Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
File: spIJTWkd9KfDjxa3VVfpwm1KxpI.mft (raw, json)
Hash identifier: SmRS249pIojXZyUvx4GEXMSAnRgxxx3H93FojK8VSuM=
Subject key identifier: 78:9C:F4:B9:C1:AD:25:86:18:63:17:4C:E6:19:B3:5F:27:7E:33:7D
Authority key identifier: B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
Certificate issuer: /CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Certificate serial: 01A12CC4AE4582A0FDCFF4777F69182E083F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
Manifest number: 19A1
Signing time: Sun 11 Oct 2026 21:00:49 +0000
Manifest this update: Sun 11 Oct 2026 21:00:49 +0000
Manifest next update: Mon 12 Oct 2026 21:00:49 +0000
Files and hashes: 1: 0E-nyOZ29zT4VlvH5MYeOKciQqI.roa (hash: n1KClvottVe9Rxjk6bmhkUknz6tneHeORGIxNcy3VKk=)
2: spIJTWkd9KfDjxa3VVfpwm1KxpI.crl (hash: 9x+5Sa/XoJCH4sUIRS3ya6SJO/s3D4gcmUSMvkH1KJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:c4:ae:45:82:a0:fd:cf:f4:77:7f:69:18:2e:08:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Validity
Not Before: Oct 11 21:00:49 2026 GMT
Not After : Oct 12 21:00:49 2026 GMT
Subject: CN=789cf4b9c1ad25861863174ce619b35f277e337d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:f0:fc:96:69:cf:2c:cc:28:3d:d1:c8:0d:
3b:b8:f5:39:6d:a5:81:b7:c7:d0:a6:58:48:5b:e4:
90:e0:31:64:eb:d4:a9:40:fb:32:d5:8d:fd:51:34:
e5:05:de:27:aa:c8:72:1d:19:ef:54:cd:35:f4:c3:
27:b4:69:8a:25:0c:47:db:aa:43:2e:88:0e:c4:a8:
0c:32:f3:3d:c3:f6:d4:1a:a8:f2:11:7c:1e:6d:f2:
39:fd:e3:12:21:34:f7:cb:8f:ee:9d:8d:95:63:26:
d9:55:32:70:11:2b:80:90:2d:5d:f3:a6:2a:32:65:
ae:6a:01:a0:fd:68:eb:8b:bf:74:0a:50:5f:64:2d:
12:1e:22:14:30:8b:20:a4:bc:8f:90:83:f5:eb:31:
30:72:b7:e8:1b:1a:eb:4f:5d:98:68:65:8e:be:ab:
0d:7e:10:e4:ce:ec:46:d9:a3:09:17:f5:81:67:ed:
d4:e8:88:0b:5f:cf:6c:1c:e4:42:ca:52:2b:ad:4e:
21:db:31:0a:5b:a7:4b:0a:e0:fb:9b:bb:97:4e:fe:
78:4b:13:2c:b7:36:07:7b:55:f1:bd:3d:a1:6f:c0:
10:61:e7:c2:f9:77:3f:1f:2e:52:55:0b:39:da:a3:
3f:58:f4:86:2a:83:d2:1e:f0:19:68:69:70:11:17:
2c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9C:F4:B9:C1:AD:25:86:18:63:17:4C:E6:19:B3:5F:27:7E:33:7D
X509v3 Authority Key Identifier:
keyid:B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7d:80:e3:bd:55:dc:24:78:bc:ab:fc:a4:5f:58:56:03:ee:
a1:67:16:66:48:42:ec:12:b9:a6:c1:b2:7d:cb:46:4b:2c:28:
