Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
File: spvHpkk9OBeN1_XpxJDI7zqKWYs.mft (raw, json)
Hash identifier: IOsPwA/oAErxV33k6gBHjTYl3Uej9f5qF756LKW3DAM=
Subject key identifier: 1C:B7:BB:4B:96:71:8F:93:13:C9:B9:59:44:7D:22:2D:76:59:38:49
Authority key identifier: B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
Certificate issuer: /CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Certificate serial: 019D284D29F1C491D51AD9657C49657C6586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
Manifest number: 048A
Signing time: Thu 26 Mar 2026 04:00:38 +0000
Manifest this update: Thu 26 Mar 2026 04:00:38 +0000
Manifest next update: Fri 27 Mar 2026 04:00:38 +0000
Files and hashes: 1: spvHpkk9OBeN1_XpxJDI7zqKWYs.crl (hash: Dy2KPCPo8VYAoG51vmvaHQoG9s3uARzbrXVEDTudang=)
2: yP4RNTLUKk_P7r0qobg3b_Bq0bc.roa (hash: 7RS0tj1L1t6QadBqzoijZL2F1NYP+eQ5vizwcCjgqj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:29:f1:c4:91:d5:1a:d9:65:7c:49:65:7c:65:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Validity
Not Before: Mar 26 04:00:38 2026 GMT
Not After : Mar 27 04:00:38 2026 GMT
Subject: CN=1cb7bb4b96718f9313c9b959447d222d76593849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7e:5e:da:99:d4:fa:6d:1b:93:0c:cd:a5:fe:
16:f1:6f:96:7f:8f:97:a9:b3:69:c4:ff:66:ed:f6:
f2:77:52:63:02:e9:83:69:23:2f:47:40:9b:50:f4:
47:0d:4e:10:7a:66:39:b8:29:1c:54:2e:e1:ac:a7:
ba:90:7e:89:99:1a:ea:3f:95:29:26:2e:0b:b0:6f:
e5:88:17:e5:24:42:69:d3:ea:86:09:d0:0d:03:1d:
8e:bc:73:59:47:07:a0:cc:1b:18:dd:2f:8f:d0:19:
ae:44:73:d6:00:ee:32:1e:e0:fd:5a:bc:c4:cc:06:
d2:25:06:11:6f:3b:0d:98:01:a6:dd:c9:7e:20:fe:
c2:79:a1:b5:4a:e3:43:bd:e5:dd:10:2c:5f:69:fc:
2a:d6:d6:4b:9d:3f:cf:4e:46:cc:3a:7b:28:af:5c:
04:71:9f:6c:0d:7a:86:06:b1:d8:0c:ea:cb:d1:61:
7a:b6:df:6e:f8:07:4b:48:82:b7:fe:3f:85:8f:ba:
ec:34:5a:7f:11:f7:e7:8e:cb:73:3a:39:f5:b1:04:
b7:78:da:21:e5:99:91:7b:82:80:3f:78:11:06:48:
1b:92:04:db:fd:c8:09:4a:76:0e:29:76:d3:01:ea:
12:e1:7b:07:cc:ee:1e:c2:88:5d:13:90:31:66:1f:
c0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B7:BB:4B:96:71:8F:93:13:C9:B9:59:44:7D:22:2D:76:59:38:49
X509v3 Authority Key Identifier:
keyid:B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:21:06:07:a4:5c:a2:b7:b7:44:66:45:22:5a:1f:69:66:f2:
06:17:da:db:10:04:a7:2e:24:e1:f3:2e:4f:5c:8e:0c:cc:f3:
88:28:ec:bf:3d:c2:15:9d:7b:e0:98:08:5e:8a:ee:bb:a7:99:
25:4b:13:84:81:47:04:79:13:e6:e4:d9:46:28:2a:cf:8f:01:
bb:f5:74:cc:a3:15:40:7b:cd:01:a3:66:98:fb:c9:70:4f:3d:
b2:6a:b2:05:ad:5f:90:3c:ea:4f:10:dc:54:4a:48:5d:25:f1:
7a:d6:9d:0c:c3:fa:54:59:e6:d4:22:02:ae:12:1c:a4:51:6a:
51:b3:3b:91:47:ba:de:3f:c0:14:b6:57:77:18:68:f3:4b:1c:
ad:ca:04:ca:86:a5:81:6b:f8:2f:2b:c3:01:86:08:1e:67:d3:
f3:8e:62:f0:50:58:67:68:53:48:c9:00:df:60:05:2b:37:a7:
a9:64:3e:cb:67:69:be:78:2a:b7:2e:1d:20:fa:1f:75:f9:e8:
89:e0:25:41:64:b0:36:b9:72:43:d3:e1:79:09:81:d5:6c:e6:
34:c9:31:6a:a8:c9:c6:e6:bc:bc:bf:3c:d1:3c:d2:3b:e7:52:
85:5f:ce:70:58:63:25:d2:6a:35:34:c6:7f:b1:f7:ec:bc:30:
fc:ed:bf:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:21 2026 by rpki-client