Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
File: sPoMerwQeWkV4zW6GXgORz4CeWk.mft (raw, json)
Hash identifier: MEWEmbq073Cjp9/8FqF/j3phqahoHW06P3K8EsjzOB8=
Subject key identifier: C0:12:97:EB:1B:8A:EE:28:C6:22:2A:1A:7C:F1:A7:C0:46:A7:AD:B0
Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
Certificate issuer: /CN=b0fa0c7abc10796915e335ba19780e473e027969
Certificate serial: 019CAC0FFEFB14D0F1F7EEFA60982CBBAC6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
Manifest number: 1339
Signing time: Mon 02 Mar 2026 01:00:55 +0000
Manifest this update: Mon 02 Mar 2026 01:00:55 +0000
Manifest next update: Tue 03 Mar 2026 01:00:55 +0000
Files and hashes: 1: LefKdaCkJCuLWYomPbn7aYaCwt8.roa (hash: dTxOv7XhsigiPPaBEnDTEGV1JBMdxI+S2HXrs+TPL+s=)
2: sPoMerwQeWkV4zW6GXgORz4CeWk.crl (hash: IrxpR6StZpFwqmlNoOXgUmTiEy+3+Rbe1GthDjKmVfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:fe:fb:14:d0:f1:f7:ee:fa:60:98:2c:bb:ac:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969
Validity
Not Before: Mar 2 01:00:55 2026 GMT
Not After : Mar 3 01:00:55 2026 GMT
Subject: CN=c01297eb1b8aee28c6222a1a7cf1a7c046a7adb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:41:a8:fd:02:58:c9:60:3e:25:69:76:16:
f2:7b:6b:50:db:76:8d:ac:0d:48:00:df:45:77:31:
1b:df:7a:45:59:71:40:48:dd:78:bf:7b:23:60:ce:
0c:3b:3e:f2:96:2e:19:95:1b:57:48:f9:fa:cc:96:
83:72:eb:0a:26:1d:47:9c:7f:f2:f2:8f:60:85:d0:
07:47:64:7e:38:ef:20:9d:94:f5:c1:39:57:f7:8d:
08:8e:97:0f:59:8e:04:c6:0d:16:17:04:59:39:81:
4f:1a:c8:76:32:54:c7:9b:ce:36:da:42:51:77:de:
7f:49:f4:27:e3:60:02:9d:f6:3f:af:b3:e1:8c:7f:
aa:22:be:28:86:5b:f9:53:10:bc:0b:96:78:85:c0:
05:50:b4:6b:23:f7:b5:e1:64:6b:51:63:a4:40:0a:
05:76:c5:f4:12:b4:7e:76:32:57:08:75:25:3b:59:
a2:d4:9e:9a:a5:e0:a6:c7:cb:1f:6e:97:6f:ee:fc:
87:cf:71:fe:a2:02:c3:ee:84:c0:b3:bc:58:a1:02:
f8:80:a5:53:dd:64:08:44:f3:b1:00:63:30:cb:ed:
19:d6:5e:77:ec:89:55:47:8d:3d:89:04:c2:a0:6b:
1d:e0:93:d0:a0:f5:0d:67:7b:d5:ad:45:25:1f:ee:
af:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:12:97:EB:1B:8A:EE:28:C6:22:2A:1A:7C:F1:A7:C0:46:A7:AD:B0
X509v3 Authority Key Identifier:
keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:33:2f:72:24:eb:f3:0b:3b:8b:e2:8c:ca:de:c9:1d:7c:e3:
69:8d:76:6b:92:91:07:a9:71:fd:f9:2b:8b:d3:2e:c1:96:24:
e6:56:6e:dc:af:85:ab:49:bf:4c:23:8d:11:7c:3d:2f:cf:da:
d3:0b:c1:59:b2:22:7d:1e:41:6f:7b:2f:88:9c:86:8b:e8:3f:
43:d6:be:9a:4a:67:70:4a:f0:e6:f3:ea:5e:62:26:55:06:ec:
44:a8:ac:0e:6b:dd:41:18:82:d6:39:5d:66:41:ba:53:d5:79:
c5:8d:45:fc:40:a3:64:3d:ba:1e:8d:24:92:54:6d:7a:f0:6e:
7e:f4:96:f0:11:1b:15:49:da:77:18:9f:ee:15:52:dc:24:4b:
80:c6:0c:08:5e:25:0e:68:d7:58:5b:07:07:c2:21:2a:bc:00:
2e:12:49:66:3a:c5:95:40:57:23:67:06:35:f5:bd:fb:9c:c3:
80:e9:cc:30:e6:84:9e:94:5f:9f:d1:32:10:17:c8:d7:13:c9:
01:0b:c2:f2:64:a2:d4:26:a8:de:ce:36:af:6b:bd:4b:52:c0:
a0:cb:75:a6:a4:f7:70:f1:4e:76:56:5a:b4:9a:80:3d:cd:06:
6b:d1:da:71:0f:af:62:1c:f5:e9:d4:97:93:51:f1:6f:e1:f3:
92:13:cb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:59 2026 by rpki-client