Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
File: sPiohfd3bSq5m7TyDoTTBuA5SqM.mft (raw, json)
Hash identifier: vmYned62CeZJ/xnSCYR5U7ZU3xzAI+pUpC8nYLENV1o=
Subject key identifier: CC:29:77:7E:70:44:A4:E7:91:05:40:BE:CA:F6:5A:EF:46:6C:2A:A9
Authority key identifier: B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3
Certificate issuer: /CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3
Certificate serial: 019CA94593EC07D931E6BDF10ABF7E4ED4DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
Manifest number: 15D9
Signing time: Sun 01 Mar 2026 12:00:35 +0000
Manifest this update: Sun 01 Mar 2026 12:00:35 +0000
Manifest next update: Mon 02 Mar 2026 12:00:35 +0000
Files and hashes: 1: 05WyMyWcwnVDoZCr0BbmBiMaPoc.roa (hash: ZxXNQ2QkuA/tbUaOYs+oznQKVfcUfC5jKVIgdvSVmnk=)
2: sPiohfd3bSq5m7TyDoTTBuA5SqM.crl (hash: Y7PtbIIo6PRAixx9/TAyh+BOKY0TGdaYpTGe0emTXPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:93:ec:07:d9:31:e6:bd:f1:0a:bf:7e:4e:d4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3
Validity
Not Before: Mar 1 12:00:35 2026 GMT
Not After : Mar 2 12:00:35 2026 GMT
Subject: CN=cc29777e7044a4e7910540becaf65aef466c2aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:60:c9:e3:27:b9:e2:6f:8e:71:5d:ab:38:
b1:03:85:8c:df:0e:af:63:3f:d0:53:a4:74:b5:ad:
5d:cb:3c:92:89:42:35:93:3f:42:1d:8f:71:c9:04:
99:62:4c:18:e3:65:ec:b9:43:c4:aa:14:c3:e4:92:
81:1e:4f:51:6f:7e:54:21:8a:6d:ba:d1:93:3a:ac:
97:23:1a:3a:66:b7:a4:5c:fa:e7:41:23:a2:cd:e6:
19:2e:e7:22:a8:88:66:42:94:b7:16:83:de:90:85:
1e:79:2b:be:2f:0c:91:ca:ec:72:44:41:60:02:f0:
e7:80:83:a1:29:d9:fd:2e:28:f7:cb:bb:46:49:20:
ba:72:2f:42:25:0f:8b:46:f6:89:6d:c7:47:5a:33:
f8:a0:e9:23:92:0f:61:35:d3:7b:d5:88:97:2d:b2:
c4:77:80:a3:03:91:49:52:99:28:fb:2d:d5:1c:e9:
aa:80:ca:9d:9f:4e:8e:c2:de:3f:70:78:d9:2b:02:
05:c2:7c:99:2a:50:d8:e9:e5:bd:00:a6:5d:cc:8d:
71:c3:5b:38:69:3b:e6:66:48:b7:a1:2f:01:26:93:
01:2b:e8:b3:12:d9:48:6c:0e:d0:07:00:cc:a7:8e:
de:65:26:35:e4:b1:25:b8:b0:25:1b:dc:b6:fc:5f:
ac:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:29:77:7E:70:44:A4:E7:91:05:40:BE:CA:F6:5A:EF:46:6C:2A:A9
X509v3 Authority Key Identifier:
keyid:B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ea:2a:75:e8:fd:14:79:8a:e2:1f:f8:4c:9d:00:e2:d1:06:
9e:3f:fb:cc:af:ed:f1:75:78:4f:3c:fa:f5:e0:56:28:be:eb:
61:fe:7f:d2:04:f4:b6:a3:85:6d:d9:85:25:b3:d4:7d:ad:5c:
b6:39:90:86:65:53:76:3e:b4:a1:da:fe:e8:84:24:f6:8e:86:
d4:7f:6c:9f:e5:32:cb:8c:8b:79:ed:fe:88:02:4f:09:2a:5e:
91:55:b6:2b:6d:d5:1d:1a:79:5d:3b:23:0b:32:3b:45:66:6d:
a8:73:9d:b7:38:1e:73:74:91:2e:aa:0e:90:38:55:e8:37:3b:
02:ea:14:a3:90:22:8b:a3:04:69:42:84:11:e4:82:9a:72:0c:
14:8c:a3:54:f3:29:a7:ef:f0:7a:29:ec:02:ab:55:b1:99:86:
d8:61:10:58:3c:10:c0:7a:6b:d6:43:60:e5:07:7d:0c:c0:fe:
84:67:c3:37:3d:14:93:12:eb:ae:30:a2:1d:6e:33:5b:b2:81:
5a:02:f1:d3:c3:c7:b8:23:88:99:ae:61:21:0b:e3:6f:52:5e:
d2:d7:bb:fb:e5:36:e1:7a:8a:1f:06:0e:21:3d:c4:97:16:c4:
9c:89:7c:c1:fa:8b:97:d7:7f:7c:46:b2:79:e6:90:bc:88:df:
32:ee:7f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:13 2026 by rpki-client