Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json)
Hash identifier: o0SZ0ZPnDE1feaGFL9op4f61PnkOLhA+q8X9FwaPFnc=
Subject key identifier: 1C:95:2B:35:D2:83:69:E5:FD:E8:D5:94:2A:3B:6A:10:1C:BB:28:8F
Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Certificate serial: 019D9B1A125047D9DA2672193B8C0260672C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
Manifest number: 1855
Signing time: Fri 17 Apr 2026 11:01:10 +0000
Manifest this update: Fri 17 Apr 2026 11:01:10 +0000
Manifest next update: Sat 18 Apr 2026 11:01:10 +0000
Files and hashes: 1: IIlVo0fidTvQqKtqFi9ULMHfipo.roa (hash: kjOe1mZ+Dl42eBxnVxbtE/VrvseR8cEoFJ+of+SOdBo=)
2: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: LBmFZopVNFPRkOoaDz95Lk7DzHu0Wtd3kdqv9BiIHMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:1a:12:50:47:d9:da:26:72:19:3b:8c:02:60:67:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Validity
Not Before: Apr 17 11:01:10 2026 GMT
Not After : Apr 18 11:01:10 2026 GMT
Subject: CN=1c952b35d28369e5fde8d5942a3b6a101cbb288f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:65:bf:0d:21:f4:2b:40:87:04:ed:f3:c1:47:
34:ae:87:7f:51:b4:ce:a7:4d:a6:cb:fe:2f:91:3d:
59:52:52:d0:5d:c0:4e:c2:1c:dc:b4:d1:27:b3:a4:
83:8b:1f:23:1a:24:03:94:66:70:57:b7:b8:d8:68:
98:44:5d:01:81:04:06:b6:8a:6a:4f:1f:68:5f:a4:
dd:69:e4:47:54:41:51:88:3e:c9:94:a6:17:d3:41:
30:e3:d0:1b:64:54:08:04:d9:d6:7b:dd:c6:ab:a3:
00:f4:46:c9:a9:70:82:8d:25:77:3b:18:c8:7d:ff:
1f:4f:eb:7c:ea:fc:1e:01:cc:cd:1b:09:e1:9c:16:
56:87:4e:83:fe:85:ad:43:08:db:d0:f0:ec:9e:cb:
b1:6f:0d:82:bf:9e:d0:e6:5e:4e:31:9b:3e:a5:96:
10:bd:ab:81:8a:a2:2e:d1:c4:88:28:3d:0a:8b:de:
45:3e:80:91:4b:90:2b:0e:4d:fa:97:c6:a6:c2:5c:
38:ff:7f:c2:5d:f3:ec:0e:c6:59:57:7f:93:8b:3f:
3b:10:db:94:9d:92:16:0a:5a:91:dd:f5:29:6f:fa:
23:40:d3:3e:97:11:2c:13:ec:8a:1d:ad:27:ae:d9:
51:a2:a8:17:5e:bd:c6:f9:5b:fe:43:86:1c:f2:9a:
82:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:95:2B:35:D2:83:69:E5:FD:E8:D5:94:2A:3B:6A:10:1C:BB:28:8F
X509v3 Authority Key Identifier:
keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a0:48:64:88:76:0b:63:35:e6:5f:aa:28:50:6b:b7:fe:82:
38:34:01:9d:61:3c:bb:29:74:21:b6:15:15:2a:a3:48:f3:ea:
79:e3:7c:d2:03:db:cc:e7:61:0f:c2:7f:52:b5:85:bc:1b:7e:
38:ad:e7:27:e0:da:5e:e8:77:a1:56:9a:66:0e:9b:f5:47:11:
19:89:9e:82:80:ab:1f:69:58:b3:66:f0:d9:0b:d3:33:60:11:
b8:9e:0d:05:c6:70:26:62:7f:d7:00:89:4b:b8:3f:25:d7:3c:
51:8c:93:40:8c:6d:d4:e6:da:6c:d1:ba:3a:60:55:a8:e9:63:
62:1c:d3:f4:d6:60:54:ef:1d:20:02:3e:ee:f7:41:13:3c:4c:
fe:c3:bf:63:05:77:5d:b8:ec:d5:dd:0d:a2:b2:6b:46:4b:e0:
e3:83:6e:07:62:dc:93:4a:4f:95:65:d0:25:61:fd:8d:7a:5d:
46:c0:4f:ee:f1:c4:c7:fc:02:54:b6:87:fd:b0:8d:03:6b:ee:
a5:63:29:a9:27:42:2e:43:3a:71:f8:8f:e0:3e:81:0f:cd:63:
b3:77:9f:03:79:de:b0:ea:38:72:10:76:7d:65:50:a3:9e:66:
a0:cf:68:2e:e7:f0:77:57:5d:78:f8:47:e0:96:6c:bd:c7:97:
94:79:8d:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGhJQR9naJnIZO4wCYGcsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOWRiMDBjYjE0YTM0YTE5M2Y4NGFjYTE0NGIyYWViMWYz
YzAyYzgwHhcNMjYwNDE3MTEwMTEwWhcNMjYwNDE4MTEwMTEwWjAzMTEwLwYDVQQD
EygxYzk1MmIzNWQyODM2OWU1ZmRlOGQ1OTQyYTNiNmExMDFjYmIyODhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmW/DSH0K0CHBO3zwUc0rod/UbTO
p02my/4vkT1ZUlLQXcBOwhzctNEns6SDix8jGiQDlGZwV7e42GiYRF0BgQQGtopq
Tx9oX6TdaeRHVEFRiD7JlKYX00Ew49AbZFQIBNnWe93Gq6MA9EbJqXCCjSV3OxjI
ff8fT+t86vweAczNGwnhnBZWh06D/oWtQwjb0PDsnsuxbw2Cv57Q5l5OMZs+pZYQ
vauBiqIu0cSIKD0Ki95FPoCRS5ArDk36l8amwlw4/3/CXfPsDsZZV3+Tiz87ENuU
nZIWClqR3fUpb/ojQNM+lxEsE+yKHa0nrtlRoqgXXr3G+Vv+Q4Yc8pqC8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByVKzXSg2nl/ejVlCo7ahAcuyiPMB8GA1UdIwQY
MBaAFEqdsAyxSjShk/hKyhRLKusfPALIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83NjEyYjAtM2UyNC00Y2U3LWExY2Et
YzFjNjYwNzhlNWJhLzEvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy83NjEyYjAtM2UyNC00Y2U3LWExY2EtYzFjNjYwNzhlNWJh
LzEvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKBIZIh2
C2M15l+qKFBrt/6CODQBnWE8uyl0IbYVFSqjSPPqeeN80gPbzOdhD8J/UrWFvBt+
OK3nJ+DaXuh3oVaaZg6b9UcRGYmegoCrH2lYs2bw2QvTM2ARuJ4NBcZwJmJ/1wCJ
S7g/Jdc8UYyTQIxt1ObabNG6OmBVqOljYhzT9NZgVO8dIAI+7vdBEzxM/sO/YwV3
Xbjs1d0NorJrRkvg44NuB2Lck0pPlWXQJWH9jXpdRsBP7vHEx/wCVLaH/bCNA2vu
pWMpqSdCLkM6cfiP4D6BD81js3efA3nesOo4chB2fWVQo55moM9oLufwd1ddePhH
4JZsvceXlHmNXA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:47:02 2026 by rpki-client