Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
File: sPoMerwQeWkV4zW6GXgORz4CeWk.mft (raw, json)
Hash identifier: FDcj1mjxWiGIOgSHlfgVj2pxSxrbc8wqYbYUkLeZWNs=
Subject key identifier: D0:72:A0:F6:DE:B7:00:C1:99:2D:03:27:14:C8:44:1A:2C:F4:A2:1F
Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
Certificate issuer: /CN=b0fa0c7abc10796915e335ba19780e473e027969
Certificate serial: 01A0E5880D9F8C43FFC768B20CB6B44CA21C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
Manifest number: 1569
Signing time: Mon 28 Sep 2026 01:01:33 +0000
Manifest this update: Mon 28 Sep 2026 01:01:33 +0000
Manifest next update: Tue 29 Sep 2026 01:01:33 +0000
Files and hashes: 1: LefKdaCkJCuLWYomPbn7aYaCwt8.roa (hash: dTxOv7XhsigiPPaBEnDTEGV1JBMdxI+S2HXrs+TPL+s=)
2: sPoMerwQeWkV4zW6GXgORz4CeWk.crl (hash: mAn1vmBbD/bOJFdRJZlPOVXSyvobrkuVY9UdzP3qxm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:88:0d:9f:8c:43:ff:c7:68:b2:0c:b6:b4:4c:a2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969
Validity
Not Before: Sep 28 01:01:33 2026 GMT
Not After : Sep 29 01:01:33 2026 GMT
Subject: CN=d072a0f6deb700c1992d032714c8441a2cf4a21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:af:70:77:33:26:7a:ad:f8:26:d6:2d:51:
14:69:63:b5:1e:ad:4e:a8:2c:a4:4b:aa:0d:8f:80:
7f:3e:3f:c0:72:1e:a5:16:c1:79:5c:11:44:ac:68:
8b:6c:50:11:34:3d:ef:90:f2:33:56:1f:7f:07:ae:
56:83:99:e4:81:16:c5:ec:50:a2:bf:8b:88:d7:5e:
36:65:d0:c7:6b:65:d0:7f:fb:63:d0:2c:38:16:63:
12:3e:e0:9a:ad:6f:4a:aa:84:f6:89:8c:d7:59:e8:
4c:f2:36:5d:e3:5c:76:0f:f1:5b:67:01:c0:25:17:
e1:46:18:7c:e1:43:01:ee:70:ff:ad:7a:01:c4:23:
ab:ea:d0:39:72:04:e0:2b:7b:42:dd:64:6b:a7:2f:
14:58:67:d6:5c:36:58:0d:d2:6f:82:19:00:79:c7:
91:d3:a9:57:3e:e1:72:a9:ef:c5:64:83:f3:a7:c4:
68:ed:e8:6b:ee:c0:6e:42:3c:d5:06:cc:06:53:51:
0c:ac:bc:ef:eb:6a:a6:1c:67:b7:8a:65:02:cf:ee:
86:bb:bb:2c:60:aa:c4:2f:6a:7d:8d:15:d7:15:b4:
9e:3d:d3:b2:5b:59:8a:24:19:e6:49:7b:d7:b6:bf:
19:91:fe:02:d5:a5:ea:ec:a8:99:34:18:fe:b5:90:
f2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:72:A0:F6:DE:B7:00:C1:99:2D:03:27:14:C8:44:1A:2C:F4:A2:1F
X509v3 Authority Key Identifier:
keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:90:da:c3:7f:e5:69:71:4a:fb:f0:0b:d3:03:28:81:f7:df:
5c:68:3a:b4:96:66:e7:e2:78:e6:01:e6:5e:90:49:93:24:ca:
2d:17:7c:54:bc:d6:7a:a2:30:59:40:54:ce:65:a7:54:2d:70:
10:f0:58:89:d1:81:d9:3d:05:a7:72:de:c7:ee:f4:7e:