Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
File: Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft (raw, json)
Hash identifier: 3w8OXeI0PW5Jgfi3G9DWkBrF2G+kmbv8bguiuv8E6cc=
Subject key identifier: 1E:B7:FC:3C:CB:B7:7E:ED:DF:83:8C:A8:3B:1C:4E:A9:81:16:90:DB
Authority key identifier: 4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
Certificate issuer: /CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Certificate serial: 01A0DFBD2673627F7CC4D0C05D92FB8D35B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
Manifest number: 0E81
Signing time: Sat 26 Sep 2026 22:01:50 +0000
Manifest this update: Sat 26 Sep 2026 22:01:50 +0000
Manifest next update: Sun 27 Sep 2026 22:01:50 +0000
Files and hashes: 1: Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl (hash: u7sTQbCy96SODFcdOss4nAvqFmiu5rKLx4Z/qqAcpFY=)
2: jaXIMGohDtqmN9HK0RSue183PUM.roa (hash: /dhEKzEAshSscrjSIfqANdXDpyu38QD3HTeuahz7d5g=)
3: sl2grtF62EGJRr--AtlkQoKUOgo.roa (hash: 8IWHvB3aWoMq1k/0X1fLbANShkPS5Vl92y6S/fnPKKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bd:26:73:62:7f:7c:c4:d0:c0:5d:92:fb:8d:35:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Validity
Not Before: Sep 26 22:01:50 2026 GMT
Not After : Sep 27 22:01:50 2026 GMT
Subject: CN=1eb7fc3ccbb77eeddf838ca83b1c4ea9811690db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:18:b6:b2:d8:04:e0:53:24:68:39:c4:c7:43:
94:8f:b9:aa:08:6a:38:31:99:92:f9:a6:d6:e8:63:
4f:82:08:6f:26:ba:15:25:40:21:b1:a4:b8:92:ba:
b0:3a:21:37:89:b8:a0:d6:2d:ff:cc:9a:2c:e3:38:
7c:07:47:b7:36:62:e4:2d:71:6b:ab:de:73:e8:b3:
54:20:67:27:37:cd:94:9c:20:f3:14:df:74:34:d6:
28:ce:0a:04:20:5b:95:51:ec:3f:eb:c5:73:cf:d5:
79:a8:68:0f:69:8d:7a:ce:0f:eb:87:09:35:4f:c8:
28:a3:10:83:a9:72:fc:e9:47:3a:b0:63:1f:38:b0:
13:a8:ba:c9:d6:12:38:69:0d:d3:e0:3a:2f:3b:8e:
e8:21:25:7b:5b:58:19:33:81:99:ed:04:cc:5d:33:
d5:3f:d2:b5:67:a8:f8:af:c4:ec:8a:4a:e8:2f:0b:
7b:ea:2c:e0:56:d8:77:b3:1d:52:1b:76:33:8a:60:
50:ee:7e:ea:a5:4c:f8:2a:c4:23:9c:dc:cb:eb:cc:
47:b5:70:dd:46:18:bd:59:65:b8:fd:d6:82:2f:0f:
c1:0a:00:93:d0:24:ec:c3:e9:70:8a:c2:55:93:9e:
eb:cb:63:ed:25:a0:01:8a:8d:a3:95:31:9a:8d:42:
a4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B7:FC:3C:CB:B7:7E:ED:DF:83:8C:A8:3B:1C:4E:A9:81:16:90:DB
X509v3 Authority Key Identifier:
