Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
File: sPoMerwQeWkV4zW6GXgORz4CeWk.mft (raw, json)
Hash identifier: SuRfPLcCUrPiU0EI4/A6B2dYpalOf/4aNTAc1lhdxiA=
Subject key identifier: 57:51:BF:12:8D:F8:EF:16:EE:B9:BF:FB:8E:BE:22:C4:8F:23:7D:00
Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
Certificate issuer: /CN=b0fa0c7abc10796915e335ba19780e473e027969
Certificate serial: 01A0EB539AC7D3B0A22363C6ED833A6C5F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
Manifest number: 156C
Signing time: Tue 29 Sep 2026 04:01:59 +0000
Manifest this update: Tue 29 Sep 2026 04:01:59 +0000
Manifest next update: Wed 30 Sep 2026 04:01:59 +0000
Files and hashes: 1: LefKdaCkJCuLWYomPbn7aYaCwt8.roa (hash: dTxOv7XhsigiPPaBEnDTEGV1JBMdxI+S2HXrs+TPL+s=)
2: sPoMerwQeWkV4zW6GXgORz4CeWk.crl (hash: ALwVjLgqJYDFdNDmYGl/m4Z62XQDTH51JYDTtnK/XoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 04:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:53:9a:c7:d3:b0:a2:23:63:c6:ed:83:3a:6c:5f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969
Validity
Not Before: Sep 29 04:01:59 2026 GMT
Not After : Sep 30 04:01:59 2026 GMT
Subject: CN=5751bf128df8ef16eeb9bffb8ebe22c48f237d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c1:c9:8e:35:2e:97:d5:f1:72:5f:d7:0a:a8:
96:e8:be:d7:58:3f:0c:38:fb:77:56:54:51:65:92:
46:31:f0:13:77:03:6b:23:43:a7:0b:51:d3:3e:07:
7b:35:77:27:02:b8:89:23:71:b1:42:d7:67:8f:ed:
67:ae:0b:1a:30:f5:49:3c:16:a1:66:03:94:a7:d0:
22:b1:b7:63:60:9b:ca:fc:77:fb:28:f2:dd:f5:74:
a2:1c:6b:be:05:13:7d:75:c3:5c:8a:21:4c:2a:1d:
3b:4c:67:c3:93:3e:11:ac:4f:4e:ca:6a:82:ee:4e:
c7:1c:9f:20:0a:dc:fc:e5:40:eb:eb:f0:8f:23:02:
3b:b9:2f:37:c8:e3:1a:d8:2d:9c:e6:7a:2b:d2:9f:
15:6c:d4:13:cd:e0:48:50:84:f9:0d:99:08:76:72:
11:b9:31:5b:1d:f3:29:c1:64:28:e3:c0:19:ef:43:
c1:c7:aa:89:ba:27:0e:54:6b:80:0a:b0:79:61:6c:
8d:ec:c4:25:9c:66:9c:d2:dd:dd:c4:fb:c1:03:5f:
cf:9b:38:76:48:d7:7b:f1:aa:fd:04:0f:ce:41:a9:
cf:9f:d7:6b:ee:08:56:7b:ea:2a:b1:4f:42:1d:b4:
42:33:71:6a:f5:95:6e:00:86:93:08:bf:5f:6b:4c:
ea:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:51:BF:12:8D:F8:EF:16:EE:B9:BF:FB:8E:BE:22:C4:8F:23:7D:00
X509v3 Authority Key Identifier:
keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:80:35:bf:6d:08:0a:9c:b2:be:90:c0:51:e3:b3:16:e1:93:
f8:3e:4b:ae:31:34:43:df:af:c4:40:63:46:1f:db:92:27:b7:
7e:e8:27:74:f3:25:05:34:19:98:f4:9d:f6:bc:6f:65:c3:70:
da:76:f6:9a:00:94:d2:fd:6f:37:7d:6a:55:42:66:23:30:ef:
48:e6:a8:3a:4c:9e:80:e0:d3:4b:99:79:e9:7c:db:f3:e4:11:
b7:0e:70:7e:1d:09:b9:f5:4f:9e:42:d9:67:94:e8:3b:ba:a9:
e1:f3:2d:4a:68:f2:fa:36:e2:51:0e:e3:a4:c7:08:c6:96:37:
34:66:b0:1e:53:34:72:b8:8a:7e:f9:a2:65:4e:c3:27:7f:58:
c4:56:9e:fa:f0:24:71:e8:55:7e:f4:4b:15:07:ea:ba:5c:56:
6d:57:93:b4:1a:dd:07:e5:49:9c:11:34:fb:8d:7c:cc:75:e1:
0e:f8:ae:b4:b3:fe:55:c8:57:43:2d:e0:78:01:bd:42:a3:c9:
cc:c2:35:f4:d5:0f:0c:7f:2e:11:2f:8b:e1:9e:d1:c5:f4:34:
eb:50:67:11:b4:4a:2d:0d:f4:39:ac:52:52:d7:c8:82:46:11:
21:3f:32:0e:07:11:9a:d3:c8:4b:ef:ae:e6:c4:6e:cf:eb:8c:
dd:4c:fd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:21:57 2026 by rpki-client