Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json)
Hash identifier: CRdbz5Ay4ltnTAtPQEsjKbKwASDOGylT15/bgmvxNAE=
Subject key identifier: DE:3C:C8:B0:71:B7:EB:AE:B6:F0:72:14:41:83:04:B4:3A:78:5F:03
Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Certificate serial: 01A122E6329800AA1896A6BECA2BD51D1E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
Manifest number: 1A29
Signing time: Fri 09 Oct 2026 23:01:13 +0000
Manifest this update: Fri 09 Oct 2026 23:01:13 +0000
Manifest next update: Sat 10 Oct 2026 23:01:13 +0000
Files and hashes: 1: IIlVo0fidTvQqKtqFi9ULMHfipo.roa (hash: kjOe1mZ+Dl42eBxnVxbtE/VrvseR8cEoFJ+of+SOdBo=)
2: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: sDXgON3TLJAkR8dCp56UyhLSqK4wGKnSSBxqh5fsUpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 23:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:e6:32:98:00:aa:18:96:a6:be:ca:2b:d5:1d:1e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Validity
Not Before: Oct 9 23:01:13 2026 GMT
Not After : Oct 10 23:01:13 2026 GMT
Subject: CN=de3cc8b071b7ebaeb6f07214418304b43a785f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ab:5f:30:02:57:9e:35:b1:07:20:ba:45:fa:
22:f2:6e:51:e2:b8:87:35:d4:5b:b4:7a:72:70:bd:
5e:39:2a:c6:27:0e:10:43:21:b3:c4:c9:83:73:a3:
ac:19:c2:7d:9a:3a:ff:b1:b4:21:86:32:22:14:44:
c3:3e:01:3f:00:5c:3c:65:ec:e9:00:4c:97:b4:48:
0e:a9:dd:69:ea:36:ff:24:b3:04:dd:fc:a1:b9:6f:
97:6e:6f:0d:90:d2:9e:f1:42:8c:bc:9d:61:33:d4:
90:ff:93:ca:14:52:a7:dd:54:8c:11:8e:c7:b5:5b:
2f:17:f6:f3:12:d5:39:00:56:5c:fb:0a:1c:1e:cd:
44:6b:5f:89:53:7c:12:35:32:7a:80:e5:4c:fb:ed:
88:90:d2:99:ab:b7:0d:19:a5:65:a2:b2:80:93:2a:
9c:35:f9:63:8b:bf:52:56:ef:7c:ef:ea:39:94:7a:
60:ae:41:a2:28:d6:2a:1c:b6:5d:da:89:eb:7a:e4:
aa:6b:f1:2c:3a:14:eb:bb:3f:ae:2b:9f:af:79:1e:
8f:21:62:3d:0f:07:ac:6f:5c:10:7b:1d:00:35:cc:
19:19:36:8e:85:2b:0d:98:07:2e:71:92:4a:5a:d6:
b1:3a:13:ec:e1:31:9b:ad:be:ad:b2:70:c2:92:29:
64:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3C:C8:B0:71:B7:EB:AE:B6:F0:72:14:41:83:04:B4:3A:78:5F:03
X509v3 Authority Key Identifier:
keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:01:0d:c1:52:8a:75:ec:b1:c8:0e:d5:c4:50:57:90:bc:c8:
1a:e5:49:87:d9:9b:a1:55:d1:88:a2:11:bf:11:68:7a:ce:51:
85:84:b9:8a:13:bc:21:bd:ee:34:90:e2:d3:f2:50:b0:38:a4:
a6:b0:d9:c5:c2:bb:d9:66:70:47:74:f6:a9:26:99:8f:08:f7:
e5:9b:5b:8b:d0:82:fa:5b:c9:d5:ea:87:42:2a:03:f3:44:10:
40:89:37:dc:26:8f:1e:e1:1d:3c:bd:6f:30:30:88:0e:60:5b:
92:66:cf:91:84:06:d6:d5:cf:85:61:40:6a:86:08:da:57:72:
b5:32:4f:09:63:0e:fd:25:68:65:10:95:84:71:5a:a4:de:ff:
9a:3b:78:c1:10:4b:6b:37:df:26:2b:da:a3:cf:a5:6e:8a:a4:
ad:46:73:90:21:2c:22:9c:af:bc:f5:a2:9a:d5:a1:a4:6d:b9:
04:7b:68:f1:a0:9c:8b:c4:ca:43:a1:64:4e:49:20:00:74:99:
69:82:ba:e0:52:b2:68:26:b9:cf:06:dc:1e:92:13:52:b7:b4:
a4:46:7d:5d:70:39:31:c4:61:e7:14:a4:1f:af:58:89:07:00:
52:5d:d1:f2:72:db:05:77:87:e5:c1:47:ad:0f:01:c2:38:55:
ac:06:90:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 07:50:51 2026 by rpki-client