Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
File: Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft (raw, json)
Hash identifier: fLSb7OSJMlM/n/4edTCPxuN+tI4OpxmIvIfAIY7j3ac=
Subject key identifier: 9E:49:E5:83:23:36:11:5F:42:20:AB:20:D4:F8:88:62:C9:EC:DE:9C
Authority key identifier: 4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
Certificate issuer: /CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Certificate serial: 019D27A927114B5C3483A0421D5495EDB76E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
Manifest number: 0C94
Signing time: Thu 26 Mar 2026 01:01:30 +0000
Manifest this update: Thu 26 Mar 2026 01:01:30 +0000
Manifest next update: Fri 27 Mar 2026 01:01:30 +0000
Files and hashes: 1: Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl (hash: Fj2C12h8+bdexVkyWzxing9jW4baisOww7s7MhdEyoQ=)
2: jaXIMGohDtqmN9HK0RSue183PUM.roa (hash: /dhEKzEAshSscrjSIfqANdXDpyu38QD3HTeuahz7d5g=)
3: sl2grtF62EGJRr--AtlkQoKUOgo.roa (hash: 8IWHvB3aWoMq1k/0X1fLbANShkPS5Vl92y6S/fnPKKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:27:11:4b:5c:34:83:a0:42:1d:54:95:ed:b7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Validity
Not Before: Mar 26 01:01:30 2026 GMT
Not After : Mar 27 01:01:30 2026 GMT
Subject: CN=9e49e5832336115f4220ab20d4f88862c9ecde9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dd:30:a0:5d:ae:9c:5a:7d:46:91:0a:ed:50:
db:c2:62:f8:00:55:c7:28:49:29:12:fa:32:63:54:
79:5c:a7:b1:30:6a:93:65:06:d7:bd:13:08:9e:40:
27:83:ca:63:1b:f9:6d:e9:54:69:15:1e:c2:fd:c2:
94:a0:32:22:45:7e:67:fa:72:08:23:75:16:4b:ec:
eb:52:9f:e3:e2:a9:1e:96:63:01:2e:69:78:69:7e:
d7:31:7d:0c:02:47:11:11:ce:8c:57:e8:a9:e3:53:
dd:fe:ba:6e:57:c4:39:a9:95:11:aa:22:42:25:53:
50:dc:e0:a7:26:77:2a:36:b2:5b:9f:2a:3a:57:4e:
95:65:36:72:0a:80:3c:2f:d7:9d:97:38:2f:37:4c:
62:32:56:ed:9b:ba:ff:91:b4:14:29:99:a3:68:45:
42:18:a0:b9:d9:a1:b7:85:fb:4c:fe:21:a5:07:db:
43:f8:98:2a:b6:88:4b:fc:f2:19:d1:21:8e:26:50:
2a:bd:ed:7d:6a:cd:71:94:9e:ed:be:88:a1:18:35:
2b:78:83:a3:d6:5e:7c:ab:bf:d7:0c:e2:f4:9e:40:
27:bd:d3:a0:44:bb:07:61:42:2b:b5:37:35:64:c3:
5a:ce:36:4e:f4:40:93:66:b4:da:23:1c:fa:2c:e6:
84:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:49:E5:83:23:36:11:5F:42:20:AB:20:D4:F8:88:62:C9:EC:DE:9C
X509v3 Authority Key Identifier:
keyid:4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0c:3a:a1:af:32:8d:f0:67:96:0d:af:fd:fa:d4:07:3b:43:
40:2c:93:ac:98:05:c5:d3:87:e8:77:d6:f5:27:66:fc:bf:13:
25:40:ec:ea:9a:88:ba:8d:ab:bb:59:9b:b5:68:c3:58:28:3a:
e3:8d:ba:b9:e5:29:cb:df:76:fb:41:77:93:0f:65:0a:b3:25:
96:3a:f6:ce:e5:9e:61:13:71:04:bd:6c:38:7d:50:1b:ac:b9:
5f:59:c1:36:e5:d2:3b:c4:9c:b0:02:53:23:5b:36:f2:88:55:
9e:e4:5b:53:cd:e7:4f:92:c2:fd:69:34:79:8f:59:f2:8c:e1:
56:2a:b4:0a:e8:8a:9e:98:90:fd:ff:4c:72:7e:2b:79:2f:58:
42:29:f0:f1:8b:1b:6a:d8:76:16:4f:18:c5:17:bc:38:c4:5b:
03:2d:69:da:f2:72:24:f5:ea:4c:16:83:70:24:06:4f:e1:49:
c4:f3:39:c3:dd:a4:a7:b7:83:64:62:29:ea:c2:c8:a3:32:4f:
3c:09:06:b9:f8:27:fb:07:70:52:ae:46:ab:f9:d3:50:b3:3f:
30:f1:ce:b4:97:66:ef:58:da:5a:d4:c7:22:ec:fd:0a:75:c5:
c5:24:c7:18:f8:57:cf:19:3c:46:c3:0a:00:f8:f5:f1:d7:28:
54:71:0e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:06 2026 by rpki-client