Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
File: Sp0WbGSEc4ly6bM5OBZfRImlFow.mft (raw, json)
Hash identifier: hePTVyoJ5uLNLeGK3Ii21hHBXgoPFf7cTYWkK6+OfHE=
Subject key identifier: 72:EF:9B:BC:31:21:66:8F:04:34:8B:67:56:69:75:2F:1C:5A:61:52
Authority key identifier: 4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
Certificate issuer: /CN=4a9d166c6484738972e9b33938165f4489a5168c
Certificate serial: 019D273AF757948B2B92B4BB0D46FB23FFEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
Manifest number: 0BFD
Signing time: Wed 25 Mar 2026 23:01:08 +0000
Manifest this update: Wed 25 Mar 2026 23:01:08 +0000
Manifest next update: Thu 26 Mar 2026 23:01:08 +0000
Files and hashes: 1: Sp0WbGSEc4ly6bM5OBZfRImlFow.crl (hash: YZVOk9l79Ou5+fwy6l4LW1zDZp1Xfyo3jJXhz9FfX7Y=)
2: ZyKblhYof-lvzcG5wAYzbAd36M4.roa (hash: Ov+QQPf43TIV3qdCbGiYFnfp3OquF/Rfa6pgoiI/wlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:f7:57:94:8b:2b:92:b4:bb:0d:46:fb:23:ff:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9d166c6484738972e9b33938165f4489a5168c
Validity
Not Before: Mar 25 23:01:08 2026 GMT
Not After : Mar 26 23:01:08 2026 GMT
Subject: CN=72ef9bbc3121668f04348b675669752f1c5a6152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:51:e5:34:b6:6d:87:b9:9f:3d:69:b6:2a:0f:
47:a9:78:6d:d3:b5:8c:39:0b:83:41:7f:cf:0a:5d:
79:8c:89:70:a5:b4:8a:dc:28:c1:4d:60:ce:66:57:
0c:95:7e:b8:ef:0c:99:e1:e4:47:fb:44:38:94:ed:
cc:81:b9:43:01:f7:4a:6c:08:76:aa:82:db:cb:23:
4a:84:3d:9f:ef:58:70:cc:1e:08:c8:53:03:1a:92:
7a:85:ca:47:59:49:e9:1e:88:3d:5f:b8:51:1b:50:
37:da:87:f6:5a:8b:76:45:a2:be:11:af:36:f4:df:
a7:f5:e8:ea:e0:73:db:90:5e:88:ff:3d:d4:31:22:
69:8a:98:9d:10:e2:35:19:86:45:ff:bb:59:70:f5:
01:dc:60:da:49:6a:65:7d:c3:02:9d:a4:44:c5:4e:
60:a7:24:d1:31:3c:63:b4:27:d4:b9:ba:ad:da:0c:
fe:da:b7:3f:cd:9e:f6:99:0c:ec:16:ff:c7:49:c4:
c0:6f:dd:60:17:8b:3a:02:7e:61:52:9d:01:5d:9f:
f3:61:6f:62:7e:bb:a0:eb:dd:8d:cf:89:1d:c9:37:
7d:63:ab:e6:8b:d1:3a:c6:43:ba:96:20:26:09:14:
d2:0a:6b:17:3a:8f:e9:83:9c:f4:5e:bd:43:6f:8f:
6d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EF:9B:BC:31:21:66:8F:04:34:8B:67:56:69:75:2F:1C:5A:61:52
X509v3 Authority Key Identifier:
keyid:4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6f:f3:ec:83:59:cf:f3:58:11:1f:fa:66:aa:c2:00:c0:4d:
96:10:71:14:c4:93:50:7b:f5:52:4b:63:82:93:14:de:ce:98:
23:e4:1b:d7:46:4c:dc:6b:2c:db:b2:ad:41:81:8a:8f:1e:28:
db:4f:0b:9a:a1:eb:7e:22:b6:4e:9a:36:d7:76:ad:03:fa:e2:
16:92:44:d1:57:a0:8d:d7:96:40:ee:61:5e:90:04:ac:23:f4:
e5:26:30:48:2d:b6:10:6c:81:98:5b:c6:21:97:76:40:e8:34:
3e:fa:7e:04:01:af:4f:49:2b:cb:96:5b:37:3e:0a:b3:28:4b:
16:93:45:ad:25:59:36:b4:08:a4:d7:32:1a:59:33:5c:98:cf:
c6:ae:9b:8e:f2:02:7e:2c:ec:e3:1b:e4:86:c9:37:96:b9:d4:
3d:8e:6b:19:5d:6f:67:77:5e:fa:8d:9d:a2:f3:af:bf:2b:30:
0d:ef:a0:74:77:25:d3:8d:1a:dc:68:c1:3b:f0:7d:c3:e1:ad:
04:96:a3:4b:c5:9b:37:77:ef:b5:37:37:fb:d4:41:24:c0:8f:
b3:84:aa:df:70:e5:7f:29:da:1c:97:72:99:c1:a2:92:51:41:
47:2e:45:93:8e:c0:d9:32:39:9d:9d:ce:b4:b9:cb:c3:3a:60:
85:05:54:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:03 2026 by rpki-client