keyid:4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2a:e3:30:ca:98:fa:2a:2a:0d:c7:8f:5d:c4:6a:bf:aa:0c:
30:b0:95:32:aa:cf:f5:90:66:6b:e0:2d:11:77:d4:a6:ce:bf:
72:a6:29:ce:58:16:49:1b:1f:a0:ba:79:67:64:4b:f8:37:f5:
a4:8d:b7:c5:de:79:a6:a7:cd:15:87:b6:78:ff:39:13:35:f8:
0f:33:0d:d6:be:6a:21:28:42:64:f1:78:1f:00:d8:4e:9d:5b:
8e:33:01:46:5b:7e:79:e6:95:f7:77:15:68:9f:b3:e0:8c:f2:
72:a3:19:b1:3a:47:4b:6a:b0:7e:52:89:9a:80:8b:88:6f:4a:
30:fd:db:b9:b8:37:42:65:7f:5e:6e:b5:64:4e:d5:2d:91:92:
81:a6:8f:b1:9e:a7:89:c9:a4:21:42:47:3b:10:c5:48:f5:42:
ad:5e:b6:10:bc:33:b7:15:2c:8b:69:83:16:49:1b:76:77:98:
d8:d8:71:71:d3:51:a8:19:c0:88:ce:4e:62:62:d2:d4:f2:df:
88:a9:fa:82:47:d3:1e:97:06:b9:fa:13:04:93:ba:e3:b4:94:
1a:30:fd:a2:f5:ff:0b:c2:86:05:78:fb:21:56:c4:9b:db:23:
f0:b1:3e:8b:f8:44:d6:cb:22:60:85:bc:d1:3f:f2:52:26:18:
31:c5:fa:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfvSZzYn98xNDAXZL7jTW2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOTdiYzUwNGYzMDc1ZmI0ZjM5MjM2NDA4YzFjMmQ1NDdi
NDRjMjYwHhcNMjYwOTI2MjIwMTUwWhcNMjYwOTI3MjIwMTUwWjAzMTEwLwYDVQQD
EygxZWI3ZmMzY2NiYjc3ZWVkZGY4MzhjYTgzYjFjNGVhOTgxMTY5MGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xi2stgE4FMkaDnEx0OUj7mqCGo4
MZmS+abW6GNPgghvJroVJUAhsaS4krqwOiE3ibig1i3/zJos4zh8B0e3NmLkLXFr
q95z6LNUIGcnN82UnCDzFN90NNYozgoEIFuVUew/68Vzz9V5qGgPaY16zg/rhwk1
T8gooxCDqXL86Uc6sGMfOLATqLrJ1hI4aQ3T4DovO47oISV7W1gZM4GZ7QTMXTPV
P9K1Z6j4r8TsikroLwt76izgVth3sx1SG3YzimBQ7n7qpUz4KsQjnNzL68xHtXDd
Rhi9WWW4/daCLw/BCgCT0CTsw+lwisJVk57ry2PtJaABio2jlTGajUKktwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB63/DzLt37t34OMqDscTqmBFpDbMB8GA1UdIwQY
MBaAFEqXvFBPMHX7TzkjZAjBwtVHtEwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kNDUwMWItMThlYS00MjgwLTg1YTQt
OTMyOWY5MTc5ZmRhLzEvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9kNDUwMWItMThlYS00MjgwLTg1YTQtOTMyOWY5MTc5ZmRh
LzEvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKyrjMMqY
+ioqDcePXcRqv6oMMLCVMqrP9ZBma+AtEXfUps6/cqYpzlgWSRsfoLp5Z2RL+Df1
pI23xd55pqfNFYe2eP85EzX4DzMN1r5qIShCZPF4HwDYTp1bjjMBRlt+eeaV93cV
aJ+z4IzycqMZsTpHS2qwflKJmoCLiG9KMP3bubg3QmV/Xm61ZE7VLZGSgaaPsZ6n
icmkIUJHOxDFSPVCrV62ELwztxUsi2mDFkkbdneY2NhxcdNRqBnAiM5OYmLS1PLf
iKn6gkfTHpcGufoTBJO647SUGjD9ovX/C8KGBXj7IVbEm9sj8LE+i/hE1ssiYIW8
0T/yUiYYMcX6ug==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:13:54 2026 by rpki-client