Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
File: sPoMerwQeWkV4zW6GXgORz4CeWk.mft (raw, json)
Hash identifier: f6tWlq2RoazDfxgsfhP8dfBJPxvyFJOlV1+mDgxil54=
Subject key identifier: C2:D5:F3:7B:FB:CB:D3:3F:D9:DB:14:36:E4:5C:35:74:1D:EB:D4:84
Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
Certificate issuer: /CN=b0fa0c7abc10796915e335ba19780e473e027969
Certificate serial: 01A0E399AFD39C4FF427771132E4C0833915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
Manifest number: 1568
Signing time: Sun 27 Sep 2026 16:01:34 +0000
Manifest this update: Sun 27 Sep 2026 16:01:34 +0000
Manifest next update: Mon 28 Sep 2026 16:01:34 +0000
Files and hashes: 1: LefKdaCkJCuLWYomPbn7aYaCwt8.roa (hash: dTxOv7XhsigiPPaBEnDTEGV1JBMdxI+S2HXrs+TPL+s=)
2: sPoMerwQeWkV4zW6GXgORz4CeWk.crl (hash: KiK7i0YmO4nuLVpHF1osuhnuAaKrZdVYe8SIBsYdTkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:af:d3:9c:4f:f4:27:77:11:32:e4:c0:83:39:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969
Validity
Not Before: Sep 27 16:01:34 2026 GMT
Not After : Sep 28 16:01:34 2026 GMT
Subject: CN=c2d5f37bfbcbd33fd9db1436e45c35741debd484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:26:32:23:c4:8a:6c:cb:46:a6:02:db:99:8f:
f1:9b:9b:95:39:5d:83:31:ed:92:66:95:80:94:01:
9e:be:c1:ad:c2:82:10:a1:b0:00:b7:9f:c8:4d:14:
e5:fd:4e:b8:6d:12:46:93:e9:7d:32:48:9b:c9:c9:
6d:2e:6b:14:65:36:0e:5c:be:81:71:e6:30:4e:54:
b3:0e:3e:fb:23:d9:6b:43:ae:89:9a:78:b6:88:4f:
7e:23:5b:d7:28:9f:a0:eb:e4:46:3b:4b:fb:7c:16:
c7:38:66:90:ff:df:a9:ed:51:c4:e0:9e:c0:93:34:
9f:48:33:05:06:09:2e:dd:99:97:af:24:20:0f:85:
a4:af:34:39:1d:0e:f3:2e:f4:40:f3:a5:7f:2b:05:
14:85:08:0f:8e:30:20:09:8f:2a:4d:d1:fc:87:89:
cc:7a:ef:12:d2:4c:8f:0f:c1:d6:3f:fa:2a:ba:2c:
15:84:1d:d5:c0:97:c4:5f:ef:ca:95:9f:3d:ea:78:
4e:b6:a8:8e:d2:26:7a:4a:91:2a:40:ee:23:be:a9:
b3:29:09:de:51:f0:17:d3:2d:9d:83:f1:95:0f:74:
03:54:f7:c0:67:ef:c0:0e:68:19:da:32:2b:fe:b8:
05:8e:e1:83:15:6b:9e:f5:0b:c1:54:e6:e1:ee:e4:
a5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D5:F3:7B:FB:CB:D3:3F:D9:DB:14:36:E4:5C:35:74:1D:EB:D4:84
X509v3 Authority Key Identifier:
keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:68:90:eb:67:13:b0:ad:2d:e0:bb:b6:30:2a:a8:67:1c:66:
00:ee:b1:43:27:57:1b:d6:d4:90:d1:0c:94:f7:8f:53:40:46:
53:d1:33:1f:c2:ad:aa:0f:c3:39:2e:9a:1e:3b:bd:0c:13:82:
5e:ae:c5:75:17:b9:36:fa:93:e8:fd:7d:ec:04:ed:46:e7:b1:
8b:5a:b1:33:e4:9a:db:57:ed:96:03:f5:fe:e2:14:ca:15:34:
9d:79:05:8e:e8:8a:a0:0c:b8:bb:bd:59:8f:3e:43:9c:3d:99:
d8:0f:3f:07:17:c8:78:0e:04:92:96:de:2b:ed:24:2e:77:d3:
53:66:39:16:41:91:5d:aa:84:ba:90:07:aa:bc:4c:ef:de:05:
6d:0d:c9:91:1a:47:b0:e5:36:56:6c:88:9f:5b:cd:bf:9d:67:
23:d8:4c:ff:2f:18:78:1e:43:7a:36:b6:d7:8b:04:af:34:14:
44:96:48:8f:ef:5d:7b:e5:8c:28:de:ab:44:00:28:72:9e:2a:
e6:b1:e6:12:14:c3:44:18:6c:8e:14:01:77:e4:a7:5d:14:fe:
01:70:e5:56:2f:fc:c2:22:0f:e5:ac:1b:10:ed:3a:bd:b2:e0:
22:51:9b:8f:7c:97:2f:1f:8a:b9:08:3a:bb:3a:78:27:a9:a3:
71:cd:23:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:50:33 2026 by rpki-client