Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft
File: spK68_TAei7dR9iMKxW2Wir33q0.mft (raw, json)
Hash identifier: UIrG3PUoas8+ljtehX3mZetMi1eiQ6f67aFtrylRT+Q=
Subject key identifier: 0A:42:FC:5E:FE:58:16:59:88:10:3B:AC:95:13:F2:09:EA:40:2D:3D
Authority key identifier: B2:92:BA:F3:F4:C0:7A:2E:DD:47:D8:8C:2B:15:B6:5A:2A:F7:DE:AD
Certificate issuer: /CN=b292baf3f4c07a2edd47d88c2b15b65a2af7dead
Certificate serial: 019D28F2FBFE89FD457839812FA7D2748756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spK68_TAei7dR9iMKxW2Wir33q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft
Manifest number: 0F1F
Signing time: Thu 26 Mar 2026 07:01:45 +0000
Manifest this update: Thu 26 Mar 2026 07:01:45 +0000
Manifest next update: Fri 27 Mar 2026 07:01:45 +0000
Files and hashes: 1: spK68_TAei7dR9iMKxW2Wir33q0.crl (hash: Fyrlgx5iIDvtdeTupueVKkxlfOfbPkRqF56dZk1XtqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/spK68_TAei7dR9iMKxW2Wir33q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:fb:fe:89:fd:45:78:39:81:2f:a7:d2:74:87:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b292baf3f4c07a2edd47d88c2b15b65a2af7dead
Validity
Not Before: Mar 26 07:01:45 2026 GMT
Not After : Mar 27 07:01:45 2026 GMT
Subject: CN=0a42fc5efe58165988103bac9513f209ea402d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0b:74:5d:44:79:8b:bd:b4:d1:81:41:d0:46:
62:4e:05:78:90:28:36:49:7f:a3:93:ce:37:62:74:
e9:ad:75:58:88:b6:d5:db:73:28:1a:a9:c9:9f:22:
e0:d9:ba:8f:91:b9:ea:91:53:b7:60:53:73:44:96:
7f:19:06:6d:64:9a:7b:3c:e4:6a:c3:93:04:8a:a6:
a1:32:b1:3c:16:5f:28:60:c9:33:f9:60:b8:0b:81:
69:a9:99:0b:0d:bf:3e:84:09:a2:6a:af:98:cc:45:
d4:f9:50:6e:a5:ef:8e:d7:86:6c:fb:b5:d8:77:1e:
68:3f:6a:f4:13:05:11:c4:3c:21:fe:bf:7a:66:f6:
3d:5a:d6:db:49:4f:cb:6e:15:53:0c:07:5f:0f:89:
da:c6:b5:ab:13:a1:e7:79:6e:97:c0:f5:6f:47:4e:
cb:66:71:8a:8d:fe:d5:fa:5c:b9:cd:44:fa:7f:85:
d4:a9:f0:86:1b:3a:13:4e:9e:af:71:51:7a:72:95:
df:e2:3c:75:8c:a1:82:5a:fc:c8:a1:40:48:b3:58:
bb:04:18:b2:be:83:eb:9a:99:33:df:17:0b:c9:62:
62:be:78:2f:92:71:e2:ca:bc:5d:70:8f:a6:d4:45:
f3:61:c8:d3:3c:86:80:ab:5f:98:8e:65:e2:d3:67:
94:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:42:FC:5E:FE:58:16:59:88:10:3B:AC:95:13:F2:09:EA:40:2D:3D
X509v3 Authority Key Identifier:
keyid:B2:92:BA:F3:F4:C0:7A:2E:DD:47:D8:8C:2B:15:B6:5A:2A:F7:DE:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spK68_TAei7dR9iMKxW2Wir33q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:66:20:ae:d8:24:93:70:28:a5:fc:ed:2d:ee:ad:c8:f5:65:
ee:0c:db:2c:9b:6f:4e:6e:9e:30:bd:93:7d:93:c8:c7:39:c0:
99:ce:de:89:ec:8f:52:30:dd:6e:d7:ab:07:5d:4e:b7:b4:97:
4b:69:38:67:42:35:bb:75:19:2e:28:ba:01:76:62:54:52:d7:
a7:55:c4:42:a0:eb:3f:cb:96:0a:6d:b8:26:6d:bf:04:4e:c7:
86:96:21:a1:ca:cb:e6:ce:a2:cd:7b:12:ec:fc:94:2e:b1:e2:
63:d0:91:fb:0d:b7:84:b3:e9:20:94:4a:af:6a:eb:59:41:25:
46:51:43:bb:7a:37:c4:a1:97:4a:b1:e1:55:b5:32:92:9d:78:
30:6d:a0:3a:a3:aa:e4:10:46:89:d2:d8:e6:c4:f7:66:0c:69:
06:9f:57:c3:b3:db:b5:38:41:fc:11:a4:48:b0:c6:3e:9c:4e:
40:c6:9c:31:af:3f:ca:fb:a8:46:50:40:32:17:ab:5f:fa:0f:
46:e4:ba:13:56:14:59:db:de:f9:dd:3e:71:25:cc:27:1e:fd:
02:bb:d1:ef:b8:ff:9b:13:fe:d8:3b:7d:10:6f:23:67:bc:7f:
85:4f:3a:fa:8e:93:f1:14:7b:d3:c5:85:95:54:e6:7f:01:a9:
36:d2:c1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:40 2026 by rpki-client