Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
File: spuNaKggdWqqP4l5UdWv1n_bPbs.mft (raw, json)
Hash identifier: /cAlcVfXApJu6BuCw9BwJlaO8cwR+7ftf8FDnKEfHaI=
Subject key identifier: 17:52:C7:85:7A:DA:37:F5:9F:4D:A3:6B:17:EF:F6:FD:98:CA:23:96
Authority key identifier: B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB
Certificate issuer: /CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb
Certificate serial: 019D2703E07DCAE9AB0A5569ACFC72F1D7DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 22:00:58 +0000
Manifest this update: Wed 25 Mar 2026 22:00:58 +0000
Manifest next update: Thu 26 Mar 2026 22:00:58 +0000
Files and hashes: 1: spuNaKggdWqqP4l5UdWv1n_bPbs.crl (hash: PQPY9b0+Crssr4po26oONsCkcMLIjSo1XBIGYy69wMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e0:7d:ca:e9:ab:0a:55:69:ac:fc:72:f1:d7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb
Validity
Not Before: Mar 25 22:00:58 2026 GMT
Not After : Mar 26 22:00:58 2026 GMT
Subject: CN=1752c7857ada37f59f4da36b17eff6fd98ca2396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6a:ad:aa:ba:a8:8d:5d:22:81:d4:8b:46:be:
ba:dd:4a:89:4e:74:ef:cc:8a:21:8a:50:c6:56:6d:
b0:d6:33:48:f8:ec:4b:f7:e0:f5:c8:39:09:68:dc:
18:de:8c:b1:9f:94:99:8e:46:1b:cd:be:ed:a0:6b:
97:c9:e7:99:3e:25:21:59:b7:d0:7b:0c:7c:5a:fa:
ea:3a:a3:3a:8a:97:20:bc:40:ac:b6:f7:0e:22:65:
0c:b6:f2:0b:35:33:57:35:33:62:93:ac:d4:3b:6d:
6d:d4:b8:97:f8:00:a8:d9:ca:16:38:45:44:8c:9b:
8c:cd:ab:38:93:aa:d0:28:de:34:9f:0c:bf:75:6a:
dc:04:99:da:50:61:0a:52:33:ed:b4:d0:3b:39:a3:
44:33:c2:d2:d7:39:94:15:4e:2e:be:ad:56:f3:69:
ba:9f:27:5c:5d:ff:b7:cb:41:dc:db:fc:13:fa:8a:
66:1d:d9:c0:20:a5:b1:9d:83:33:c1:1b:3e:6f:45:
eb:ed:05:79:97:0f:44:62:12:9a:3f:b7:96:0d:63:
00:e9:ba:bb:a9:13:df:6a:6c:07:8f:88:8a:21:83:
da:bf:60:7e:f7:92:7f:f0:9c:56:98:6a:0f:f0:9b:
a1:a8:47:73:06:c9:2e:a6:23:bf:bb:8e:60:ad:65:
a4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:52:C7:85:7A:DA:37:F5:9F:4D:A3:6B:17:EF:F6:FD:98:CA:23:96
X509v3 Authority Key Identifier:
keyid:B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:66:ca:83:54:3f:0e:c2:ce:50:49:a7:ea:e3:21:cc:c1:49:
ce:f8:7e:e7:3b:72:58:96:37:0a:20:17:8a:8d:37:21:11:b4:
17:48:4e:98:16:9e:08:05:8a:ac:55:0b:8c:f9:cf:4b:8c:ee:
88:2e:59:3f:85:c2:c4:e7:86:73:f0:5f:1e:e8:e5:ce:6e:e5:
a7:47:5e:a2:4b:fc:2c:34:61:ee:eb:5f:90:2c:1e:4e:cd:37:
3e:58:04:2f:e0:9c:1a:35:3a:e6:b2:ef:34:16:68:93:89:49:
16:39:64:f1:d5:66:f1:3b:23:50:ec:84:bc:25:c4:a5:91:0d:
8c:2b:11:c1:c8:02:98:fa:db:43:96:08:52:87:91:c1:07:ec:
ab:95:4e:71:7c:6a:f6:a2:30:ac:62:d8:27:25:18:a6:10:76:
e2:1e:b9:b0:f1:23:f9:b5:b0:87:93:99:45:3f:3b:10:60:f3:
81:3b:ce:6b:56:29:76:f3:38:22:4d:20:2d:6c:38:bd:88:9c:
bf:fb:7c:34:e1:a5:cd:0c:38:72:1f:28:6e:23:33:58:03:dc:
9f:db:e1:7a:12:45:32:c5:32:5d:09:c2:44:65:4e:ed:2d:fc:
5b:4f:aa:99:45:bf:51:c1:3d:6d:d8:ef:c7:25:00:4c:13:7a:
9c:f3:db:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:41 2026 by rpki-client