Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json)
Hash identifier: 6dXDYun1PPCrBakxYHwxfB8NRMBSqIfXxGLDZbg00Xs=
Subject key identifier: E3:EC:D3:32:03:F7:7C:F7:7C:6A:BC:D6:CE:FC:BB:31:A7:37:0E:97
Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Certificate serial: 019CAD90729B0C6419A1087C085A73AB2082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
Manifest number: 17DA
Signing time: Mon 02 Mar 2026 08:00:50 +0000
Manifest this update: Mon 02 Mar 2026 08:00:50 +0000
Manifest next update: Tue 03 Mar 2026 08:00:50 +0000
Files and hashes: 1: IIlVo0fidTvQqKtqFi9ULMHfipo.roa (hash: kjOe1mZ+Dl42eBxnVxbtE/VrvseR8cEoFJ+of+SOdBo=)
2: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: twbvulUCQT0wI2UVsBEq/Pd+JRqdCJ85nJnc6lgZuSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:72:9b:0c:64:19:a1:08:7c:08:5a:73:ab:20:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Validity
Not Before: Mar 2 08:00:50 2026 GMT
Not After : Mar 3 08:00:50 2026 GMT
Subject: CN=e3ecd33203f77cf77c6abcd6cefcbb31a7370e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:54:cc:0e:31:83:9f:c0:bb:99:d6:79:e9:
84:87:bf:a3:7e:9d:8b:f4:06:4c:03:f4:df:9e:14:
f1:f8:60:fd:7d:9b:00:ca:f7:ea:d1:f8:81:3a:73:
51:30:e2:e1:b1:65:f3:83:0f:1a:db:97:2c:09:07:
6b:75:b0:c3:50:f0:d4:9c:99:e0:7a:1a:ea:9a:bf:
bc:37:be:0c:dd:d1:b4:b4:8c:72:d8:76:cb:0e:91:
7d:21:58:8f:c8:8a:48:4d:f9:f9:34:25:a9:2a:a9:
44:1f:b6:a7:6b:b5:31:33:96:b0:9f:6c:c9:98:69:
cd:d5:ba:a5:53:ed:73:0e:8b:d2:03:32:4b:8f:99:
2a:f7:b3:8d:8e:de:67:6d:1c:28:3e:c8:f3:e4:3a:
fd:b7:87:a4:74:74:b1:83:97:42:d6:40:e1:18:66:
a5:bd:ca:9b:d0:23:64:25:01:52:fe:e1:e0:17:23:
38:4c:4c:8c:f4:ae:27:bc:91:90:cd:8f:39:9d:b5:
97:06:63:bc:1b:b0:93:3d:3d:34:e3:82:4f:c7:c1:
bf:c3:1a:25:86:5e:26:1f:95:2b:29:2f:81:5d:7e:
b8:4c:c6:11:e9:37:2e:3d:f6:3b:32:29:c1:a3:c5:
90:91:e1:2e:07:07:c5:ae:eb:15:b2:de:3b:73:25:
1c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EC:D3:32:03:F7:7C:F7:7C:6A:BC:D6:CE:FC:BB:31:A7:37:0E:97
X509v3 Authority Key Identifier:
keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7b:64:46:fe:80:c2:30:cd:94:37:83:3e:74:7e:a9:fe:7b:
0b:5f:66:26:68:8f:75:ea:5f:dc:78:37:35:6a:8b:05:46:4a:
15:60:4c:78:9e:12:a1:99:3e:36:57:9a:a3:da:a6:bf:e6:23:
a7:28:2d:79:8e:92:36:01:21:3d:61:46:2f:48:ec:36:ab:79:
b9:8d:87:bb:26:5e:87:62:de:84:c7:d8:7d:4b:59:9c:ce:f0:
eb:9f:e6:4f:30:e0:8f:c3:90:e6:1b:43:7d:2a:87:f2:6e:b2:
65:c8:b6:0b:90:cd:57:18:d7:8f:e6:df:7b:28:dd:9c:36:54:
db:4f:ca:1e:07:3c:cd:23:f1:a3:76:19:f0:87:37:e8:cf:81:
f0:f2:68:e6:b9:20:13:16:7a:ae:55:0c:9b:7b:d2:69:8e:8d:
06:e7:06:dd:85:e7:27:5a:4b:f7:12:32:81:13:7e:a4:c2:90:
aa:8b:47:e5:35:62:25:e6:8b:93:94:46:6f:c8:cf:83:92:f0:
6c:d7:a0:f3:d9:52:1a:bf:9b:41:c7:8f:c5:49:43:e3:cb:51:
60:d8:78:e6:80:7b:b6:76:ee:9e:74:fa:ca:4d:ad:d8:73:aa:
2e:7f:8e:a6:ed:1c:06:5b:76:d8:8a:9e:cf:87:61:19:8a:cd:
9a:ee:00:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:48 2026 by rpki-client