Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
File: SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft (raw, json)
Hash identifier: MRnYAbnknm4AduERgHv4UP8H/NkUcsR7xgP5le2a/gE=
Subject key identifier: 01:3D:94:70:18:ED:46:C6:4B:E4:CB:4D:BF:BD:6A:FB:02:23:B1:3B
Authority key identifier: 4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
Certificate issuer: /CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Certificate serial: 019D296156DFDF848818EF5A2C90D408C82E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
Manifest number: 1352
Signing time: Thu 26 Mar 2026 09:02:18 +0000
Manifest this update: Thu 26 Mar 2026 09:02:18 +0000
Manifest next update: Fri 27 Mar 2026 09:02:18 +0000
Files and hashes: 1: 7Z28ccV7b3JOrHBg1UIO3OEvwT0.roa (hash: 1nSmk3+PfoqP0CPu2acD9nLC2qFRu+YJXluMww4fQsw=)
2: E3n9esmOrOiobKpJnsNX1UEdPcY.roa (hash: dbM92eMK8IhOySdV1MJ9MEgIxZl7Dktml8lfCphXSgw=)
3: SWLNmYYm6Zq0D2jQ9d5JvtPt1cA.roa (hash: jzLKP/SbyyXvM8oP+/GO3/4crN42V8JTzUOZ8ggXFRk=)
4: SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl (hash: DRbHnNzQ2FBhkRynE8P2vSy9Onk2vA1wV7WAYuNS7Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:56:df:df:84:88:18:ef:5a:2c:90:d4:08:c8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Validity
Not Before: Mar 26 09:02:18 2026 GMT
Not After : Mar 27 09:02:18 2026 GMT
Subject: CN=013d947018ed46c64be4cb4dbfbd6afb0223b13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:1b:1f:cb:f9:96:45:f5:ac:66:d4:f3:a5:
e4:19:9f:63:e5:4c:ba:f2:9c:ec:96:56:d3:9f:c3:
5f:82:7e:db:08:55:a0:ae:5f:75:a3:7c:0a:33:5c:
69:6a:43:17:5a:3a:50:c0:fa:73:89:93:7b:02:25:
a2:74:50:1d:7b:0f:5c:e7:e0:69:2a:08:cf:a0:76:
bc:71:c7:02:c6:0d:bb:5e:74:bf:c7:ec:bb:16:38:
e6:1e:a7:68:06:83:70:df:17:57:b6:dd:f9:ba:23:
ef:c3:95:29:ac:2a:e0:22:6d:db:ee:75:b6:4a:83:
a6:08:c1:a0:0f:6b:3f:52:68:57:59:29:95:60:6f:
08:46:fb:c6:75:4a:43:f1:e3:cd:a4:8e:50:fb:43:
7b:15:0b:28:1b:f3:c6:13:e5:35:1f:f9:4c:24:c4:
e1:d4:80:52:24:df:dc:21:31:9c:a6:be:53:34:35:
d5:9e:7e:4f:c5:9b:5e:cc:de:f7:a6:b6:dd:ec:ba:
38:2d:71:91:08:53:16:93:d1:94:3b:d1:93:03:4a:
66:9a:0c:79:98:d2:64:09:ad:0e:7a:54:6b:f4:ad:
a3:0e:e0:bf:14:ac:d3:11:b7:28:3a:de:63:83:41:
16:51:ed:99:3b:df:1a:1c:5f:42:95:39:47:e8:c4:
6b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3D:94:70:18:ED:46:C6:4B:E4:CB:4D:BF:BD:6A:FB:02:23:B1:3B
X509v3 Authority Key Identifier:
keyid:4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a1:7a:dc:fc:a0:64:5f:d1:16:69:e1:5e:fe:ae:eb:64:92:
e3:fe:04:0c:11:16:e1:7d:46:1e:50:7d:0a:37:32:ba:52:e5:
40:28:9f:a8:03:ae:1a:3a:73:17:e0:fa:3d:83:7f:c2:8d:b6:
fb:89:a9:f8:04:27:20:b8:61:46:bc:7d:21:8c:c7:6d:55:9b:
bc:2a:10:66:90:06:d0:6f:e1:dd:ea:5c:82:7f:1d:24:60:a6:
cd:0b:6c:96:a9:40:a0:86:a1:e2:9f:5c:58:dd:88:e8:28:d3:
9f:49:73:6b:c2:95:47:87:7b:b6:b6:c1:83:ff:95:f7:81:5b:
ad:ad:6b:69:88:46:57:1c:f6:a5:07:92:46:5a:5f:3a:3a:16:
77:b1:f2:37:14:b8:f1:01:73:ce:5f:93:32:7f:5f:02:ea:98:
43:50:49:9c:34:3e:77:7e:47:6a:22:94:dc:ca:90:dd:56:8f:
da:18:5f:22:df:6e:d8:08:45:44:b4:15:fa:4b:3d:b8:d7:56:
4e:1c:03:bd:65:a9:51:8c:7c:25:f8:f4:d8:00:6f:3e:c6:75:
4d:ca:06:76:8f:a8:e1:aa:10:65:d3:99:ff:9e:f2:6a:c8:f1:
74:c9:25:31:ac:84:75:19:54:f1:db:58:57:c0:12:a2:90:a4:
2e:7b:e9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:37:08 2026 by rpki-client