Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
File: Sp0WbGSEc4ly6bM5OBZfRImlFow.mft (raw, json)
Hash identifier: sIt0Tb51kuowS+f5wrVTSGhXhQBiTTK7eaEE9Ly81T8=
Subject key identifier: C7:41:62:52:11:C6:AE:E8:8D:E1:46:FF:3C:8D:09:29:24:58:C3:E2
Authority key identifier: 4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
Certificate issuer: /CN=4a9d166c6484738972e9b33938165f4489a5168c
Certificate serial: 019F9512C9D56B49E013154526D762C84893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
Manifest number: 0D3F
Signing time: Fri 24 Jul 2026 17:01:03 +0000
Manifest this update: Fri 24 Jul 2026 17:01:03 +0000
Manifest next update: Sat 25 Jul 2026 17:01:03 +0000
Files and hashes: 1: Sp0WbGSEc4ly6bM5OBZfRImlFow.crl (hash: P5B813ulBGWO7ckiRlMhP9ofsDyjwNw67vbhmWnHxE0=)
2: ZyKblhYof-lvzcG5wAYzbAd36M4.roa (hash: Ov+QQPf43TIV3qdCbGiYFnfp3OquF/Rfa6pgoiI/wlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:c9:d5:6b:49:e0:13:15:45:26:d7:62:c8:48:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9d166c6484738972e9b33938165f4489a5168c
Validity
Not Before: Jul 24 17:01:03 2026 GMT
Not After : Jul 25 17:01:03 2026 GMT
Subject: CN=c741625211c6aee88de146ff3c8d09292458c3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:62:4a:8c:22:25:b2:d2:dd:cf:df:61:c0:90:
3a:c0:65:a8:f6:91:d9:5c:f5:a4:88:40:95:c6:14:
be:c3:5b:98:34:78:80:bb:b0:df:95:76:64:c5:9f:
cc:a4:5e:14:cb:fc:f2:5a:06:8e:d4:b0:67:1b:3f:
24:6d:db:82:d2:4e:3b:77:60:f1:b5:5b:8c:2f:9c:
6a:f3:93:b2:d5:0e:8f:a9:be:67:e9:46:53:ca:17:
ab:cb:65:0f:f3:77:ca:9f:ee:4d:71:22:a9:3f:8d:
b5:0d:bb:a7:b4:58:ea:c1:a3:fe:59:b2:9a:bb:51:
2e:c2:41:28:1d:73:ad:70:6c:2b:70:50:2c:6f:11:
8a:d0:7e:a7:41:6a:9f:ff:66:cd:99:c8:28:a8:3e:
0f:3e:1f:0a:3f:22:97:af:a0:92:e7:f7:a5:2d:74:
fe:21:41:f4:1e:9f:86:dc:cf:1f:c5:c0:1d:79:8d:
56:ad:08:d9:97:13:8c:a7:65:25:aa:e3:0b:91:97:
fc:7d:75:76:63:49:7f:c1:e7:e8:0e:fe:1c:04:cb:
31:fc:17:7e:e4:ed:cf:78:96:11:37:c6:67:fc:ac:
4c:cc:c3:45:90:02:ac:42:d8:35:54:81:11:10:b0:
84:b7:b4:52:1f:9e:2d:fd:73:c9:7e:24:39:06:fc:
a0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:41:62:52:11:C6:AE:E8:8D:E1:46:FF:3C:8D:09:29:24:58:C3:E2
X509v3 Authority Key Identifier:
keyid:4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e0:ac:09:71:a4:b7:da:14:9f:78:20:69:bc:e2:ae:fa:96:
4c:e2:20:2c:a1:e1:da:b8:4c:e2:a2:a5:63:a6:12:f1:02:4b:
6b:ab:2f:6d:5a:41:d0:7a:3f:93:81:ed:4f:dd:78:e1:01:fe:
17:b7:aa:be:a7:ec:72:b9:90:ae:2d:e9:31:d1:7c:e1:60:00:
b6:10:e6:d9:06:f2:7c:bb:4e:79:fe:c6:9d:1b:61:21:d8:17:
0b:54:21:df:b1:4c:dd:1c:03:a0:94:ea:d9:55:8a:6f:14:6f:
17:9c:d5:35:ea:d7:15:6c:a3:fa:e8:67:9c:80:d1:ca:34:3f:
95:9e:67:c7:d5:64:c4:c0:bb:40:a9:b9:b9:6b:89:8e:b3:66:
8f:8b:28:bd:e2:7a:99:23:cd:3a:a8:cf:24:d4:2a:d7:fe:71:
4d:f1:0c:6b:52:1f:98:90:17:5e:85:21:e0:6e:f4:5a:37:4a:
f4:34:aa:dd:b3:67:d9:04:eb:4c:93:91:bb:14:60:3f:56:20:
35:cd:47:82:9e:d6:4c:29:e3:70:57:36:88:3b:43:c9:b0:21:
3f:b7:50:ea:b3:61:c5:cc:8e:e8:5e:57:56:23:e1:8b:db:15:
35:11:e2:54:12:a1:c2:0d:9c:c8:a3:46:7b:7b:c9:6c:8e:2c:
41:b6:9e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:04:13 2026 by rpki-client