Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
File: spIJTWkd9KfDjxa3VVfpwm1KxpI.mft (raw, json)
Hash identifier: SIe8B6w5o6a3F+hVHolkhmxfy/kSBZ57rBSsezIVLMI=
Subject key identifier: 9E:83:D8:7E:E9:DE:05:0A:00:45:B8:B4:DC:B3:21:22:7F:1E:2F:CB
Authority key identifier: B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
Certificate issuer: /CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Certificate serial: 019D2961409A733D7CEEA4FC9FCE687F3F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
Manifest number: 178D
Signing time: Thu 26 Mar 2026 09:02:12 +0000
Manifest this update: Thu 26 Mar 2026 09:02:12 +0000
Manifest next update: Fri 27 Mar 2026 09:02:12 +0000
Files and hashes: 1: 0E-nyOZ29zT4VlvH5MYeOKciQqI.roa (hash: n1KClvottVe9Rxjk6bmhkUknz6tneHeORGIxNcy3VKk=)
2: spIJTWkd9KfDjxa3VVfpwm1KxpI.crl (hash: 39i3Pi5D52Vgiyx2UycXdMDcwFg2prfdWWohRT+VMUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:40:9a:73:3d:7c:ee:a4:fc:9f:ce:68:7f:3f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Validity
Not Before: Mar 26 09:02:12 2026 GMT
Not After : Mar 27 09:02:12 2026 GMT
Subject: CN=9e83d87ee9de050a0045b8b4dcb321227f1e2fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1d:da:39:f6:3f:b2:f2:c9:ce:28:83:c0:eb:
4f:4e:32:3d:e2:1b:50:b3:78:ae:c9:9b:ab:41:41:
8f:1d:8b:54:8c:60:1b:22:07:50:02:b0:34:fd:c5:
d2:83:fd:ba:30:52:a1:17:f2:14:95:cd:4b:56:03:
83:4c:af:d5:6f:7c:50:0d:49:32:74:f5:f9:c0:49:
9d:ca:d5:58:87:01:d9:a1:f2:4f:be:8e:06:b4:47:
9b:b5:80:eb:c7:d5:d3:6c:fc:37:4c:62:26:c4:01:
32:a0:c1:92:5e:d8:32:f6:f8:86:fd:fe:44:50:60:
f8:93:07:7a:5a:42:f9:6f:36:e1:a2:cf:34:2b:e0:
6f:45:37:1a:6b:2c:19:8c:4d:a1:4a:ff:8e:c2:46:
f6:c2:21:78:9b:58:22:d2:29:05:54:45:1b:86:e5:
67:0e:57:b6:3c:5d:5f:13:7d:5f:1c:25:1f:b1:b1:
1f:84:b1:0e:23:04:14:00:7d:24:88:07:50:19:e6:
f0:9c:f0:f4:86:8c:59:43:b2:6a:94:95:20:a5:43:
e6:d0:90:66:59:b5:0b:93:36:a3:35:b6:ec:b5:03:
66:26:21:6b:cb:3f:61:0d:15:6d:33:d2:4f:9a:0a:
54:45:35:4f:fa:19:f2:0f:42:0e:62:80:65:9a:e2:
c9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:83:D8:7E:E9:DE:05:0A:00:45:B8:B4:DC:B3:21:22:7F:1E:2F:CB
X509v3 Authority Key Identifier:
keyid:B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7a:4f:b0:50:c6:19:63:8b:51:3d:db:1e:04:a2:b5:73:34:
a1:eb:04:74:a1:e5:a5:98:af:81:de:a5:96:d6:3f:7b:e8:a5:
9e:3a:a5:14:a8:a7:80:47:d0:8d:2c:a7:ae:05:3e:ca:e2:ca:
13:f5:6c:ee:13:83:95:33:6b:66:b8:80:16:bb:5f:48:78:88:
b1:f9:b5:b6:d6:52:ca:df:de:89:58:9f:43:7a:32:e0:b3:cd:
e0:b3:3e:5e:86:22:37:63:68:1f:c2:5e:ab:18:1e:ec:71:4a:
c4:32:5a:58:1c:8b:f1:2f:ed:7f:fc:15:3e:1f:a1:a1:6b:3b:
b6:7c:13:1c:af:b1:e4:16:c0:ec:87:89:d6:f0:69:39:c0:d2:
7c:7f:0d:65:bd:b4:f5:ad:97:34:44:40:65:b0:3f:17:96:a4:
55:44:d6:9c:7a:12:77:60:4f:85:d8:d2:88:cd:05:e8:c7:23:
f4:38:1a:20:64:24:41:e9:c6:07:83:62:ae:bf:e4:1b:ff:af:
b5:1e:a3:71:94:14:84:30:22:f0:b5:ae:8d:c7:ad:6c:e3:8b:
b4:78:b1:5b:d8:7e:0d:68:c0:1c:79:9a:f8:e2:46:0e:1a:aa:
b9:6d:77:5d:1d:a5:31:e1:37:9c:ef:1a:d1:94:c8:92:9a:73:
3e:88:b5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:19:31 2026 by rpki-client