Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/85b463-9870-4549-97de-3cabe94b4356/1/spAqmJWp6izi7CS799ryNABY5JQ.mft
File: spAqmJWp6izi7CS799ryNABY5JQ.mft (raw, json)
Hash identifier: wMrV7zjGlf+Kw2YG+feSRlFgfD6LLP+xqnauAiyKqGY=
Subject key identifier: A4:E3:57:19:A9:FF:FD:F0:98:C3:A3:CB:48:90:87:58:42:A6:21:21
Authority key identifier: B2:90:2A:98:95:A9:EA:2C:E2:EC:24:BB:F7:DA:F2:34:00:58:E4:94
Certificate issuer: /CN=b2902a9895a9ea2ce2ec24bbf7daf2340058e494
Certificate serial: 019D32630C569282CC79FF507D0A8AA2CC8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spAqmJWp6izi7CS799ryNABY5JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/85b463-9870-4549-97de-3cabe94b4356/1/spAqmJWp6izi7CS799ryNABY5JQ.mft
Manifest number: 0125
Signing time: Sat 28 Mar 2026 03:00:45 +0000
Manifest this update: Sat 28 Mar 2026 03:00:45 +0000
Manifest next update: Sun 29 Mar 2026 03:00:45 +0000
Files and hashes: 1: spAqmJWp6izi7CS799ryNABY5JQ.crl (hash: E3XVCxQ4uuEtYH7ZlmBuesskMEWBFhaPhNGtjiTwlFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/85b463-9870-4549-97de-3cabe94b4356/1/spAqmJWp6izi7CS799ryNABY5JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/85b463-9870-4549-97de-3cabe94b4356/1/spAqmJWp6izi7CS799ryNABY5JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/spAqmJWp6izi7CS799ryNABY5JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:0c:56:92:82:cc:79:ff:50:7d:0a:8a:a2:cc:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2902a9895a9ea2ce2ec24bbf7daf2340058e494
Validity
Not Before: Mar 28 03:00:45 2026 GMT
Not After : Mar 29 03:00:45 2026 GMT
Subject: CN=a4e35719a9fffdf098c3a3cb4890875842a62121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e3:7c:6a:8c:ae:65:9d:73:5a:7f:b4:42:0d:
48:59:b7:6d:da:93:b1:56:8b:ab:da:92:97:56:47:
a5:22:80:05:54:12:79:04:6d:d0:f2:3a:28:8c:a6:
57:dd:e7:c7:27:8d:f1:e3:7c:58:3b:bc:4f:15:be:
37:8d:01:56:9b:96:87:2a:b9:4e:d5:6b:06:47:41:
14:1b:48:7d:fa:64:45:40:6f:cf:0b:31:9c:de:13:
77:9f:74:7d:dc:3e:0e:1e:5c:be:fd:ed:e7:2c:05:
b9:86:86:02:dd:60:9b:13:50:e5:45:40:ac:7f:f6:
95:9a:6f:ff:a9:ca:31:7b:25:e5:8e:37:50:3d:b0:
f6:b1:13:0b:41:1f:42:40:92:3c:c1:87:cc:16:17:
eb:2f:8e:f4:c9:46:b0:4a:3c:7d:70:ac:54:2b:4c:
a7:67:07:7c:94:cd:c9:47:ab:4b:61:33:5f:08:2c:
43:2c:c5:3d:e8:90:fd:76:23:fa:41:eb:a4:4b:d6:
9d:e8:97:4c:58:f1:75:13:c1:ec:d1:12:a3:ff:d9:
46:7a:ed:9e:ee:44:15:d3:3e:3e:88:be:1b:c8:1b:
e8:43:cb:8e:f9:74:c9:a4:42:f0:db:c8:1f:55:31:
47:08:83:c0:43:b5:60:70:0a:6d:1d:cc:62:b1:58:
4c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E3:57:19:A9:FF:FD:F0:98:C3:A3:CB:48:90:87:58:42:A6:21:21
X509v3 Authority Key Identifier:
keyid:B2:90:2A:98:95:A9:EA:2C:E2:EC:24:BB:F7:DA:F2:34:00:58:E4:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spAqmJWp6izi7CS799ryNABY5JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/85b463-9870-4549-97de-3cabe94b4356/1/spAqmJWp6izi7CS799ryNABY5JQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/85b463-9870-4549-97de-3cabe94b4356/1/spAqmJWp6izi7CS799ryNABY5JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d2:4d:21:43:86:4f:6d:24:2f:4a:eb:88:b4:f3:95:53:7e:
17:44:88:f1:44:90:e8:9f:bc:6e:6d:71:c4:ce:46:e2:5d:73:
fa:48:b2:3a:3f:2c:a5:7b:17:00:6d:78:d2:d6:02:e1:c4:e2:
3e:f8:5d:79:50:d6:27:4a:60:d5:6a:9a:52:4c:0c:80:97:ce:
be:8a:9f:55:36:4a:58:f9:c2:dd:5b:d4:66:33:6d:05:ee:31:
e9:b2:06:9c:f2:3f:75:fb:56:b6:15:bf:73:26:4a:19:ab:6b:
83:e8:e5:c8:f1:00:c3:e7:b0:cc:b2:93:a3:fd:b0:49:a2:b6:
65:42:a9:e1:47:f9:35:38:a4:9c:60:71:f4:39:30:73:89:c5:
82:26:af:46:bd:a2:01:38:d8:39:8e:25:96:ea:ce:ac:32:55:
56:4a:d8:ff:c7:e1:bc:55:78:f4:8c:7a:d2:42:83:33:5e:7f:
24:be:2d:34:4d:0b:94:9b:e3:aa:65:62:09:f0:05:7e:01:b7:
29:88:78:d1:b6:46:e7:24:b7:4b:33:c3:97:ae:39:69:aa:43:
8d:c2:1b:25:23:12:c6:ad:c7:f6:48:75:30:fd:d8:d2:02:7b:
07:41:26:54:1b:4e:b0:f9:4c:ee:8d:05:c3:a5:d0:44:97:88:
5f:b2:4e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:08:17 2026 by rpki-client