Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
File: Sp0WbGSEc4ly6bM5OBZfRImlFow.mft (raw, json)
Hash identifier: 7v3wY2dyYngeFDBDNf+tOOLROCJz0luCnyM7z/e5zNU=
Subject key identifier: 4C:50:AC:E0:0B:3D:5C:86:38:A8:E3:7C:A7:D5:93:BB:E3:6A:F4:F3
Authority key identifier: 4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
Certificate issuer: /CN=4a9d166c6484738972e9b33938165f4489a5168c
Certificate serial: 019CABA1C1AB2D637F0219AA09FEFF783764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
Manifest number: 0BBD
Signing time: Sun 01 Mar 2026 23:00:30 +0000
Manifest this update: Sun 01 Mar 2026 23:00:30 +0000
Manifest next update: Mon 02 Mar 2026 23:00:30 +0000
Files and hashes: 1: Sp0WbGSEc4ly6bM5OBZfRImlFow.crl (hash: pexDR2kFiv2yU4EBMsClO0uLrLQOFO9UPwqzavspomU=)
2: ZyKblhYof-lvzcG5wAYzbAd36M4.roa (hash: Ov+QQPf43TIV3qdCbGiYFnfp3OquF/Rfa6pgoiI/wlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:c1:ab:2d:63:7f:02:19:aa:09:fe:ff:78:37:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9d166c6484738972e9b33938165f4489a5168c
Validity
Not Before: Mar 1 23:00:30 2026 GMT
Not After : Mar 2 23:00:30 2026 GMT
Subject: CN=4c50ace00b3d5c8638a8e37ca7d593bbe36af4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a5:a3:44:41:02:9f:97:c9:6e:e0:2e:0f:d5:
f9:16:7f:18:e8:bf:77:2f:a1:36:ff:03:99:ed:a5:
5d:05:c3:1e:a0:6d:69:96:87:43:c7:58:f0:ba:e7:
a1:ed:fb:72:17:06:5f:52:29:69:83:4a:f7:8b:8e:
29:73:a3:ec:0d:f5:83:aa:d3:2e:28:3e:53:34:2b:
a7:99:90:fd:e4:3c:ac:9b:5a:12:fb:cf:20:04:e5:
af:fd:32:cb:14:f5:1c:d8:7e:3b:2a:95:48:8f:fd:
58:ce:ce:af:aa:f8:fb:3e:b6:0f:0e:e2:da:ea:85:
db:44:ce:9b:3c:67:b5:2b:80:fc:d3:fb:ec:71:22:
e0:1f:f3:a4:da:6d:1f:04:90:a9:70:4c:01:0d:9d:
38:f9:86:0e:ae:85:3a:bc:4d:45:ad:a2:29:d5:fb:
60:c4:b9:dd:ad:a3:87:be:86:49:6e:4e:7b:4b:91:
e5:52:c7:5b:98:83:c7:d0:80:d4:c5:28:35:f9:e8:
49:b3:0c:cc:6d:f0:07:0c:71:fd:0a:72:3e:d5:73:
5f:86:32:60:9f:d5:c2:86:e2:4a:1c:a7:a1:d0:36:
14:2a:a4:87:8d:14:d0:1b:2e:f6:b0:84:cd:a0:73:
4e:02:a5:ed:45:26:69:22:9e:1e:67:20:81:f3:3b:
12:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:50:AC:E0:0B:3D:5C:86:38:A8:E3:7C:A7:D5:93:BB:E3:6A:F4:F3
X509v3 Authority Key Identifier:
keyid:4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:28:f9:55:57:0a:11:51:0b:e5:8e:db:d9:f5:23:30:4e:e5:
3d:47:a3:83:a2:e3:30:83:2f:45:e0:7a:3b:f8:1a:b9:0d:a9:
f5:41:a1:57:37:32:89:ce:12:73:68:b1:ad:d2:af:88:21:a9:
b1:49:89:9b:6c:30:0d:3b:77:f0:fe:74:5e:5a:8d:b6:1b:8a:
84:7e:c4:d8:d8:fa:d6:49:59:f7:2f:b0:50:a5:e3:b3:fc:39:
94:1d:13:dd:db:9d:5f:be:62:03:42:c6:90:70:7d:a9:5f:7e:
13:50:f8:6b:95:5c:d5:b4:3e:c2:45:7d:17:c2:89:f6:ff:e7:
2e:87:1a:64:32:8d:50:70:e6:18:50:55:df:86:bb:15:94:45:
cf:bf:8f:cc:9c:3c:5b:56:df:64:ba:74:84:a9:cd:47:d3:97:
96:e0:b2:eb:ed:f2:86:96:81:48:54:65:a7:ea:1d:0c:71:09:
d3:9d:ea:61:98:c5:72:68:53:50:2d:fc:c0:5a:b1:25:6c:18:
0e:62:f0:03:e0:ef:4b:67:f9:1a:f9:7d:97:71:34:42:d9:d0:
74:45:19:ed:d9:46:7b:0b:ff:d9:34:65:22:11:f1:17:c1:ee:
73:a5:2a:04:9b:c8:3a:0a:a4:43:ee:77:01:5e:17:19:80:34:
24:0b:70:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:14:30 2026 by rpki-client