Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
File: Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft (raw, json)
Hash identifier: UPVSsfWLTE5FAOFLMEF6qzHSJTmFnQ/qPQfUyYZ02r0=
Subject key identifier: B6:62:C2:CA:C4:76:C8:89:02:8C:E7:98:BA:57:18:D5:D0:86:93:24
Authority key identifier: 4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
Certificate issuer: /CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Certificate serial: 019E1ED9B56865C48F4E5ED5D41CBEAC2EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
Manifest number: 0D14
Signing time: Wed 13 May 2026 01:00:44 +0000
Manifest this update: Wed 13 May 2026 01:00:44 +0000
Manifest next update: Thu 14 May 2026 01:00:44 +0000
Files and hashes: 1: Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl (hash: wFb2grQPyOyuu/Cmre82NKVp5QZZKRhiVcC6G+XyU80=)
2: jaXIMGohDtqmN9HK0RSue183PUM.roa (hash: /dhEKzEAshSscrjSIfqANdXDpyu38QD3HTeuahz7d5g=)
3: sl2grtF62EGJRr--AtlkQoKUOgo.roa (hash: 8IWHvB3aWoMq1k/0X1fLbANShkPS5Vl92y6S/fnPKKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:b5:68:65:c4:8f:4e:5e:d5:d4:1c:be:ac:2e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Validity
Not Before: May 13 01:00:44 2026 GMT
Not After : May 14 01:00:44 2026 GMT
Subject: CN=b662c2cac476c889028ce798ba5718d5d0869324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:65:55:5c:c8:2a:45:20:6a:08:4f:b9:dd:94:
d7:cc:27:eb:52:3f:62:c6:52:23:39:70:24:a2:df:
00:4f:cf:1e:f4:1b:fc:08:7a:a9:13:2d:50:b4:7e:
b4:ad:73:61:60:99:5c:f6:06:32:28:86:84:5a:35:
54:15:5d:31:31:7a:12:ce:06:f5:8f:f6:f8:cd:6b:
64:d3:1c:08:a4:f8:d6:84:5f:96:a3:54:bb:ee:fc:
50:74:1a:2c:01:15:68:f9:3a:0d:ce:6c:d8:e5:7c:
40:6d:85:87:41:bd:70:a5:f3:15:4f:5b:f2:e0:bc:
25:47:35:e1:89:86:cf:5f:6e:29:5a:cb:35:70:23:
aa:ea:d1:65:cf:91:02:9c:40:3d:92:4b:6c:9e:72:
9e:f8:e9:7b:c1:c5:90:b6:4a:94:63:66:c1:3a:60:
92:e8:fd:b9:f1:c1:8b:22:d1:bc:df:ef:d6:26:af:
72:8d:84:aa:57:14:a3:cc:49:07:cb:15:77:d6:2d:
36:4d:04:7f:ff:87:34:c7:b7:7d:86:5a:cc:aa:3e:
9c:e9:cd:1e:8e:20:a7:cd:ee:06:30:7e:53:e2:c9:
54:4b:8a:6d:51:23:c9:f0:b9:1b:dc:a1:8b:32:e5:
b4:55:c1:87:69:b1:53:8c:88:0b:4f:cd:0c:ff:16:
32:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:62:C2:CA:C4:76:C8:89:02:8C:E7:98:BA:57:18:D5:D0:86:93:24
X509v3 Authority Key Identifier:
