Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
File: spIJTWkd9KfDjxa3VVfpwm1KxpI.mft (raw, json)
Hash identifier: I56uJVYUy7Oh8Fh6ClbBwUyGapxzLotPhwXtZjN9NkQ=
Subject key identifier: 37:18:A1:18:2F:5A:2D:F3:55:75:6A:E2:1A:64:A2:02:30:22:58:D6
Authority key identifier: B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
Certificate issuer: /CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Certificate serial: 019D2B4E256EF272757BFA525755B7671891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
Manifest number: 178E
Signing time: Thu 26 Mar 2026 18:00:34 +0000
Manifest this update: Thu 26 Mar 2026 18:00:34 +0000
Manifest next update: Fri 27 Mar 2026 18:00:34 +0000
Files and hashes: 1: 0E-nyOZ29zT4VlvH5MYeOKciQqI.roa (hash: n1KClvottVe9Rxjk6bmhkUknz6tneHeORGIxNcy3VKk=)
2: spIJTWkd9KfDjxa3VVfpwm1KxpI.crl (hash: mmjfp4zIKp1Z8AxvpJpKBYbJ4CwBalYhXkR8C7x8DcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:25:6e:f2:72:75:7b:fa:52:57:55:b7:67:18:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Validity
Not Before: Mar 26 18:00:34 2026 GMT
Not After : Mar 27 18:00:34 2026 GMT
Subject: CN=3718a1182f5a2df355756ae21a64a202302258d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:c5:ce:52:33:6b:66:01:73:52:e9:30:83:
24:6a:8c:d6:e5:71:d7:25:76:c5:13:7d:e1:ac:32:
7d:60:5e:7a:84:95:d4:ac:8c:6b:12:b3:81:f0:63:
19:b2:e6:66:09:94:31:07:f4:98:4f:bc:bf:4c:0d:
27:b8:3c:a5:6b:be:6c:7f:c6:4e:73:15:52:fa:84:
2f:29:2e:f1:d1:f5:ed:6a:f0:03:33:2f:a2:67:64:
a9:62:f0:42:9e:60:c5:76:ab:fb:62:c1:af:40:63:
29:d8:20:1a:79:9e:75:61:63:c5:a6:42:9b:15:e4:
51:41:8c:25:56:5d:47:32:cc:08:db:c9:65:cf:17:
6c:17:b3:43:13:97:51:af:41:9e:2d:7c:64:d5:de:
1d:12:8c:8d:b8:bd:2f:87:45:a0:c7:f0:0a:3f:75:
86:6d:be:80:ef:c1:37:e5:55:f4:55:f3:3d:64:40:
99:5e:a8:0b:fd:c5:01:09:de:ec:61:2e:3f:11:e6:
08:13:68:87:0f:b6:47:07:00:fe:a6:60:69:ee:38:
51:dc:be:b6:e0:eb:2e:74:84:b7:2c:c9:44:62:b1:
7c:2d:cd:14:de:be:19:8f:f4:15:7a:f4:c4:6d:07:
22:f0:59:68:73:7a:d9:ef:51:90:f1:82:2d:6f:b4:
48:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:18:A1:18:2F:5A:2D:F3:55:75:6A:E2:1A:64:A2:02:30:22:58:D6
X509v3 Authority Key Identifier:
keyid:B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fb:29:60:08:03:93:3d:61:b4:9f:96:e8:59:0b:9a:99:77:
27:2d:05:e8:29:47:d9:b2:c2:5e:43:ca:e3:a5:0d:16:1a:3a:
f5:03:9c:5b:a4:83:de:9d:32:16:7c:ef:80:d9:e0:19:40:da:
0e:22:fd:00:e5:93:58:97:9f:cc:de:a3:3d:9a:94:ba:29:09:
45:ca:86:59:4f:0e:86:76:f3:ab:54:e4:a0:e2:19:f7:90:95:
41:f4:b7:4b:57:8e:c5:0d:30:b3:df:f4:38:19:44:6a:9e:74:
75:89:04:0e:dd:6b:47:a4:05:2d:27:15:18:cb:0d:c8:e1:da:
b2:b6:84:80:83:b0:bb:1c:d3:bc:be:b1:f6:0f:99:d3:f1:ac:
e4:c1:5b:0a:05:c5:9a:54:f7:fc:44:df:24:22:dd:1a:f5:de:
bb:46:cc:3e:6d:3f:ac:5f:72:29:41:84:70:bf:93:8b:74:f1:
3b:e1:82:4c:6e:97:e3:9c:ef:6e:5d:d3:cf:f7:03:32:95:db:
18:35:81:78:36:ce:da:83:c0:9a:58:c2:b2:2a:78:f7:f5:16:
be:00:ab:c8:4d:a1:4d:17:45:e9:75:53:ed:10:d7:37:20:81:
b5:dc:23:d1:83:7f:75:12:b2:4e:17:d8:d7:03:ae:8a:2d:50:
1f:25:a1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:48 2026 by rpki-client