Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
File: SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft (raw, json)
Hash identifier: S6Adinuf+W+Wv/s0R1L/t6wC7A37b5MoU8EqKU/GzXg=
Subject key identifier: 6F:A0:30:EF:D5:82:D9:54:B5:DC:14:28:FD:ED:00:95:76:81:CF:95
Authority key identifier: 4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
Certificate issuer: /CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Certificate serial: 019CADC8000ACC91569FD661DEEB07CEE90E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
Manifest number: 1312
Signing time: Mon 02 Mar 2026 09:01:31 +0000
Manifest this update: Mon 02 Mar 2026 09:01:31 +0000
Manifest next update: Tue 03 Mar 2026 09:01:31 +0000
Files and hashes: 1: 7Z28ccV7b3JOrHBg1UIO3OEvwT0.roa (hash: 1nSmk3+PfoqP0CPu2acD9nLC2qFRu+YJXluMww4fQsw=)
2: E3n9esmOrOiobKpJnsNX1UEdPcY.roa (hash: dbM92eMK8IhOySdV1MJ9MEgIxZl7Dktml8lfCphXSgw=)
3: SWLNmYYm6Zq0D2jQ9d5JvtPt1cA.roa (hash: jzLKP/SbyyXvM8oP+/GO3/4crN42V8JTzUOZ8ggXFRk=)
4: SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl (hash: QrNEAq7FaF/+mCfP+uTSdz9ZupDSEEl1UqtE8rtCtd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:00:0a:cc:91:56:9f:d6:61:de:eb:07:ce:e9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Validity
Not Before: Mar 2 09:01:31 2026 GMT
Not After : Mar 3 09:01:31 2026 GMT
Subject: CN=6fa030efd582d954b5dc1428fded00957681cf95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cb:e1:df:a6:be:0c:da:7f:9c:b4:0e:db:5e:
28:38:2b:e6:b0:45:6e:24:54:64:63:ce:f1:40:29:
4a:14:be:b3:75:a3:bb:8f:c3:e5:19:f8:51:51:a4:
ad:3f:02:ef:c5:78:d0:57:44:65:83:65:46:94:f7:
81:3a:b3:7c:c9:81:93:51:57:ad:9e:86:20:62:d5:
cf:df:52:6f:1c:58:3d:69:66:63:fc:0d:65:d8:ca:
86:34:ed:8d:60:b0:3d:d4:b6:d8:cc:fe:99:1d:f4:
1f:6f:3a:52:f0:ce:08:3b:80:6e:b8:98:3b:1e:e6:
96:a5:d6:6f:15:bd:f0:93:da:19:a2:36:26:39:73:
2b:22:bd:96:f3:30:18:e4:19:74:e1:e9:f4:45:15:
1c:11:fc:e3:d4:73:fc:20:96:d1:9c:c4:6f:c6:ee:
f4:39:2e:cd:d9:77:a2:a3:a7:2b:cf:1a:fc:9d:e3:
c7:c8:78:89:be:6b:ca:73:69:07:c1:cb:92:f8:ba:
cd:46:ff:ab:05:91:0d:ff:bf:21:3b:84:dc:96:c1:
c0:b3:de:16:3a:aa:e6:42:44:7e:28:d6:7f:a1:71:
23:8e:28:88:f7:4c:a4:9d:9d:69:b7:7d:26:0e:2e:
d4:a6:a9:26:4b:61:72:ca:12:4c:1e:2d:23:49:f4:
21:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A0:30:EF:D5:82:D9:54:B5:DC:14:28:FD:ED:00:95:76:81:CF:95
X509v3 Authority Key Identifier:
keyid:4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d9:75:85:31:f4:8e:24:dc:db:ea:77:78:db:26:46:76:28:
79:0f:fb:01:a3:f5:50:8e:69:18:c7:89:50:d6:f7:65:17:bc:
f2:b2:81:58:4d:f6:d6:d1:d3:8e:83:c5:f4:da:b5:1e:dc:ca:
66:26:d7:f1:9e:2c:50:2d:d9:d2:f4:46:dd:b1:ce:c6:eb:1e:
68:da:61:33:76:d0:57:c0:46:5b:cf:42:65:1f:72:15:57:9f:
3f:de:72:fd:d3:fa:a5:db:22:ef:28:16:af:b5:b0:e3:3b:04:
6a:c1:c5:1c:02:36:6d:2b:6a:2a:d6:43:43:eb:83:a3:c7:59:
f8:cc:1f:cc:b2:1f:e9:43:7a:56:d4:17:73:00:0e:1c:2c:4f:
ea:98:13:bd:61:07:88:23:13:5c:08:f1:a1:0c:aa:7e:9d:42:
6b:7d:94:d0:f1:fe:c8:a9:e9:b9:23:0f:05:92:26:96:10:ef:
1c:71:fe:b0:de:2e:28:8c:6b:c2:63:c5:ed:ae:d0:d6:a6:5f:
02:88:26:e1:93:7f:bc:4b:37:bc:fe:33:8d:2c:f9:98:a5:1f:
76:56:74:0a:95:27:4a:2c:ac:e8:91:84:11:89:fb:0f:f6:67:
59:2c:3a:66:8b:48:68:98:0a:2a:4f:ef:f2:a6:1c:5b:a7:e7:
4a:f6:f1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:30 2026 by rpki-client