Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
File: Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft (raw, json)
Hash identifier: oKGEEZyOdR/MLSP4gvvfLoCHhxWftW+YDIK0IbyBQCo=
Subject key identifier: 25:97:30:69:9B:CE:15:C0:14:08:C8:72:DC:4B:2E:DE:F9:A3:A2:AB
Authority key identifier: 4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
Certificate issuer: /CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Certificate serial: 019F9391E4F7FCB269E72BD988167CC70DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
Manifest number: 0DD5
Signing time: Fri 24 Jul 2026 10:00:39 +0000
Manifest this update: Fri 24 Jul 2026 10:00:39 +0000
Manifest next update: Sat 25 Jul 2026 10:00:39 +0000
Files and hashes: 1: Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl (hash: hl6ZvCFpQxgNnxSYdRA4fS3cX3nP2MyChxUvY3l5xd0=)
2: jaXIMGohDtqmN9HK0RSue183PUM.roa (hash: /dhEKzEAshSscrjSIfqANdXDpyu38QD3HTeuahz7d5g=)
3: sl2grtF62EGJRr--AtlkQoKUOgo.roa (hash: 8IWHvB3aWoMq1k/0X1fLbANShkPS5Vl92y6S/fnPKKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:e4:f7:fc:b2:69:e7:2b:d9:88:16:7c:c7:0d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Validity
Not Before: Jul 24 10:00:39 2026 GMT
Not After : Jul 25 10:00:39 2026 GMT
Subject: CN=259730699bce15c01408c872dc4b2edef9a3a2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7a:ff:26:bf:43:16:4e:89:f0:17:26:1a:65:
ed:86:28:92:21:91:99:67:66:7c:07:73:fb:df:0d:
14:14:a7:5d:a0:59:39:e5:cc:be:ba:44:eb:19:17:
7a:25:06:f9:d0:81:01:8e:f7:89:4e:87:8e:4d:9d:
f9:8f:23:ae:ed:4a:e8:ac:14:49:9a:07:ba:bd:b3:
eb:da:07:74:92:a5:10:8c:59:4b:58:b2:56:78:b8:
66:db:2f:7d:52:a8:9d:3a:e6:29:6c:2d:99:37:79:
01:1c:34:88:43:8b:f0:c5:d6:31:e5:8c:0d:37:7e:
e0:55:c6:fe:7c:e6:04:f0:e6:af:80:70:09:ab:15:
91:e2:22:95:20:ed:2e:c4:d7:67:75:12:e2:b7:e0:
8d:cb:5b:c2:45:31:52:97:0d:9c:24:da:bd:28:a1:
62:af:e8:88:bf:89:06:99:2d:9c:60:b8:cc:e5:4f:
8b:6b:a3:a2:b0:93:04:d3:91:08:74:83:45:25:aa:
cc:fc:39:07:98:db:47:6c:3f:7b:60:e4:e7:68:de:
50:46:c0:aa:b2:5b:c9:c2:a6:18:d0:81:c2:79:a0:
a2:9b:8c:69:69:f4:50:d9:c6:d0:54:44:df:d3:b3:
67:b4:2d:a0:60:92:ac:4e:83:d4:c0:00:fc:86:07:
b9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:97:30:69:9B:CE:15:C0:14:08:C8:72:DC:4B:2E:DE:F9:A3:A2:AB
X509v3 Authority Key Identifier:
keyid:4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:04:54:da:52:d5:38:bb:9b:88:cb:ad:fa:3f:dc:90:39:38:
09:ff:e3:ab:d7:fb:fe:14:64:c8:88:3b:ea:f9:86:ad:22:4f:
7c:b6:d0:5d:da:71:56:8c:7d:40:2a:6a:76:8a:be:8b:44:b1:
46:c6:42:79:3a:82:3e:41:92:b8:cb:bc:54:bc:23:57:38:4d:
07:c1:04:41:65:04:3d:54:3e:22:9c:75:69:a7:19:10:02:bf:
68:88:f4:ad:ab:75:a7:43:4d:bb:c8:8e:98:05:64:fb:6a:58:
09:78:92:2b:fb:25:d3:33:0a:46:f9:d6:41:0b:6f:f9:4d:c9:
b9:53:78:df:33:56:d1:f8:bf:d2:a9:f3:04:be:0c:60:d1:13:
8e:ae:36:8b:38:d6:71:d1:ea:e1:d0:4c:ee:ea:6c:bc:89:ae:
a6:3c:1a:74:15:e4:d8:02:a9:ef:13:d6:f1:19:b5:39:46:be:
b2:99:ad:01:8e:8f:4e:fe:cb:3b:50:74:ac:0f:fe:88:ee:c8:
d7:eb:3c:a8:15:ba:fa:6a:30:07:12:5a:97:a4:6e:06:9c:6a:
7a:48:32:e8:47:0d:de:54:81:e6:d3:53:cc:8e:f9:8b:80:a3:
2e:ba:60:e8:ac:a1:9a:35:b2:dd:02:5b:46:bb:40:2d:9a:89:
83:ed:06:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:41 2026 by rpki-client