e9:0d:b9:9d:8d:74:f8:9e:e5:3d:33:e7:b6:52:48:42:09:58:
4c:3f:59:9c:f1:ad:05:36:e3:65:3b:a4:73:ea:82:03:e4:0d:
a3:8e:46:8e:84:cc:e3:1d:eb:40:11:8b:bd:12:8b:ff:76:09:
58:32:d0:72:11:2c:20:fa:a5:d2:dc:39:3e:b8:6c:c1:7a:bf:
82:e5:df:00:6d:04:1b:b2:c0:e2:c1:cc:63:48:a3:b3:8d:fe:
6a:4d:b8:1a:ec:ce:3e:b5:3b:2d:6c:57:8d:ab:91:d4:f3:44:
a8:ef:65:42:92:3e:45:dd:be:54:e4:bf:ee:76:4b:b2:c1:c7:
0e:c2:40:4f:7a:ea:da:a3:94:e8:6e:5b:52:7e:80:b9:0d:9a:
72:33:25:57:6f:f4:52:65:05:5f:ad:ea:17:db:7d:ee:a1:b9:
3f:fe:29:17:ba:df:00:b7:3c:03:c5:46:be:75:58:8d:90:1b:
96:91:f7:10:41:b9:f5:3b:30:ab:82:aa:4f:f0:73:ec:94:e1:
e1:68:28:bd:b1:6d:d3:c5:21:0c:f8:9a:66:24:ea:2a:30:7b:
0f:1e:01:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEsxK5FgqD9z/R3f2kYLgg/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyOTIwOTRkNjkxZGY0YTdjMzhmMTZiNzU1NTdlOWMyNmQ0
YWM2OTIwHhcNMjYxMDExMjEwMDQ5WhcNMjYxMDEyMjEwMDQ5WjAzMTEwLwYDVQQD
Eyg3ODljZjRiOWMxYWQyNTg2MTg2MzE3NGNlNjE5YjM1ZjI3N2UzMzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0vw/JZpzyzMKD3RyA07uPU5baWB
t8fQplhIW+SQ4DFk69SpQPsy1Y39UTTlBd4nqshyHRnvVM019MMntGmKJQxH26pD
LogOxKgMMvM9w/bUGqjyEXwebfI5/eMSITT3y4/unY2VYybZVTJwESuAkC1d86Yq
MmWuagGg/Wjri790ClBfZC0SHiIUMIsgpLyPkIP16zEwcrfoGxrrT12YaGWOvqsN
fhDkzuxG2aMJF/WBZ+3U6IgLX89sHORCylIrrU4h2zEKW6dLCuD7m7uXTv54SxMs
tzYHe1XxvT2hb8AQYefC+Xc/Hy5SVQs52qM/WPSGKoPSHvAZaGlwERcsUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHic9LnBrSWGGGMXTOYZs18nfjN9MB8GA1UdIwQY
MBaAFLKSCU1pHfSnw48Wt1VX6cJtSsaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3BJSlRXa2Q5S2ZEanhhM1ZWZnB3bTFLeHBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lN2I5MzItZmMyMS00YTYxLWFlZjAt
MTVhMDkzZTJiYjhmLzEvc3BJSlRXa2Q5S2ZEanhhM1ZWZnB3bTFLeHBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lN2I5MzItZmMyMS00YTYxLWFlZjAtMTVhMDkzZTJiYjhm
LzEvc3BJSlRXa2Q5S2ZEanhhM1ZWZnB3bTFLeHBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl32A471V
3CR4vKv8pF9YVgPuoWcWZkhC7BK5psGyfctGSywo6Q25nY10+J7lPTPntlJIQglY
TD9ZnPGtBTbjZTukc+qCA+QNo45GjoTM4x3rQBGLvRKL/3YJWDLQchEsIPql0tw5
PrhswXq/guXfAG0EG7LA4sHMY0ijs43+ak24GuzOPrU7LWxXjauR1PNEqO9lQpI+
Rd2+VOS/7nZLssHHDsJAT3rq2qOU6G5bUn6AuQ2acjMlV2/0UmUFX63qF9t97qG5
P/4pF7rfALc8A8VGvnVYjZAblpH3EEG59Tswq4KqT/Bz7JTh4WgovbFt08UhDPia
ZiTqKjB7Dx4Bng==
-----END CERTIFICATE-----
Generated at Mon Oct 12 03:04:16 2026 by rpki-client