Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json)
Hash identifier: sNnB40br6kLMigIzYV+ivHCqsfc3ItpidpfkdBmLqsA=
Subject key identifier: 28:E7:DF:C5:80:1C:70:FB:3B:2A:EB:EA:04:07:4E:A0:E8:83:09:F7
Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Certificate serial: 019EC292D13953857AD5FAF0FC788E4B9BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
Manifest number: 18EE
Signing time: Sat 13 Jun 2026 20:01:02 +0000
Manifest this update: Sat 13 Jun 2026 20:01:02 +0000
Manifest next update: Sun 14 Jun 2026 20:01:02 +0000
Files and hashes: 1: IIlVo0fidTvQqKtqFi9ULMHfipo.roa (hash: kjOe1mZ+Dl42eBxnVxbtE/VrvseR8cEoFJ+of+SOdBo=)
2: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: QdiK50zQsWJ09D1UArn3NrzI0nfTYfC66I1YKgJmALs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:d1:39:53:85:7a:d5:fa:f0:fc:78:8e:4b:9b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Validity
Not Before: Jun 13 20:01:02 2026 GMT
Not After : Jun 14 20:01:02 2026 GMT
Subject: CN=28e7dfc5801c70fb3b2aebea04074ea0e88309f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:e7:ec:f0:3a:a5:eb:a2:f0:7d:1e:8b:72:
71:4f:c1:60:b1:06:1f:c3:c2:2a:4b:ee:a4:38:25:
93:22:db:9a:4a:ab:06:9b:8b:66:e1:fa:07:77:4f:
ec:69:7b:97:91:a5:51:8b:c4:f8:12:42:8a:75:77:
ea:13:9f:35:50:9f:b5:23:7b:27:a3:76:51:e3:bc:
71:36:88:d8:88:d2:d5:46:24:3f:92:cd:4f:f4:40:
08:d2:b6:80:44:cf:dc:d4:b7:9c:ba:7c:81:1b:ca:
61:27:bf:0d:6b:a6:db:21:e0:e9:a9:47:80:9d:4d:
3e:55:38:0d:28:cf:23:f8:aa:33:54:06:1e:28:9d:
fc:30:28:5f:32:1a:99:8d:e1:2f:cb:39:13:40:50:
33:2d:62:e1:e5:0c:ef:53:aa:f8:a5:f5:f3:a5:19:
9d:51:be:fe:6b:1e:e5:0c:db:b6:4f:8d:c6:6a:f6:
a9:54:05:a5:69:d1:cf:77:f3:7a:47:5f:cd:9c:ba:
e8:d8:15:9a:a3:fe:0b:3f:cd:67:d8:ef:d0:29:97:
1e:88:a0:9c:d8:03:df:bd:02:86:b4:35:fa:f1:0d:
1e:a2:65:19:39:ec:17:48:18:40:0e:94:45:3b:64:
ff:a6:6a:31:24:5a:a3:83:14:50:1f:b0:cd:c0:4f:
e1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E7:DF:C5:80:1C:70:FB:3B:2A:EB:EA:04:07:4E:A0:E8:83:09:F7
X509v3 Authority Key Identifier:
keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:fa:18:2d:80:83:b6:d0:36:d5:cd:53:f8:67:f1:b0:f5:da:
b4:47:5e:76:5e:a1:a4:2f:03:b1:d9:ab:4c:c9:4c:04:15:ed:
24:b8:73:a8:79:0a:23:1c:2d:09:73:f7:d4:8c:18:ed:18:c0:
7c:f6:6a:38:23:97:18:3a:e9:0e:b3:73:dd:d5:fa:2a:60:de:
61:d3:68:90:e6:97:23:f9:32:8b:5b:34:d2:d4:6f:15:04:84:
27:42:eb:47:0f:1b:f7:9c:46:20:8d:f7:58:6f:06:aa:98:f1:
30:74:de:83:72:da:70:2b:84:29:8b:08:54:54:e0:36:c1:92:
1b:36:0d:33:97:14:56:60:54:a1:ae:c9:f2:02:16:7d:41:25:
08:2c:e3:5d:b4:f5:e6:62:6e:ee:22:cb:bc:de:94:ca:96:13:
82:fd:0a:26:97:ca:3b:cf:6a:67:ec:c5:e2:fa:3e:09:b2:20:
a7:b5:9f:69:cd:1b:7a:fc:a3:5c:37:1e:1c:5f:f6:a9:d7:b7:
8f:dc:34:e8:e7:b6:67:96:f1:24:77:6a:8b:7d:eb:9f:97:cd:
8b:92:38:9d:01:44:01:27:54:67:95:55:7d:7f:ed:c4:45:11:
d1:6c:ff:83:fd:2f:f6:bd:c3:ef:40:6c:72:46:ad:1b:10:77:
51:46:ad:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:10:16 2026 by rpki-client