keyid:4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:49:80:bc:c5:b4:65:9a:1c:e5:b4:8a:be:90:b0:52:d7:26:
29:19:30:aa:d2:b4:b3:31:88:c2:52:d4:b5:f7:98:cc:cc:db:
44:8c:d3:91:31:01:65:4a:62:e1:2d:da:e5:b8:37:68:aa:95:
70:23:38:7b:16:23:e3:cc:b3:41:53:e2:ff:69:00:cd:05:31:
da:d6:6a:5f:99:4f:58:d9:19:54:71:df:80:09:d3:a6:e8:22:
9c:88:3d:e4:b7:81:32:9d:04:c2:07:cb:75:7e:04:b7:a9:3e:
97:f1:d4:4b:b7:9a:65:2d:b1:42:f8:56:cc:c7:01:d2:29:de:
6d:87:bf:84:ae:cb:29:2a:9b:f2:07:20:af:c5:95:a3:5f:b6:
1a:8a:1b:26:f6:28:38:05:2a:5d:5d:01:67:e7:6b:c8:63:75:
63:a5:04:96:93:12:cf:65:c3:4b:4f:c9:74:13:7d:90:ab:5c:
4a:bd:be:d2:48:81:94:d4:6c:ae:d9:68:c3:fd:2a:99:43:dc:
8b:23:ef:3e:27:56:7b:2f:73:f9:40:ef:dd:30:29:ea:82:1c:
29:f7:d1:69:4f:e3:bc:e4:25:81:8e:03:b4:e2:8b:e9:ce:f2:
f4:df:fc:3c:b3:03:72:2e:d0:42:fc:d3:08:21:e9:78:58:15:
68:27:42:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2bVoZcSPTl7V1By+rC7DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOTdiYzUwNGYzMDc1ZmI0ZjM5MjM2NDA4YzFjMmQ1NDdi
NDRjMjYwHhcNMjYwNTEzMDEwMDQ0WhcNMjYwNTE0MDEwMDQ0WjAzMTEwLwYDVQQD
EyhiNjYyYzJjYWM0NzZjODg5MDI4Y2U3OThiYTU3MThkNWQwODY5MzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA92VVXMgqRSBqCE+53ZTXzCfrUj9i
xlIjOXAkot8AT88e9Bv8CHqpEy1QtH60rXNhYJlc9gYyKIaEWjVUFV0xMXoSzgb1
j/b4zWtk0xwIpPjWhF+Wo1S77vxQdBosARVo+ToNzmzY5XxAbYWHQb1wpfMVT1vy
4LwlRzXhiYbPX24pWss1cCOq6tFlz5ECnEA9kktsnnKe+Ol7wcWQtkqUY2bBOmCS
6P258cGLItG83+/WJq9yjYSqVxSjzEkHyxV31i02TQR//4c0x7d9hlrMqj6c6c0e
jiCnze4GMH5T4slUS4ptUSPJ8Lkb3KGLMuW0VcGHabFTjIgLT80M/xYyPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZiwsrEdsiJAoznmLpXGNXQhpMkMB8GA1UdIwQY
MBaAFEqXvFBPMHX7TzkjZAjBwtVHtEwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kNDUwMWItMThlYS00MjgwLTg1YTQt
OTMyOWY5MTc5ZmRhLzEvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9kNDUwMWItMThlYS00MjgwLTg1YTQtOTMyOWY5MTc5ZmRh
LzEvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUmAvMW0
ZZoc5bSKvpCwUtcmKRkwqtK0szGIwlLUtfeYzMzbRIzTkTEBZUpi4S3a5bg3aKqV
cCM4exYj48yzQVPi/2kAzQUx2tZqX5lPWNkZVHHfgAnTpuginIg95LeBMp0EwgfL
dX4Et6k+l/HUS7eaZS2xQvhWzMcB0inebYe/hK7LKSqb8gcgr8WVo1+2GoobJvYo
OAUqXV0BZ+dryGN1Y6UElpMSz2XDS0/JdBN9kKtcSr2+0kiBlNRsrtlow/0qmUPc
iyPvPidWey9z+UDv3TAp6oIcKffRaU/jvOQlgY4DtOKL6c7y9N/8PLMDci7QQvzT
CCHpeFgVaCdCMg==
-----END CERTIFICATE-----
Generated at Wed May 13 07:19:04 2026 by rpki-client