Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
File: sPoMerwQeWkV4zW6GXgORz4CeWk.mft (raw, json)
Hash identifier: oOdUPH8zazhcJq+vzJda+8m0JsM7/abcJaYm9zcjxvw=
Subject key identifier: E9:C2:C6:66:AF:7C:A6:D0:11:AC:AF:27:06:BC:46:4C:69:5B:5D:05
Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
Certificate issuer: /CN=b0fa0c7abc10796915e335ba19780e473e027969
Certificate serial: 019F95809F13B3BDF64069346890F3E01E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
Manifest number: 14BB
Signing time: Fri 24 Jul 2026 19:01:02 +0000
Manifest this update: Fri 24 Jul 2026 19:01:02 +0000
Manifest next update: Sat 25 Jul 2026 19:01:02 +0000
Files and hashes: 1: LefKdaCkJCuLWYomPbn7aYaCwt8.roa (hash: dTxOv7XhsigiPPaBEnDTEGV1JBMdxI+S2HXrs+TPL+s=)
2: sPoMerwQeWkV4zW6GXgORz4CeWk.crl (hash: uwsjsW2jthRv8/35I5gzUVHE9Vsh2JSre8ooW+q0PrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:9f:13:b3:bd:f6:40:69:34:68:90:f3:e0:1e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969
Validity
Not Before: Jul 24 19:01:02 2026 GMT
Not After : Jul 25 19:01:02 2026 GMT
Subject: CN=e9c2c666af7ca6d011acaf2706bc464c695b5d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c0:11:f3:95:d6:51:23:03:f5:1f:c8:43:d3:
f1:33:0d:b8:f9:bd:07:60:cf:85:67:62:c3:eb:c7:
6b:d1:b8:54:69:61:82:69:e4:b1:66:f6:de:24:3e:
7d:68:05:64:50:3d:65:c2:aa:13:e1:c3:2c:d3:70:
64:5a:a2:e3:aa:f4:a2:2d:cc:58:0c:13:8c:81:29:
88:41:9e:a1:c9:a5:be:22:a1:bc:5a:a0:99:3c:35:
7f:b7:fc:ae:29:2a:92:1c:54:83:61:f1:67:45:90:
c0:f2:43:29:cd:ae:36:ae:1e:80:5e:35:82:3c:f5:
04:cb:83:63:dc:f4:65:d5:39:c7:a6:64:f7:35:28:
a7:0e:86:b4:a9:33:09:bf:64:4e:4d:ff:4e:20:ec:
c6:d2:41:50:b0:c8:dc:7e:47:bf:28:4a:6d:76:e4:
23:73:1b:20:48:e1:a7:82:a4:15:e7:3d:25:9d:c0:
d6:77:7b:de:f4:bc:ef:9b:42:69:9b:51:81:21:eb:
ca:42:f3:17:35:28:8f:95:67:62:cc:f0:52:6d:f7:
6f:7a:56:35:aa:a3:29:d3:6d:29:4a:b4:96:4a:30:
9c:36:e6:22:c7:4a:b5:35:c5:49:b3:93:f2:84:24:
8f:7c:68:f5:b7:a1:2c:dc:e3:e3:b0:eb:6a:d6:26:
2f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C2:C6:66:AF:7C:A6:D0:11:AC:AF:27:06:BC:46:4C:69:5B:5D:05
X509v3 Authority Key Identifier:
keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4f:9e:42:17:1a:17:4b:a6:48:0b:c8:d8:5c:ca:34:0d:be:
fe:ad:cd:d1:fd:d2:9a:65:ce:ed:ab:c6:11:63:b2:be:32:13:
d1:1a:47:3a:f8:19:8d:5a:22:35:4d:61:37:58:9f:b7:ce:46:
b9:50:36:ee:00:c6:b0:24:44:c2:06:6b:4d:6f:28:e2:ef:93:
37:08:87:53:bc:40:84:2a:43:4d:34:30:43:d8:2a:8d:4b:c4:
d1:18:15:35:71:7a:1a:05:12:29:f5:de:13:fe:b8:42:92:d5:
e5:d4:1c:b6:8c:60:c2:73:80:c0:d3:96:5b:5f:26:b2:62:fc:
8f:a5:ba:05:9d:34:2e:71:4f:66:20:ce:58:d7:dd:7d:08:36:
e6:86:d2:1c:fb:8d:c4:f7:d1:0d:b8:93:cc:59:7b:d5:9b:32:
98:14:41:30:b9:7b:03:9d:8e:01:16:47:08:ce:c3:0f:8f:55:
d9:f4:68:7d:31:de:27:19:19:a2:7e:8d:03:1b:64:51:48:de:
3a:6c:b4:01:df:46:fa:be:e7:b0:15:4c:c1:93:66:46:02:0d:
80:b2:88:26:dc:70:3a:9d:8d:c2:78:a6:64:94:1e:b1:81:73:
f5:f9:4b:83:86:d9:1d:36:46:72:69:fe:33:ec:89:82:6a:14:
a9:de:6b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:11:22 2026 by rpki-client