Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft
File: vSpaBrm0P86hiFQdMMbcNDCq85I.mft (raw, json)
Hash identifier: ui5VPatfOHUcqg3GpCynOa0taw+uHOBO35oy43plhpI=
Subject key identifier: 0E:79:A0:E8:6E:63:B6:71:5E:DC:63:86:DE:23:A4:77:96:F0:F6:D7
Authority key identifier: BD:2A:5A:06:B9:B4:3F:CE:A1:88:54:1D:30:C6:DC:34:30:AA:F3:92
Certificate issuer: /CN=bd2a5a06b9b43fcea188541d30c6dc3430aaf392
Certificate serial: 019D28BBC0A36567178A21244E03F1A6190A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSpaBrm0P86hiFQdMMbcNDCq85I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft
Manifest number: 135C
Signing time: Thu 26 Mar 2026 06:01:26 +0000
Manifest this update: Thu 26 Mar 2026 06:01:26 +0000
Manifest next update: Fri 27 Mar 2026 06:01:26 +0000
Files and hashes: 1: vSpaBrm0P86hiFQdMMbcNDCq85I.crl (hash: 5UesuBRslGAYeQydD7Z5levRA5uEGN4LUhguYeTz8Nk=)
2: x8WGsbpBFb_K_stBpznpxseC6AA.roa (hash: G/WJvcDESUpg5wbrqINkweic0INsvffGZy1Iocg8/w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSpaBrm0P86hiFQdMMbcNDCq85I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:c0:a3:65:67:17:8a:21:24:4e:03:f1:a6:19:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2a5a06b9b43fcea188541d30c6dc3430aaf392
Validity
Not Before: Mar 26 06:01:26 2026 GMT
Not After : Mar 27 06:01:26 2026 GMT
Subject: CN=0e79a0e86e63b6715edc6386de23a47796f0f6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:4b:fa:b6:96:6e:37:15:24:45:a7:74:ba:
99:ef:db:00:b7:f7:26:69:f5:89:df:38:b1:52:19:
64:9c:ab:82:2c:05:dc:85:42:62:af:49:fe:43:80:
10:d2:e3:8f:66:62:b2:e4:e5:ee:4f:c7:00:b2:11:
6f:e7:45:22:50:65:8f:cc:3d:0e:36:36:96:14:74:
d7:12:46:eb:6c:de:d2:32:07:25:df:06:fe:cf:93:
35:c8:d1:ca:7c:31:68:06:f8:04:c8:eb:c1:8a:9d:
9c:65:49:a0:ac:64:a7:ac:54:78:78:75:61:7e:6a:
6a:11:c2:4f:d3:72:e9:65:ba:8d:27:64:11:db:03:
65:17:d6:43:e6:08:cd:78:06:92:8e:ee:e1:27:cb:
3e:b6:1c:8f:00:be:fd:c4:0e:2d:cb:b1:7f:ca:1a:
54:2e:c7:42:3e:5e:12:d9:4a:a7:54:87:a1:b0:1d:
49:a7:ae:bc:27:14:c5:f7:06:62:3e:01:eb:5a:93:
5f:d1:37:49:f3:2f:01:68:bd:7e:df:3e:c2:b2:2e:
1c:04:9f:ce:91:20:62:e7:93:39:8b:13:17:48:fa:
b7:a1:2e:87:c8:78:23:bf:4b:10:45:a0:62:dc:c2:
e4:a3:e8:f3:94:9b:29:79:c7:ff:b0:8b:d8:a3:e5:
2e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:79:A0:E8:6E:63:B6:71:5E:DC:63:86:DE:23:A4:77:96:F0:F6:D7
X509v3 Authority Key Identifier:
keyid:BD:2A:5A:06:B9:B4:3F:CE:A1:88:54:1D:30:C6:DC:34:30:AA:F3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpaBrm0P86hiFQdMMbcNDCq85I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f3:80:3a:23:03:d6:b8:ed:0b:c4:ce:c4:67:d7:e8:d4:b8:
ac:6a:32:e4:61:de:c6:5c:8a:b3:c4:d6:86:09:01:ee:1e:58:
dd:62:13:4b:2b:f1:0c:29:7f:78:99:09:e7:f4:cf:ab:75:e0:
b0:7c:2e:da:f9:24:c0:59:cb:02:c4:e1:6a:3d:a5:64:79:e7:
bf:3f:7f:7f:77:3d:a7:e6:39:7e:b6:a7:76:05:e7:46:ce:e9:
a8:aa:7f:5f:0d:0d:b2:d8:13:de:69:60:31:45:07:cb:65:1d:
61:3a:c5:4c:13:6f:07:ef:d1:8c:fa:43:10:59:83:49:14:24:
3c:23:9f:e6:b4:d3:54:76:1e:4c:ef:2b:cd:26:aa:17:55:72:
15:25:fb:bc:91:0d:1e:c4:ed:f7:e2:bd:35:d3:16:cb:47:c7:
a9:f6:84:df:cb:c5:66:e2:05:bd:9f:52:46:f9:0f:76:30:87:
05:a7:02:97:ea:b9:e3:f6:85:ee:7a:2f:ee:1a:47:19:f6:db:
df:96:f3:71:30:89:ba:ea:65:82:48:fc:43:1c:50:cd:38:18:
60:aa:54:93:f4:1c:a2:14:7c:b8:96:9a:90:36:f8:cd:60:39:
4b:fb:a1:7e:3a:d7:bd:2c:df:7c:d1:d8:36:ba:78:3b:f5:e6:
f3:82:d9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:33:06 2026 by rpki-client