Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
File: spIJTWkd9KfDjxa3VVfpwm1KxpI.mft (raw, json)
Hash identifier: Er4DI+YvpxSAf3QdLpC41S7bER7kEakCBmqqNhU/Gio=
Subject key identifier: E0:20:8C:5C:50:AE:E3:60:20:15:E7:2A:5D:06:52:98:59:AD:7A:E4
Authority key identifier: B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
Certificate issuer: /CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Certificate serial: 019D9962B9DEFB9E54A12DE81407A0AEAD12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
Manifest number: 17C7
Signing time: Fri 17 Apr 2026 03:01:17 +0000
Manifest this update: Fri 17 Apr 2026 03:01:17 +0000
Manifest next update: Sat 18 Apr 2026 03:01:17 +0000
Files and hashes: 1: 0E-nyOZ29zT4VlvH5MYeOKciQqI.roa (hash: n1KClvottVe9Rxjk6bmhkUknz6tneHeORGIxNcy3VKk=)
2: spIJTWkd9KfDjxa3VVfpwm1KxpI.crl (hash: T4ovu4s/e/mQaxNB/oQ9rGQ63lUqO63J2FfXuk32RMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:b9:de:fb:9e:54:a1:2d:e8:14:07:a0:ae:ad:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Validity
Not Before: Apr 17 03:01:17 2026 GMT
Not After : Apr 18 03:01:17 2026 GMT
Subject: CN=e0208c5c50aee3602015e72a5d06529859ad7ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c1:e6:c6:0f:50:45:93:78:a2:b1:74:d2:ed:
06:ce:d1:8e:8d:0c:4c:f5:09:1c:ac:e5:29:6f:3a:
10:65:8a:2f:c0:2c:47:20:85:55:fc:b4:6f:db:b3:
3b:9e:be:cc:a7:3f:b8:5a:3b:94:c2:1c:6e:07:87:
cf:f1:41:3a:a9:0f:66:aa:d2:a6:ef:23:66:59:a6:
04:1c:68:3a:66:37:dd:64:57:f8:e9:22:63:dd:74:
ff:9a:f9:bf:b1:ae:38:b5:2d:6b:e1:30:0a:4e:52:
4b:dd:50:5c:db:c7:f0:04:2e:be:e3:fd:5a:18:19:
ee:ba:c5:e3:02:57:8d:a8:57:a5:7d:18:65:50:9e:
64:b4:5b:d5:cc:d5:c4:b4:2b:1a:0c:8f:ba:ec:ed:
85:68:9a:5f:14:a0:06:98:77:43:02:be:01:fc:26:
6f:27:e2:70:0e:32:e2:ae:9d:ea:34:60:7b:74:65:
58:5c:5b:d7:3d:a2:59:22:8c:9c:0d:12:24:8a:1a:
ca:2f:95:a8:7e:5c:4a:fe:28:ab:f4:1b:81:30:48:
67:de:a9:6b:9a:bd:a0:6e:e4:7d:7f:dc:d7:3c:5e:
1c:d6:54:82:67:62:43:56:c4:3a:fd:13:70:30:3a:
56:9d:f3:c7:6a:32:a6:0c:66:0a:9e:45:03:ca:bb:
0b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:20:8C:5C:50:AE:E3:60:20:15:E7:2A:5D:06:52:98:59:AD:7A:E4
X509v3 Authority Key Identifier:
keyid:B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b1:40:72:14:97:d8:cb:50:3f:1e:19:e5:c3:2d:01:0c:f7:
49:05:3a:62:85:04:83:3c:4e:ba:c2:22:f6:f4:4f:b1:76:db:
d5:72:cd:7c:6b:fe:67:80:47:b6:5c:55:f8:55:a4:d4:ae:4a:
5f:d7:df:df:01:3f:2e:8e:7e:0b:e6:db:3d:30:19:fb:29:a8:
77:78:4b:45:26:75:67:cf:a4:89:20:8e:a7:ed:b7:40:a8:2d:
6c:03:b4:a9:fe:c7:88:71:3a:63:30:13:b0:15:8d:3d:54:f3:
07:35:a2:2d:2f:73:e1:57:77:3a:cb:f7:d2:2f:bf:89:27:cd:
68:d4:b3:63:45:11:9c:16:73:ea:b6:3d:8f:43:61:2f:ec:f1:
e2:3c:15:34:fe:57:12:3d:34:04:82:4a:03:80:4b:34:1b:32:
f3:34:63:08:60:7c:9a:3f:55:60:7e:1a:6b:d7:49:2c:27:09:
f2:38:9c:af:e0:56:79:9c:ed:77:f3:3c:21:fa:03:c9:ef:83:
7c:36:73:d8:d6:88:53:f8:d0:27:9e:e6:94:7a:e4:23:f9:f7:
8a:bf:8b:ce:53:ab:68:a5:e6:12:a8:a5:19:cb:35:e1:52:99:
6f:84:09:ae:ac:af:71:ea:14:d7:b8:3e:b1:e1:d6:32:76:75:
ae:b6:b1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:40:04 2026 by rpki-client