Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
File: sPoMerwQeWkV4zW6GXgORz4CeWk.mft (raw, json)
Hash identifier: P9DGBxLIiY3pjrXWdmJZbkPl8MQWSONuWFS+yVnYgEc=
Subject key identifier: 6D:F5:FB:0C:87:C4:94:99:3D:43:0D:79:C4:13:95:44:1A:2A:AF:56
Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
Certificate issuer: /CN=b0fa0c7abc10796915e335ba19780e473e027969
Certificate serial: 019D9B881C93E51215292C1E2FAFE4991496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
Manifest number: 13B5
Signing time: Fri 17 Apr 2026 13:01:21 +0000
Manifest this update: Fri 17 Apr 2026 13:01:21 +0000
Manifest next update: Sat 18 Apr 2026 13:01:21 +0000
Files and hashes: 1: LefKdaCkJCuLWYomPbn7aYaCwt8.roa (hash: dTxOv7XhsigiPPaBEnDTEGV1JBMdxI+S2HXrs+TPL+s=)
2: sPoMerwQeWkV4zW6GXgORz4CeWk.crl (hash: 8I58xU/RJnwQWk9nfVBoidNqmARR7HynrWDzDg3fAkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:88:1c:93:e5:12:15:29:2c:1e:2f:af:e4:99:14:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969
Validity
Not Before: Apr 17 13:01:21 2026 GMT
Not After : Apr 18 13:01:21 2026 GMT
Subject: CN=6df5fb0c87c494993d430d79c41395441a2aaf56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:57:a2:43:00:55:20:3f:db:c2:09:31:3f:68:
83:aa:90:3f:35:d2:45:d9:0f:39:5e:75:ac:8c:8a:
67:a3:6e:9e:25:4d:88:88:bf:b5:e9:93:cf:d0:6f:
39:f0:56:1f:45:3d:8e:bc:8b:75:b5:17:d7:6e:ef:
38:ae:2d:9c:a8:cc:68:1f:12:bd:f3:00:d7:f9:ab:
c2:1d:13:27:88:f3:c0:57:d2:77:95:cf:c2:bd:68:
92:22:74:0d:f1:03:81:14:fc:8c:8b:e8:09:df:10:
dd:f7:d0:9c:3b:b8:5f:cc:0c:b3:dc:1d:71:d9:b0:
dd:8e:37:60:54:3a:d9:22:f6:d4:bc:4a:f9:9c:a7:
a4:cf:fd:fe:d7:9d:d5:f9:a9:d3:79:4c:65:3f:1e:
c9:05:64:67:4b:d9:1b:40:ed:47:22:89:99:45:76:
f2:1c:d9:99:ce:6f:34:47:de:78:c6:5b:fe:d5:26:
e8:5a:25:77:e2:c4:4d:1b:27:ff:76:c2:1a:c6:25:
ff:3a:66:ae:da:c4:ab:07:7f:ae:36:42:f1:1e:46:
00:e3:31:bf:d2:12:24:60:25:8e:8c:94:7b:80:23:
cd:7e:23:39:7d:22:53:53:b3:ee:c7:0c:e9:04:60:
d7:5f:21:72:5f:7d:7a:59:87:9d:2a:28:e5:ce:92:
5d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F5:FB:0C:87:C4:94:99:3D:43:0D:79:C4:13:95:44:1A:2A:AF:56
X509v3 Authority Key Identifier:
keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:0c:70:2f:bf:c4:0e:e3:d6:34:7c:e8:61:2b:fa:7a:f5:82:
4e:b6:32:53:6c:a4:a9:02:2b:ce:77:26:7e:07:b2:64:93:90:
a1:b3:4e:91:91:77:cf:c1:11:e5:3c:68:e0:fb:08:a9:72:bd:
8f:af:36:07:f8:4f:3a:58:be:63:29:7a:7a:c4:02:b3:e9:f0:
cc:d6:0c:04:c2:cb:82:41:ff:ca:d3:73:f3:55:e2:7b:42:d8:
ba:ab:69:72:2e:f4:f4:0b:f6:56:fc:ed:e4:cf:ab:31:74:b8:
73:a3:0b:1f:65:9a:c2:a9:b3:c2:71:df:8c:33:12:bf:50:2c:
71:f9:dc:f0:3e:71:28:63:2f:5f:63:12:1a:2a:4a:fa:04:ab:
46:4b:79:95:aa:4d:31:ad:68:da:66:41:f3:89:a3:0c:ea:30:
d3:a5:ed:d5:ea:3f:b9:e2:8b:22:ba:ae:1d:5a:45:9a:2e:cd:
17:2e:94:7c:05:78:d0:61:38:91:76:b9:b7:f7:37:ed:4c:8d:
c5:42:2e:b7:83:12:9d:0d:9d:87:ce:96:78:89:b9:e3:21:08:
a6:f4:c3:82:59:33:50:c0:8a:ba:0e:7b:0a:01:2a:5c:56:3c:
e9:7a:26:f2:b7:37:69:3f:0e:db:2f:ee:f6:89:70:9a:37:89:
f9:bd:87:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:31:33 2026 by rpki-client