Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
File: Sp0WbGSEc4ly6bM5OBZfRImlFow.mft (raw, json)
Hash identifier: lvsLbKPST9JYcH/qQRq/V4xAvrBmj7N+9PjQ4aoIf7Y=
Subject key identifier: 6B:04:20:A2:91:E6:7A:3F:6E:28:F4:39:DA:C1:3A:58:32:ED:B3:82
Authority key identifier: 4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
Certificate issuer: /CN=4a9d166c6484738972e9b33938165f4489a5168c
Certificate serial: 019FAC3EF34E628F4675856FAD12C5B3A516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
Manifest number: 0D4B
Signing time: Wed 29 Jul 2026 05:00:34 +0000
Manifest this update: Wed 29 Jul 2026 05:00:34 +0000
Manifest next update: Thu 30 Jul 2026 05:00:34 +0000
Files and hashes: 1: Sp0WbGSEc4ly6bM5OBZfRImlFow.crl (hash: caznbpgVY+znF+CJliUZpy0WpMSDjhqAkK88EWBnWyQ=)
2: ZyKblhYof-lvzcG5wAYzbAd36M4.roa (hash: Ov+QQPf43TIV3qdCbGiYFnfp3OquF/Rfa6pgoiI/wlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:f3:4e:62:8f:46:75:85:6f:ad:12:c5:b3:a5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9d166c6484738972e9b33938165f4489a5168c
Validity
Not Before: Jul 29 05:00:34 2026 GMT
Not After : Jul 30 05:00:34 2026 GMT
Subject: CN=6b0420a291e67a3f6e28f439dac13a5832edb382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d9:1d:a8:7a:1b:72:9a:ee:51:e9:ff:2c:81:
e6:5e:fd:37:98:51:45:cc:6d:84:a0:38:c3:a8:30:
5d:00:3d:a1:f6:c9:c4:b9:8b:1d:bc:a0:bf:63:de:
55:a3:bf:99:6a:fa:33:60:88:a8:b4:72:a8:36:0d:
f4:18:e6:51:f3:45:ba:25:39:dd:76:e2:6a:46:61:
61:2e:d7:41:b3:74:45:5a:fa:47:d9:f2:77:35:a4:
f6:b1:59:8f:21:69:50:86:cb:b4:91:5f:4a:ca:f7:
56:b0:a5:4b:a4:5a:47:d3:9c:d9:20:55:10:9f:1c:
46:18:10:75:4f:61:cd:79:40:43:a1:33:92:4d:c1:
1c:7f:d4:99:27:75:63:c9:dd:60:b1:4a:b6:95:82:
fb:49:da:f2:5c:65:50:2a:15:7c:b8:7c:ac:75:f5:
7a:f4:e8:3b:ff:bd:23:3e:40:bb:87:26:e9:5f:8c:
8c:47:41:69:e5:c8:1f:b1:9e:81:c8:ac:91:d4:cb:
be:df:d7:68:64:d9:9b:42:7a:3d:00:a1:bd:04:ef:
f4:f2:89:85:01:e0:57:cf:1f:c4:ff:bb:68:d1:02:
99:69:9b:a7:b7:e1:9a:be:44:08:ce:5e:db:3b:22:
94:0c:f0:81:b3:59:6d:64:f6:62:1a:57:00:71:82:
3e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:04:20:A2:91:E6:7A:3F:6E:28:F4:39:DA:C1:3A:58:32:ED:B3:82
X509v3 Authority Key Identifier:
keyid:4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:fa:db:66:cc:98:85:d5:7a:f1:d7:f3:84:11:b5:56:63:5e:
2e:a8:ed:ba:1c:fe:37:15:14:02:3a:c8:44:fb:87:a0:5b:ce:
73:50:e5:a9:cf:38:16:29:ac:4c:f5:c1:0c:9c:0e:49:cf:9e:
d1:48:5f:43:2f:b1:95:60:3b:88:a0:a8:c2:8f:06:bf:1c:45:
cb:7a:bb:25:8f:3b:81:07:68:b3:71:db:45:77:5b:9f:f6:63:
f4:69:c9:94:55:1a:ed:19:2b:ee:f1:ab:3d:34:e2:cf:79:20:
59:74:b4:30:f3:40:51:04:c4:0e:38:0a:08:8e:32:c4:03:68:
c8:16:29:a5:28:4c:1a:18:1a:0c:af:5d:fd:f8:3d:bb:b5:6f:
3b:b8:17:5a:03:3b:ba:b7:a2:67:9e:ee:3e:21:84:bc:15:6f:
fe:bd:90:37:c9:73:3a:a7:91:c7:bc:f5:30:69:7c:4f:90:2c:
2d:17:70:32:81:70:6f:e0:d7:c1:c8:1f:0b:55:15:57:21:f9:
68:2b:8a:aa:37:d1:f1:f6:96:b5:65:3a:ac:2b:ee:8e:26:9b:
76:1c:54:bf:10:15:9d:13:bb:5d:98:9c:d5:01:10:f7:81:65:
ea:e5:29:66:80:74:0f:95:40:e1:0f:d1:34:30:26:8d:75:55:
4d:3d:22:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:32:51 2026 by rpki-client