Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
File: sPoMerwQeWkV4zW6GXgORz4CeWk.mft (raw, json)
Hash identifier: uJ9ZtgOQoiQLn7uSWnlcTUtB3gdBAFkOSdofoE4HQkE=
Subject key identifier: EE:E9:09:B7:D5:DE:31:D2:02:61:64:B9:80:C3:C7:7B:5D:5A:CA:40
Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
Certificate issuer: /CN=b0fa0c7abc10796915e335ba19780e473e027969
Certificate serial: 019F939240BBFDE73CA9227966115BDC6F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
Manifest number: 14BA
Signing time: Fri 24 Jul 2026 10:01:03 +0000
Manifest this update: Fri 24 Jul 2026 10:01:03 +0000
Manifest next update: Sat 25 Jul 2026 10:01:03 +0000
Files and hashes: 1: LefKdaCkJCuLWYomPbn7aYaCwt8.roa (hash: dTxOv7XhsigiPPaBEnDTEGV1JBMdxI+S2HXrs+TPL+s=)
2: sPoMerwQeWkV4zW6GXgORz4CeWk.crl (hash: nyNDyCrcKbNA0XLYMSL/qfm+pzbwEN+gonwx2sNNOnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:40:bb:fd:e7:3c:a9:22:79:66:11:5b:dc:6f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969
Validity
Not Before: Jul 24 10:01:03 2026 GMT
Not After : Jul 25 10:01:03 2026 GMT
Subject: CN=eee909b7d5de31d2026164b980c3c77b5d5aca40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ed:b5:35:19:a3:af:5c:ea:92:e0:78:d5:82:
25:b9:e0:66:f5:62:c8:44:43:65:f5:2f:12:58:0f:
ec:6a:5e:2b:36:7e:b2:3a:fb:25:8f:c6:de:f5:52:
57:47:14:f1:eb:a1:dc:d4:56:34:7e:92:3c:e1:86:
af:5e:7a:94:45:e0:28:92:24:65:8b:b8:14:ee:ac:
ba:bf:e7:02:f8:f4:3c:64:02:c1:44:aa:a9:ee:19:
95:ff:62:1b:dd:b2:6f:0f:3c:81:99:61:85:c3:4e:
e8:2b:31:14:89:23:bf:59:a2:b0:9f:29:51:eb:bb:
2b:41:4e:d4:cb:18:81:01:03:96:f9:77:f3:3b:49:
f9:ec:cf:65:e3:2a:be:cc:3b:8d:98:0d:d2:4d:dc:
11:92:f9:d0:ca:7d:44:b2:af:e4:61:34:0e:85:d5:
33:06:31:56:97:fc:e8:eb:b1:12:4d:a7:92:e8:99:
81:d6:6b:06:af:63:9a:f9:de:04:3a:7b:53:d2:77:
a9:df:ab:7d:b5:e9:79:d4:c8:15:b6:54:c4:f2:88:
02:41:f7:0b:52:d7:cb:30:42:dd:12:53:00:a2:47:
1b:52:07:89:ad:90:4b:24:71:85:a6:bb:1d:35:f4:
59:4a:a3:e9:f1:40:0f:93:6c:38:0d:b3:75:f8:20:
ed:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E9:09:B7:D5:DE:31:D2:02:61:64:B9:80:C3:C7:7B:5D:5A:CA:40
X509v3 Authority Key Identifier:
keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:41:ff:04:92:c1:1a:94:21:42:6c:30:2f:37:84:7f:a0:ad:
9e:b1:bd:32:8f:2b:c7:10:9d:54:88:92:91:2a:4b:ad:cb:60:
bc:22:52:96:41:7f:02:06:6a:e6:c4:1d:39:9d:b5:df:b7:c0:
5d:88:ad:cb:72:0b:e4:da:32:f0:c4:2b:8b:8b:27:ea:1b:5d:
55:04:cd:c4:33:a7:38:e2:03:f4:8e:93:e8:15:ee:9b:6e:5e:
9b:19:3b:49:57:09:a8:f7:a2:9f:87:71:e0:cc:8e:f6:6a:dc:
7f:4d:8a:91:7a:a2:70:00:99:61:53:c2:c6:d2:31:0a:eb:3e:
ec:b4:ef:e4:84:19:22:f1:57:4c:b4:f9:74:dd:d2:a2:37:ef:
54:20:f1:34:d0:8a:b9:bc:6a:a7:db:65:97:78:84:7a:00:fd:
5d:d7:eb:17:99:85:8e:74:fc:15:7c:8d:c9:53:7a:f5:c9:72:
8c:11:47:0d:6b:fb:1c:dc:23:47:57:6d:da:c5:94:8c:3c:f3:
90:a3:a3:3c:e4:78:2d:a3:e6:9f:7d:58:89:1d:14:a4:37:ae:
47:49:32:1a:21:fc:46:27:9b:e9:7a:91:df:ff:c8:01:68:34:
27:23:bb:aa:d9:a5:d2:8e:64:22:f4:0f:60:4f:d2:ff:26:a2:
d0:2c:1d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:10:40 2026 by rpki-client