Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
File: spvHpkk9OBeN1_XpxJDI7zqKWYs.mft (raw, json)
Hash identifier: fUt1DtdWYafBzvmO5hFhcgDNZRh8cL6omiRvrimrXgc=
Subject key identifier: 54:5B:B5:AA:39:17:9F:17:70:86:90:8C:A5:83:1A:E3:46:00:01:03
Authority key identifier: B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
Certificate issuer: /CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Certificate serial: 019D37C052753AB24F68E5D476581E2DED5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
Manifest number: 0492
Signing time: Sun 29 Mar 2026 04:00:44 +0000
Manifest this update: Sun 29 Mar 2026 04:00:44 +0000
Manifest next update: Mon 30 Mar 2026 04:00:44 +0000
Files and hashes: 1: spvHpkk9OBeN1_XpxJDI7zqKWYs.crl (hash: UhZOW4TgytvjBvnq5FoKIkTMFr4vT6oDIIDcvCu6od8=)
2: yP4RNTLUKk_P7r0qobg3b_Bq0bc.roa (hash: 7RS0tj1L1t6QadBqzoijZL2F1NYP+eQ5vizwcCjgqj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:52:75:3a:b2:4f:68:e5:d4:76:58:1e:2d:ed:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Validity
Not Before: Mar 29 04:00:44 2026 GMT
Not After : Mar 30 04:00:44 2026 GMT
Subject: CN=545bb5aa39179f177086908ca5831ae346000103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1f:e6:40:71:e8:46:07:01:73:51:de:04:be:
f4:ed:55:59:61:b2:3d:42:3b:a0:69:cc:01:9c:6b:
52:b6:94:46:a1:96:2b:8c:64:7e:cd:97:1a:ae:6e:
54:3e:02:1b:0c:00:e2:45:f1:2d:6a:9a:66:a7:9d:
ca:b1:8d:21:90:65:1f:89:b6:ad:ab:af:60:37:72:
ed:98:1e:c4:1a:19:94:3b:b0:9f:32:7e:b6:72:81:
cf:e5:17:93:78:eb:71:4b:53:ce:26:37:e7:01:a7:
25:8a:8f:a6:9c:6c:60:1e:98:ae:2a:6d:9c:f8:ad:
e2:59:3b:b2:15:c6:b5:0d:b0:ed:ed:53:1f:fb:7b:
70:1a:97:ca:d2:62:58:bb:9c:be:b3:58:f4:5e:cb:
7f:20:8a:0c:82:a8:29:16:39:d0:95:5e:51:ae:7c:
76:d1:a7:95:e5:d5:15:09:4a:65:a5:a6:bd:60:fa:
ac:ab:43:eb:a2:c3:03:93:4a:64:8f:8f:7c:3f:17:
16:f2:b4:df:e4:23:61:bc:23:5f:9b:e5:61:8e:d6:
72:85:e8:10:18:72:56:a9:97:44:a4:ef:b4:b7:e1:
19:75:33:99:bf:35:5c:98:d6:2d:cd:a6:b4:4a:cf:
c8:4c:bf:91:6e:cf:8e:c6:df:bf:88:b1:90:85:6c:
65:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5B:B5:AA:39:17:9F:17:70:86:90:8C:A5:83:1A:E3:46:00:01:03
X509v3 Authority Key Identifier:
keyid:B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7f:d6:17:9d:df:04:26:0a:ca:1f:03:37:9c:b9:f1:e3:45:
2d:5d:67:3a:ce:cc:4e:63:17:8a:77:ea:4b:4e:53:10:79:8d:
ab:a1:00:d1:65:45:6a:28:a7:33:ef:35:03:66:27:e1:68:e1:
1d:47:eb:6d:c2:55:e8:58:55:f3:0a:4d:94:7f:2e:3e:d7:8f:
d1:97:23:04:bb:d6:fa:17:d0:40:05:f6:fa:a3:f5:0b:af:fe:
00:0c:19:5b:e7:a5:0e:ad:79:ef:8d:08:c6:78:fb:05:b8:0d:
d4:2d:6a:73:8c:01:b0:5c:db:8d:02:4f:4d:ec:ab:72:48:f4:
9a:ec:6a:a1:1d:94:48:a1:c9:de:19:6b:19:be:4a:ab:d0:ef:
f9:db:a2:6d:98:a0:92:37:7c:98:5f:d9:c5:17:5a:0b:cb:76:
9e:88:2d:fe:19:25:98:02:73:b2:b6:7a:05:2c:67:80:f0:55:
f7:96:d7:f2:ae:bf:85:3b:91:3f:3f:35:e1:26:80:1d:51:de:
e5:e7:8f:b6:e7:fa:54:c4:69:be:39:3a:aa:52:aa:7d:e5:e6:
ca:0e:e9:23:b2:e0:3c:4e:55:1f:f2:06:46:0f:9c:06:7a:ea:
10:2e:6a:21:54:78:26:a4:7b:0a:32:e6:e9:02:2c:6b:58:af:
d7:5e:23:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:14 2026 by rpki-client