Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
File: Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft (raw, json)
Hash identifier: CP53DRiY7KOoCqB+EBoPjOahDOYyoSGTZPp8T+GnV1c=
Subject key identifier: AA:2B:EA:F1:87:F8:61:D5:EB:FF:ED:F1:2B:4D:66:80:95:09:B1:9B
Authority key identifier: 4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
Certificate issuer: /CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Certificate serial: 01A0C890070668DF21B83114F513A19DCEBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
Manifest number: 0E75
Signing time: Tue 22 Sep 2026 10:01:17 +0000
Manifest this update: Tue 22 Sep 2026 10:01:17 +0000
Manifest next update: Wed 23 Sep 2026 10:01:17 +0000
Files and hashes: 1: Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl (hash: MvW2j3OT0Qm4Xbv2PA5UCBMbvUDblEhgat23egXhTas=)
2: jaXIMGohDtqmN9HK0RSue183PUM.roa (hash: /dhEKzEAshSscrjSIfqANdXDpyu38QD3HTeuahz7d5g=)
3: sl2grtF62EGJRr--AtlkQoKUOgo.roa (hash: 8IWHvB3aWoMq1k/0X1fLbANShkPS5Vl92y6S/fnPKKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:90:07:06:68:df:21:b8:31:14:f5:13:a1:9d:ce:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Validity
Not Before: Sep 22 10:01:17 2026 GMT
Not After : Sep 23 10:01:17 2026 GMT
Subject: CN=aa2beaf187f861d5ebffedf12b4d66809509b19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3f:e5:a5:5d:cd:57:41:ee:71:a5:9b:b8:2f:
61:80:af:14:09:4d:49:84:7c:99:2c:ae:f2:a0:13:
0e:3a:a8:3f:ce:2e:db:56:06:ff:12:b7:a7:28:2a:
bc:2a:c6:33:ff:3e:52:c5:d1:ea:0d:57:d4:d1:a7:
11:49:31:0e:43:92:60:22:64:9a:63:8c:b3:cf:df:
67:c9:65:a4:c1:74:67:a2:95:86:a1:62:75:87:2c:
f1:05:ed:30:0b:a2:9f:ea:c5:ad:d5:02:0f:20:77:
f0:dc:ad:7b:dd:1c:b0:e2:85:88:9c:ed:f4:ae:98:
41:80:22:a3:66:28:31:7c:30:26:5c:8b:67:6b:4d:
1a:38:98:09:e2:57:03:db:43:fe:5c:f9:57:49:38:
64:af:79:67:e1:49:df:98:a7:8a:66:ba:90:49:4e:
17:f8:c7:d9:81:91:4a:89:1a:d2:33:4d:29:1a:40:
23:35:76:e3:3b:de:26:6a:6b:6b:c6:8f:99:9c:c8:
43:c1:42:48:a5:5a:fb:75:44:90:7c:7c:fb:99:71:
39:2e:d3:34:b6:c7:25:0f:3b:79:d8:90:e0:50:19:
ae:a8:54:2e:1f:0d:56:5a:d4:7b:fe:02:5d:7d:2b:
b7:eb:5c:83:8d:db:01:a7:fc:87:0a:c9:6d:ae:6e:
7f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2B:EA:F1:87:F8:61:D5:EB:FF:ED:F1:2B:4D:66:80:95:09:B1:9B
X509v3 Authority Key Identifier:
keyid:4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:91:15:96:1e:f7:fe:e7:0b:de:4f:6a:64:09:fd:f8:3e:89:
d3:3a:84:df:a8:31:62:1f:db:f7:3b:82:fe:02:b8:4e:ad:1f:
dd:8a:90:75:f0:81:b5:d6:55:8b:3c:5d:70:66:01:17:55:5e:
76:51:c8:5b:70:ed:33:f1:18:dc:11:8a:a8:dd:2f:22:a4:cf:
36:c5:a5:be:ef:cf:a4:d5:2e:f5:22:32:25:fe:89:80:d2:e2:
56:f0:38:17:54:d4:8e:c6:9e:21:cd:d7:f5:a6:cb:a2:52:c1:
87:b0:8a:b4:c0:00:cd:8d:55:b7:8d:ef:4c:70:73:0a:4c:70:
02:2f:0d:90:dd:13:cb:39:db:ae:be:c1:fa:cb:7a:5d:da:18:
05:24:e6:70:cf:6f:7c:5f:41:bd:6f:72:63:5f:83:b9:95:bb:
93:38:40:f1:6f:c1:2f:f5:7d:90:99:18:dc:8c:b7:ab:6b:ce:
ba:83:65:49:3f:13:f9:6e:06:e2:60:0c:64:68:c8:d8:f6:cb:
dc:94:00:e2:5d:fa:09:34:0c:6b:b0:fd:db:11:d8:6c:bf:8c:
26:2f:8a:25:f0:8b:36:88:91:30:e5:2f:c9:5e:73:cf:1f:ac:
d5:db:ca:e2:7d:1e:8b:03:61:4f:1f:f7:ac:c7:06:3b:40:e9:
4e:61:00:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIkAcGaN8huDEU9ROhnc6/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOTdiYzUwNGYzMDc1ZmI0ZjM5MjM2NDA4YzFjMmQ1NDdi
NDRjMjYwHhcNMjYwOTIyMTAwMTE3WhcNMjYwOTIzMTAwMTE3WjAzMTEwLwYDVQQD
EyhhYTJiZWFmMTg3Zjg2MWQ1ZWJmZmVkZjEyYjRkNjY4MDk1MDliMTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD/lpV3NV0HucaWbuC9hgK8UCU1J
hHyZLK7yoBMOOqg/zi7bVgb/ErenKCq8KsYz/z5SxdHqDVfU0acRSTEOQ5JgImSa
Y4yzz99nyWWkwXRnopWGoWJ1hyzxBe0wC6Kf6sWt1QIPIHfw3K173Ryw4oWInO30
rphBgCKjZigxfDAmXItna00aOJgJ4lcD20P+XPlXSThkr3ln4UnfmKeKZrqQSU4X
+MfZgZFKiRrSM00pGkAjNXbjO94mamtrxo+ZnMhDwUJIpVr7dUSQfHz7mXE5LtM0
tsclDzt52JDgUBmuqFQuHw1WWtR7/gJdfSu361yDjdsBp/yHCsltrm5/KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKor6vGH+GHV6//t8StNZoCVCbGbMB8GA1UdIwQY
MBaAFEqXvFBPMHX7TzkjZAjBwtVHtEwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kNDUwMWItMThlYS00MjgwLTg1YTQt
OTMyOWY5MTc5ZmRhLzEvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9kNDUwMWItMThlYS00MjgwLTg1YTQtOTMyOWY5MTc5ZmRh
LzEvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpEVlh73
/ucL3k9qZAn9+D6J0zqE36gxYh/b9zuC/gK4Tq0f3YqQdfCBtdZVizxdcGYBF1Ve
dlHIW3DtM/EY3BGKqN0vIqTPNsWlvu/PpNUu9SIyJf6JgNLiVvA4F1TUjsaeIc3X
9abLolLBh7CKtMAAzY1Vt43vTHBzCkxwAi8NkN0Tyznbrr7B+st6XdoYBSTmcM9v
fF9BvW9yY1+DuZW7kzhA8W/BL/V9kJkY3Iy3q2vOuoNlST8T+W4G4mAMZGjI2PbL
3JQA4l36CTQMa7D92xHYbL+MJi+KJfCLNoiRMOUvyV5zzx+s1dvK4n0eiwNhTx/3
rMcGO0DpTmEAtQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:40:45 2026 by rpki-client