7c:be:a8:9b:bf:36:a8:6b:03:1b:56:65:ff:94:
f5:6d:b4:de:d3:82:51:ca:5f:a8:49:ee:25:09:59:cc:76:5c:
10:c7:ea:ca:9d:c3:d5:ca:8c:21:9a:53:0e:83:fc:23:91:1c:
ef:88:7d:f5:4e:64:bb:22:8b:f2:60:f1:d9:de:69:4a:2f:34:
54:76:f3:d2:23:af:f6:3f:f0:ff:38:b7:22:c7:35:c0:d4:a7:
ab:b3:08:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:49:12 2026 by rpki-client