Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json)
Hash identifier: AAym60wh1jrQVi0K3IiTCUSl6eRzYCynhw6CZ/eOuPg=
Subject key identifier: B7:4B:0A:7F:44:30:96:09:88:91:9F:EF:96:35:31:CA:DB:6A:E5:4D
Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Certificate serial: 019D254CB71E56AEA2E582FB315E4EB50184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
Manifest number: 1818
Signing time: Wed 25 Mar 2026 14:01:17 +0000
Manifest this update: Wed 25 Mar 2026 14:01:17 +0000
Manifest next update: Thu 26 Mar 2026 14:01:17 +0000
Files and hashes: 1: IIlVo0fidTvQqKtqFi9ULMHfipo.roa (hash: kjOe1mZ+Dl42eBxnVxbtE/VrvseR8cEoFJ+of+SOdBo=)
2: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: zBvJze4f8bgiUXtIOHtDs683LusNRjjpRaaexkBOedI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:b7:1e:56:ae:a2:e5:82:fb:31:5e:4e:b5:01:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Validity
Not Before: Mar 25 14:01:17 2026 GMT
Not After : Mar 26 14:01:17 2026 GMT
Subject: CN=b74b0a7f4430960988919fef963531cadb6ae54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f3:d1:c8:c4:bf:33:05:af:e4:fa:78:d2:57:
81:30:bc:89:e5:b2:c1:1b:4c:a5:b9:1d:00:4a:83:
e6:e2:17:52:f3:31:18:1a:9f:47:fc:c7:cc:14:f2:
da:f9:30:97:79:d0:fa:17:c4:a2:f7:b7:b6:aa:53:
45:09:61:b1:5e:56:92:2a:60:2b:90:bf:a2:35:3e:
dc:79:71:db:05:4f:5d:42:be:e3:4e:84:03:c7:8f:
08:9f:5e:0e:a3:1a:aa:57:e5:75:62:e9:5d:51:de:
d5:f1:0e:06:07:9a:6c:e1:ff:1a:40:ce:67:19:2f:
c5:ea:c2:46:37:2f:85:50:a7:89:a2:a1:59:03:5d:
71:36:9f:5b:a0:a7:bb:8a:07:e3:50:23:b0:4c:cb:
e4:07:ba:fa:15:21:34:5d:7c:38:57:85:d6:42:f6:
b8:0f:a7:90:b3:0f:4d:94:54:3a:80:db:d5:00:0c:
12:fa:d7:70:8e:5c:98:d3:d8:29:83:4d:51:80:c6:
fe:35:14:d1:46:c9:25:0a:7d:49:db:95:30:87:79:
7a:e8:6d:54:02:31:b3:f8:bd:bc:4d:e1:b2:d9:1e:
e6:2b:ae:fc:c6:d9:15:c2:f3:e1:ff:79:07:b7:89:
5b:b4:58:70:32:de:ed:63:a5:03:c0:61:2e:27:7e:
ce:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4B:0A:7F:44:30:96:09:88:91:9F:EF:96:35:31:CA:DB:6A:E5:4D
X509v3 Authority Key Identifier:
keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b0:80:90:95:75:c2:d4:f3:61:5c:2f:cb:88:bd:20:6a:d9:
9d:cd:e0:6d:52:c1:f4:f7:19:2d:94:b3:24:79:62:c8:06:a4:
cb:4c:06:e7:47:1c:b9:f1:4a:c3:06:fe:30:27:b2:f6:f4:f4:
c9:f9:28:6c:d9:28:30:25:90:35:54:9b:0f:57:40:e3:78:8e:
2b:ae:3d:04:c3:1a:51:d7:5b:50:50:02:23:7b:9f:10:a4:b5:
93:4d:66:23:a7:83:01:77:a7:ff:67:28:a8:50:37:c0:2d:8d:
3f:c0:a9:cc:5c:eb:0d:d3:72:67:65:a3:c6:23:8f:c3:20:58:
a3:15:16:1e:c1:a1:d5:8a:8e:ed:f1:24:70:d2:e2:9a:37:ee:
57:66:7f:66:96:5e:32:55:cf:ee:fd:16:a7:cf:7a:f2:64:3c:
6f:fc:f1:38:51:56:4c:c9:0d:e3:b5:37:01:0a:e5:0c:47:d9:
a7:b6:41:61:d8:31:91:95:7e:ed:e4:c1:45:58:16:73:2e:79:
fd:8d:45:8f:ea:43:84:46:e1:f7:2d:6e:48:91:8e:33:f3:af:
b1:39:d3:c3:ae:d6:86:be:93:5b:ac:35:e6:71:ad:5f:c7:b4:
db:2e:9b:44:2e:f5:33:60:30:a4:28:eb:d3:c6:f5:2d:95:36:
84:cb:f0:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lTLceVq6i5YL7MV5OtQGEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOWRiMDBjYjE0YTM0YTE5M2Y4NGFjYTE0NGIyYWViMWYz
YzAyYzgwHhcNMjYwMzI1MTQwMTE3WhcNMjYwMzI2MTQwMTE3WjAzMTEwLwYDVQQD
EyhiNzRiMGE3ZjQ0MzA5NjA5ODg5MTlmZWY5NjM1MzFjYWRiNmFlNTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfPRyMS/MwWv5Pp40leBMLyJ5bLB
G0yluR0ASoPm4hdS8zEYGp9H/MfMFPLa+TCXedD6F8Si97e2qlNFCWGxXlaSKmAr
kL+iNT7ceXHbBU9dQr7jToQDx48In14OoxqqV+V1YuldUd7V8Q4GB5ps4f8aQM5n
GS/F6sJGNy+FUKeJoqFZA11xNp9boKe7igfjUCOwTMvkB7r6FSE0XXw4V4XWQva4
D6eQsw9NlFQ6gNvVAAwS+tdwjlyY09gpg01RgMb+NRTRRsklCn1J25Uwh3l66G1U
AjGz+L28TeGy2R7mK678xtkVwvPh/3kHt4lbtFhwMt7tY6UDwGEuJ37O3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdLCn9EMJYJiJGf75Y1McrbauVNMB8GA1UdIwQY
MBaAFEqdsAyxSjShk/hKyhRLKusfPALIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83NjEyYjAtM2UyNC00Y2U3LWExY2Et
YzFjNjYwNzhlNWJhLzEvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy83NjEyYjAtM2UyNC00Y2U3LWExY2EtYzFjNjYwNzhlNWJh
LzEvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbCAkJV1
wtTzYVwvy4i9IGrZnc3gbVLB9PcZLZSzJHliyAaky0wG50ccufFKwwb+MCey9vT0
yfkobNkoMCWQNVSbD1dA43iOK649BMMaUddbUFACI3ufEKS1k01mI6eDAXen/2co
qFA3wC2NP8CpzFzrDdNyZ2WjxiOPwyBYoxUWHsGh1YqO7fEkcNLimjfuV2Z/ZpZe
MlXP7v0Wp8968mQ8b/zxOFFWTMkN47U3AQrlDEfZp7ZBYdgxkZV+7eTBRVgWcy55
/Y1Fj+pDhEbh9y1uSJGOM/OvsTnTw67Whr6TW6w15nGtX8e02y6bRC71M2AwpCjr
08b1LZU2hMvw5w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:13 2026 by rpki-client