Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
File: spIJTWkd9KfDjxa3VVfpwm1KxpI.mft (raw, json)
Hash identifier: y2HW+mK7rhNG6MwoVGyOfVqVrAcZX8eSyHPv31qiaWA=
Subject key identifier: 5A:78:B1:64:29:A1:73:00:06:71:DB:B1:AC:1E:6C:12:49:F9:22:11
Authority key identifier: B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
Certificate issuer: /CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Certificate serial: 019E20912D74C11A589F3A9F45C320FB1555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
Manifest number: 180D
Signing time: Wed 13 May 2026 09:00:45 +0000
Manifest this update: Wed 13 May 2026 09:00:45 +0000
Manifest next update: Thu 14 May 2026 09:00:45 +0000
Files and hashes: 1: 0E-nyOZ29zT4VlvH5MYeOKciQqI.roa (hash: n1KClvottVe9Rxjk6bmhkUknz6tneHeORGIxNcy3VKk=)
2: spIJTWkd9KfDjxa3VVfpwm1KxpI.crl (hash: buWU+pNDrfolm0hLp14lbNX033hHH6FIiJy8pjqveWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:2d:74:c1:1a:58:9f:3a:9f:45:c3:20:fb:15:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Validity
Not Before: May 13 09:00:45 2026 GMT
Not After : May 14 09:00:45 2026 GMT
Subject: CN=5a78b16429a173000671dbb1ac1e6c1249f92211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:ab:d1:de:77:fc:82:34:75:8a:39:3d:8e:e5:
81:60:b5:50:25:69:ce:f1:f1:62:e0:35:62:de:d9:
4c:7a:93:45:fc:a1:6e:d4:a2:6b:4d:93:2b:9c:c5:
76:cd:1d:2f:16:3f:c2:0b:67:45:b2:4d:d7:cc:df:
dd:ca:d8:1f:76:ba:ee:74:80:99:c5:2b:1a:a9:60:
12:bc:2b:00:f0:a8:e9:e7:23:a6:26:76:08:9c:1e:
6f:ca:ab:b0:39:08:36:08:c7:1b:b6:f2:14:0c:d6:
78:6e:0b:8f:7d:1d:10:c0:60:17:c5:15:9e:05:af:
85:34:b8:44:5e:db:b7:25:46:6d:46:56:09:ee:c6:
77:3f:24:22:dd:df:fa:c1:11:62:48:5b:2b:f9:40:
c2:24:e2:c3:1e:76:f5:79:da:7c:b5:00:2b:99:31:
d7:d7:8b:1a:1d:fc:38:6c:fa:a0:b6:44:2e:0d:24:
4e:a2:b7:cc:ef:d8:42:5c:a5:94:a3:25:26:42:e0:
a6:fe:41:88:a0:df:46:ff:0c:ac:64:e7:00:b2:61:
5d:9f:8f:40:f4:bf:4f:df:46:c2:73:5e:1d:bb:dc:
d5:c2:a3:c3:34:d8:40:7c:0e:68:43:4e:02:f7:5a:
39:df:e1:08:9a:b9:8c:86:7d:be:c3:a3:a3:a5:c7:
ae:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:78:B1:64:29:A1:73:00:06:71:DB:B1:AC:1E:6C:12:49:F9:22:11
X509v3 Authority Key Identifier:
keyid:B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:43:63:29:5a:80:e3:12:7a:1b:05:ec:ca:52:5f:fc:bd:01:
5b:d1:2b:37:cd:da:b6:e8:b6:05:d8:48:4d:35:e8:db:22:75:
2c:91:25:56:78:2b:9e:8d:12:59:0d:05:6b:d1:66:b1:cd:82:
7f:47:bc:be:41:24:e1:40:ea:6b:e1:d9:a3:73:01:b7:e7:3b:
6f:25:3b:a8:ff:a6:c8:05:c2:38:c8:44:8b:d6:38:d2:84:5a:
4c:8e:50:b5:a0:f7:0e:23:62:5f:85:fa:4f:11:b0:97:b5:61:
81:80:d3:4f:e0:af:3b:8f:a9:69:19:ba:15:46:6d:d0:96:b4:
75:85:1f:dc:d7:75:fd:2d:bf:41:75:5a:10:f1:37:61:9f:53:
7f:cc:d1:ab:0f:76:b1:ee:ce:50:ac:dc:a4:6b:82:0e:f6:d0:
51:b9:21:5c:4c:d8:e9:9b:e2:9e:86:1c:c2:1b:3c:d2:d7:5d:
98:8b:f6:bd:b0:ea:f9:9c:77:b2:26:85:d9:6b:d5:db:f2:2a:
c3:78:44:d6:5b:93:17:8b:59:5e:8e:ee:20:3d:42:2a:c2:74:
7c:98:50:57:27:90:7a:57:99:ec:d8:7e:51:aa:6d:5b:0b:59:
43:b0:b9:2e:97:60:8c:62:34:46:6e:03:36:88:7a:cd:15:d3:
49:f2:c5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:15:26 2026 by rpki-client