Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
File: sPoMerwQeWkV4zW6GXgORz4CeWk.mft (raw, json)
Hash identifier: ja5tm1qc+wJo6GIqObs2WjWibWduOWXEMP0bzMLxp9E=
Subject key identifier: 29:4A:93:99:83:D6:1A:16:91:58:ED:81:5E:38:C1:2D:BA:38:AE:13
Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
Certificate issuer: /CN=b0fa0c7abc10796915e335ba19780e473e027969
Certificate serial: 019E1EDA363FBBE6DDCD5D36A9F892153074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
Manifest number: 13F9
Signing time: Wed 13 May 2026 01:01:17 +0000
Manifest this update: Wed 13 May 2026 01:01:17 +0000
Manifest next update: Thu 14 May 2026 01:01:17 +0000
Files and hashes: 1: LefKdaCkJCuLWYomPbn7aYaCwt8.roa (hash: dTxOv7XhsigiPPaBEnDTEGV1JBMdxI+S2HXrs+TPL+s=)
2: sPoMerwQeWkV4zW6GXgORz4CeWk.crl (hash: vA418iZpvxyafKXT1PlKghG7UsMLlpgPj3mxdrZ49M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:36:3f:bb:e6:dd:cd:5d:36:a9:f8:92:15:30:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969
Validity
Not Before: May 13 01:01:17 2026 GMT
Not After : May 14 01:01:17 2026 GMT
Subject: CN=294a939983d61a169158ed815e38c12dba38ae13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:be:ae:86:83:12:70:96:95:5b:66:db:83:ea:
5b:9a:91:77:57:20:dd:d1:e0:aa:b2:f9:88:74:ae:
0b:56:b1:37:7b:7c:61:f7:b3:b6:8c:c4:06:00:3c:
ca:93:71:ea:78:f1:d7:4c:58:63:ab:14:80:5c:03:
ec:94:8e:30:c6:a3:22:eb:61:57:81:f2:0b:21:b5:
9d:a7:b9:b3:2f:6d:a5:88:26:67:ad:0f:be:8f:93:
10:2e:fc:71:28:47:76:ea:5c:a0:a7:1b:f7:a6:a2:
e9:19:2a:31:f1:0e:a8:83:e4:87:35:40:4d:0a:59:
12:a2:61:cc:48:15:00:77:9a:a9:3d:86:6d:66:5a:
86:13:2e:18:9b:7f:5d:a6:81:cb:b0:13:69:42:e7:
6f:96:90:f7:be:9c:06:9b:8a:cb:65:31:12:0a:85:
00:ae:26:ac:db:f8:21:4e:8a:31:df:03:36:0f:79:
eb:9c:ca:86:a0:a8:ca:99:9d:e1:bd:c0:7d:76:b3:
03:28:b0:c9:65:20:40:db:f8:40:f1:49:94:50:88:
d8:69:1d:9f:92:b6:09:b3:a2:58:03:c0:cc:0f:88:
1c:d3:bc:f1:b7:46:d6:45:5e:67:b3:48:df:bd:8b:
e1:42:bb:00:72:d0:a7:6d:d5:eb:e1:cd:10:2e:ec:
88:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4A:93:99:83:D6:1A:16:91:58:ED:81:5E:38:C1:2D:BA:38:AE:13
X509v3 Authority Key Identifier:
keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:03:54:bb:0f:50:71:6f:9c:7f:e2:9b:8d:dd:6b:55:e6:33:
a4:a4:8a:87:84:4c:78:f1:49:58:04:1a:63:9a:51:c9:e8:1a:
03:0b:c4:6a:fb:2f:a1:da:14:45:94:96:0a:59:1d:33:09:57:
b0:8c:2e:3e:9e:33:12:2f:50:74:94:28:44:ad:32:fb:cb:7c:
24:ed:34:92:eb:eb:54:11:ce:96:07:33:6b:f8:a5:0e:b4:98:
6a:5a:bf:eb:42:ad:71:87:2d:f3:85:47:56:47:bf:ef:62:90:
2a:81:f8:f2:9d:ba:ea:50:37:41:98:79:cc:80:0b:f7:2d:3f:
d6:6c:53:b0:43:66:e2:3d:86:fc:0e:c7:cd:0c:f6:aa:b4:d9:
d5:b3:dd:41:cb:3c:49:6c:e5:4c:3c:0f:c3:48:79:37:d7:16:
18:3f:8f:3d:77:d2:5c:da:bc:a4:9b:20:5c:2f:3e:33:04:c7:
4a:2c:9d:fb:d4:d0:15:33:1f:52:65:b6:95:ac:7f:a3:b1:2f:
c7:5c:7d:6d:40:69:72:c2:7c:04:e8:39:e2:01:99:6b:e4:3e:
3c:29:25:ee:5b:d1:7a:2b:49:39:12:74:fe:78:9e:53:6a:c5:
13:e6:25:85:07:8c:ea:6d:19:ca:a7:f6:14:68:8b:c9:07:3a:
23:4e:3d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:05:57 2026 by rpki-client