Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json)
Hash identifier: hh1IWL4afgWJrHn/HaEzwD+0UoFKReqChgs4yeucHDE=
Subject key identifier: CB:AC:A9:C8:C8:41:5B:2D:91:EC:3A:C9:FF:34:3B:A2:87:5C:2F:91
Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Certificate serial: 019E205A7844F79D4413E070B6E2810274DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
Manifest number: 189A
Signing time: Wed 13 May 2026 08:01:00 +0000
Manifest this update: Wed 13 May 2026 08:01:00 +0000
Manifest next update: Thu 14 May 2026 08:01:00 +0000
Files and hashes: 1: IIlVo0fidTvQqKtqFi9ULMHfipo.roa (hash: kjOe1mZ+Dl42eBxnVxbtE/VrvseR8cEoFJ+of+SOdBo=)
2: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: lykTGZmNS5uAEjZJQD8K2Sy5SQKdIs9RIvIzls1bPLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:78:44:f7:9d:44:13:e0:70:b6:e2:81:02:74:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Validity
Not Before: May 13 08:01:00 2026 GMT
Not After : May 14 08:01:00 2026 GMT
Subject: CN=cbaca9c8c8415b2d91ec3ac9ff343ba2875c2f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:68:c6:67:26:26:e9:ba:10:5f:38:24:77:
c7:d1:0f:b8:73:f0:4d:7c:6d:1a:0f:66:7e:4e:8e:
92:d0:dc:39:31:bf:82:09:0b:7d:84:b6:1f:78:0a:
63:2a:cf:90:66:f0:8c:f0:96:2e:c5:c7:db:3e:0d:
6e:52:e8:72:2e:18:5b:40:18:e7:1b:aa:f0:1b:14:
64:47:41:00:b3:37:e8:29:92:96:54:f7:f2:43:f3:
ce:4b:8a:3a:e2:26:69:d5:02:6b:4c:6e:db:73:69:
b0:9d:91:74:bc:db:a0:03:ca:de:92:bb:69:23:f6:
21:ac:c8:cc:b0:0d:d1:dd:0c:37:13:b7:2b:dd:4d:
39:27:4f:5f:41:ab:90:d5:a8:c6:53:99:38:95:e1:
65:b3:6b:39:52:38:fb:80:57:60:3b:8e:4c:2d:15:
fd:0f:d1:c1:00:90:c6:28:30:2f:ac:2d:a6:e3:56:
6b:3f:5a:3f:a5:05:9a:7d:e4:3a:8e:3f:d3:f7:11:
5c:36:e0:39:ef:1b:d0:e7:55:6f:cf:b4:a0:cf:ed:
c5:e4:05:41:c8:27:3a:a6:68:a3:a9:f5:60:3f:43:
69:e5:86:8a:fd:04:8d:79:ef:4f:3a:8d:e1:43:a8:
20:02:3c:c7:56:4f:dd:49:90:e5:4c:7d:c0:1f:8d:
8c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AC:A9:C8:C8:41:5B:2D:91:EC:3A:C9:FF:34:3B:A2:87:5C:2F:91
X509v3 Authority Key Identifier:
keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:48:27:f7:27:67:2d:5f:b9:9f:30:c2:04:d9:33:8c:04:ba:
ca:55:be:9a:54:23:37:31:cf:49:0a:6b:86:c6:51:e8:25:34:
1a:38:c5:4e:5c:fb:35:b0:55:3f:b2:bf:f1:d5:2c:44:02:6d:
6a:b2:b8:42:da:56:6f:4d:0b:f1:41:bc:9a:1d:6f:7d:1f:e5:
7a:0c:4c:1e:12:4f:7b:c1:b2:e0:ce:b1:11:38:e7:0d:4c:cb:
5a:03:81:11:46:e9:36:d4:26:e6:83:cf:16:29:e9:30:0d:65:
e3:1b:ba:07:7d:f7:9b:25:d8:e4:fb:6d:5a:28:ce:3a:f3:65:
21:54:da:7a:c3:91:f4:db:38:74:b9:b2:57:6e:73:4d:21:0d:
51:ba:62:f3:e7:2b:8c:f7:e7:14:13:6c:4a:58:45:3e:ac:66:
cf:c7:ed:65:d8:62:48:34:67:1f:8a:df:b4:5a:bc:10:00:9e:
26:80:92:52:12:62:58:94:5f:3c:43:4e:8c:9a:8b:4b:dc:e0:
1b:14:fd:3a:b1:0a:f1:13:07:0e:f6:af:45:16:0a:1d:43:ad:
e2:d2:de:bf:da:f3:48:d9:81:3e:98:56:a3:94:0f:56:3f:f3:
6b:66:3b:54:80:80:21:33:43:3f:48:4f:b3:1a:c0:ba:0e:9a:
f2:23:cc:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gWnhE951EE+BwtuKBAnTaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOWRiMDBjYjE0YTM0YTE5M2Y4NGFjYTE0NGIyYWViMWYz
YzAyYzgwHhcNMjYwNTEzMDgwMTAwWhcNMjYwNTE0MDgwMTAwWjAzMTEwLwYDVQQD
EyhjYmFjYTljOGM4NDE1YjJkOTFlYzNhYzlmZjM0M2JhMjg3NWMyZjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq9oxmcmJum6EF84JHfH0Q+4c/BN
fG0aD2Z+To6S0Nw5Mb+CCQt9hLYfeApjKs+QZvCM8JYuxcfbPg1uUuhyLhhbQBjn
G6rwGxRkR0EAszfoKZKWVPfyQ/POS4o64iZp1QJrTG7bc2mwnZF0vNugA8rekrtp
I/YhrMjMsA3R3Qw3E7cr3U05J09fQauQ1ajGU5k4leFls2s5Ujj7gFdgO45MLRX9
D9HBAJDGKDAvrC2m41ZrP1o/pQWafeQ6jj/T9xFcNuA57xvQ51Vvz7Sgz+3F5AVB
yCc6pmijqfVgP0Np5YaK/QSNee9POo3hQ6ggAjzHVk/dSZDlTH3AH42MRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMusqcjIQVstkew6yf80O6KHXC+RMB8GA1UdIwQY
MBaAFEqdsAyxSjShk/hKyhRLKusfPALIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83NjEyYjAtM2UyNC00Y2U3LWExY2Et
YzFjNjYwNzhlNWJhLzEvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy83NjEyYjAtM2UyNC00Y2U3LWExY2EtYzFjNjYwNzhlNWJh
LzEvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0gn9ydn
LV+5nzDCBNkzjAS6ylW+mlQjNzHPSQprhsZR6CU0GjjFTlz7NbBVP7K/8dUsRAJt
arK4QtpWb00L8UG8mh1vfR/legxMHhJPe8Gy4M6xETjnDUzLWgOBEUbpNtQm5oPP
FinpMA1l4xu6B333myXY5PttWijOOvNlIVTaesOR9Ns4dLmyV25zTSENUbpi8+cr
jPfnFBNsSlhFPqxmz8ftZdhiSDRnH4rftFq8EACeJoCSUhJiWJRfPENOjJqLS9zg
GxT9OrEK8RMHDvavRRYKHUOt4tLev9rzSNmBPphWo5QPVj/za2Y7VICAITNDP0hP
sxrAug6a8iPMFg==
-----END CERTIFICATE-----
Generated at Wed May 13 14:35:15 2026 by rpki-client