
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
File: SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft (raw, json)
Hash identifier: Bs+2Xm7FDGqskibB1E+/+qKp6frGL0cpSHaNhiDjMd0=
Subject key identifier: 2F:22:5E:A4:67:86:BB:43:A3:16:23:52:17:0A:A9:17:D3:6D:C6:51
Authority key identifier: 48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE
Certificate issuer: /CN=48faed6714f46a2b843f14e40e54e626a0c500ee
Certificate serial: 019D32D11A2D9166A2BAF089283A168D1C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
Manifest number: 15E4
Signing time: Sat 28 Mar 2026 05:00:57 +0000
Manifest this update: Sat 28 Mar 2026 05:00:57 +0000
Manifest next update: Sun 29 Mar 2026 05:00:57 +0000
Files and hashes: 1: SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl (hash: 2WMwUiOQl0YCun7qe8wZLcPs+Qrd+e/dI+N5YhqgL4w=)
2: qe9MYSLX-eDkASoA6H4tOqsAe-Y.roa (hash: 8hBnOFhlUkCN3eo0CONISdgb8NSE59yx1j93NOxJCf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d1:1a:2d:91:66:a2:ba:f0:89:28:3a:16:8d:1c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48faed6714f46a2b843f14e40e54e626a0c500ee
Validity
Not Before: Mar 28 05:00:57 2026 GMT
Not After : Mar 29 05:00:57 2026 GMT
Subject: CN=2f225ea46786bb43a3162352170aa917d36dc651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:d2:47:c5:76:b5:be:c7:71:b7:bb:76:7c:
6e:b9:16:7a:8d:11:ce:b2:e5:c3:c8:47:62:82:95:
97:c0:db:02:cc:9c:2f:54:93:cd:44:38:5e:99:89:
f4:a0:02:1f:d3:75:ab:68:9d:20:03:54:a6:f2:95:
6b:ac:dd:d1:92:2b:6a:3b:02:a2:e6:62:7c:49:61:
78:b9:3c:29:f2:e7:ec:1f:bf:87:e2:73:89:d3:d6:
c3:8f:34:56:84:80:28:3f:3e:d3:1a:66:1e:e9:f4:
35:f1:1e:7e:22:0d:57:7e:91:00:ee:45:d7:20:e7:
21:ae:88:0e:d0:0a:c2:bc:bc:5e:63:79:8a:69:33:
c1:e3:a8:b1:20:6e:50:e1:54:94:8c:23:83:fb:81:
0b:1d:bd:d5:ad:85:d8:eb:96:57:34:4d:19:92:2f:
47:c5:6d:2b:12:7a:9e:1d:79:3b:6d:e3:4a:c1:88:
8e:b4:c9:a6:ed:fa:87:a1:3f:4b:51:64:54:34:d0:
2a:3c:64:27:62:b7:49:6d:fd:50:29:cc:5f:b9:8d:
7f:d8:e4:dd:f6:fe:4e:a1:2a:4e:a2:db:4c:ad:fa:
c0:f4:4a:de:d3:c3:a5:75:57:34:ca:55:3b:13:f5:
1a:9d:2f:43:0d:a5:00:62:d4:0e:5e:b3:94:62:29:
ab:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:22:5E:A4:67:86:BB:43:A3:16:23:52:17:0A:A9:17:D3:6D:C6:51
X509v3 Authority Key Identifier:
keyid:48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:5a:5d:5e:73:30:df:75:4f:ff:01:68:cc:eb:d6:69:f3:04:
4b:f6:91:d0:da:d0:e2:5f:bb:cf:af:7e:03:05:e6:c3:30:17:
af:34:a6:ac:46:b6:66:70:a1:34:f5:22:0d:96:84:21:83:a0:
3f:df:fc:fd:4c:74:af:73:48:d1:8a:ad:2f:89:74:34:e5:e6:
a4:26:52:be:38:35:25:3b:91:3b:de:65:c1:58:73:50:b6:47:
18:ff:8b:6a:97:17:48:f3:79:fa:a1:82:a2:af:3b:d6:15:7a:
34:a4:65:76:d4:d9:65:65:f0:1c:55:1e:14:82:0c:8d:21:fe:
a8:81:05:7f:1c:a4:32:aa:31:e8:ce:f2:fe:eb:12:58:e6:ea:
eb:7f:37:30:9c:9e:66:47:05:94:af:80:35:d1:88:20:88:18:
ea:ad:ba:35:a2:e9:30:ef:c5:f2:26:0b:6a:eb:cb:97:fd:cc:
50:d1:50:e7:f5:66:df:0a:cf:38:4b:89:3a:5e:5f:2f:d5:9a:
fb:e1:74:6e:ee:97:5f:80:e7:af:58:7a:eb:66:9c:6d:a4:1b:
8c:5d:d1:5c:08:a4:46:a9:b2:00:ed:e7:93:09:5d:a2:ef:cd:
ba:63:43:7c:c2:0e:e0:fd:c0:91:7e:d9:af:94:36:c8:cc:04:
06:20:39:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:23:44 2026 by rpki-client