
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.mft
File: SPaKoudVqgrGmnD-jv6-pMIzVhE.mft (raw, json)
Hash identifier: x5uUJxwb/ex3rfbLGnQxQEI+8YsBMKQplccEval+j6Q=
Subject key identifier: 01:97:57:22:20:3D:F6:C1:66:50:A6:7D:8C:63:D6:68:90:11:BE:85
Authority key identifier: 48:F6:8A:A2:E7:55:AA:0A:C6:9A:70:FE:8E:FE:BE:A4:C2:33:56:11
Certificate issuer: /CN=48f68aa2e755aa0ac69a70fe8efebea4c2335611
Certificate serial: 019D26285AE3F887366A01CEBA250C1711E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPaKoudVqgrGmnD-jv6-pMIzVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 18:01:12 +0000
Manifest this update: Wed 25 Mar 2026 18:01:12 +0000
Manifest next update: Thu 26 Mar 2026 18:01:12 +0000
Files and hashes: 1: SPaKoudVqgrGmnD-jv6-pMIzVhE.crl (hash: 44E6OMAflohgno/Vx9xjRZw+MrSAaoVGYaRduVFSzgw=)
2: q12PhbXFXUD5vhXUFCvXErRDHG8.roa (hash: ifcVTRx1+uNypXVPsmVv2T6QixwYvf/zF8XDV/mGPNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SPaKoudVqgrGmnD-jv6-pMIzVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:5a:e3:f8:87:36:6a:01:ce:ba:25:0c:17:11:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f68aa2e755aa0ac69a70fe8efebea4c2335611
Validity
Not Before: Mar 25 18:01:12 2026 GMT
Not After : Mar 26 18:01:12 2026 GMT
Subject: CN=01975722203df6c16650a67d8c63d6689011be85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cb:b5:86:ce:46:5b:c6:e7:5f:8e:9b:ca:b2:
5d:a8:c8:ab:85:f1:28:2c:54:32:e6:9f:9f:06:b4:
c1:6d:8e:f3:3f:36:48:fb:7c:dd:3b:61:dd:ca:e9:
de:69:87:7d:b2:27:de:d5:44:8f:a3:1a:45:70:c5:
23:e6:34:b5:b5:0c:25:e9:d4:57:7d:2e:69:f9:b0:
94:03:2d:db:52:a3:14:31:14:20:5a:2c:d0:1b:e3:
e8:e5:4d:39:68:e5:06:b9:a7:c7:bf:5d:c3:a7:3d:
e8:ad:d1:6c:93:91:e2:9e:ee:27:07:3c:cf:92:1e:
e7:75:6c:99:d0:eb:8b:d5:6b:f5:1b:93:60:e1:a9:
f6:fd:a7:0f:cb:47:6c:c9:c0:99:19:e8:22:d4:26:
10:cd:25:17:00:9a:45:ac:1e:06:fb:9e:4a:2b:13:
d6:03:50:05:22:cb:01:d1:49:d9:f3:2a:b6:42:8b:
3e:a3:6f:6d:ab:00:84:db:bf:08:b9:66:76:d6:8e:
5e:46:8e:94:8a:20:81:e0:80:24:42:8c:30:e4:a0:
30:65:8e:76:96:5d:0a:28:a4:9e:a9:a0:ef:3d:18:
12:18:cc:3f:3b:a8:99:63:b0:bc:bb:13:9e:b6:6f:
09:1c:53:41:91:b7:79:c5:98:e9:69:f5:59:bb:5c:
bc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:97:57:22:20:3D:F6:C1:66:50:A6:7D:8C:63:D6:68:90:11:BE:85
X509v3 Authority Key Identifier:
keyid:48:F6:8A:A2:E7:55:AA:0A:C6:9A:70:FE:8E:FE:BE:A4:C2:33:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPaKoudVqgrGmnD-jv6-pMIzVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3c:70:c3:b1:21:89:a4:b5:7b:95:77:3b:78:a4:0a:3c:25:
3d:43:a4:64:3a:f5:69:e6:4e:a7:eb:ac:2c:7a:68:ed:d5:9a:
d8:13:cd:d3:34:28:04:f6:66:23:c5:c3:c2:8f:e3:c2:36:07:
95:7a:38:55:9d:1f:c4:51:88:07:a1:40:2d:13:ba:94:34:da:
77:ee:3c:42:d2:b2:fe:42:f4:2e:70:81:79:2a:03:c7:03:12:
2d:f1:be:11:77:76:f6:64:44:0a:fc:b4:7b:99:8c:b0:64:7b:
ae:58:39:6a:b3:91:e5:c5:21:7a:ba:46:bc:68:f0:5f:c7:14:
15:d3:ea:ab:a4:79:09:16:de:99:34:91:b8:3f:2f:7d:20:10:
86:4c:b5:c9:ff:e3:f5:9c:ca:75:37:64:80:c8:c7:88:15:d4:
7c:81:17:19:da:5f:d7:1b:f6:51:a0:48:c1:2d:4c:77:79:d9:
6a:4e:54:a6:33:05:0c:81:1e:8d:9d:79:68:f2:1e:72:57:80:
92:da:ee:6f:7c:ea:86:8c:e9:3e:2a:b4:61:66:12:16:dc:9b:
8c:8d:b3:bb:82:db:a3:1a:0e:4d:3c:7c:9a:23:be:d5:22:cb:
81:2b:0c:37:f3:9a:e8:29:0b:e8:03:cb:01:71:11:ed:2b:9f:
ca:f4:fc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:42 2026 by rpki-client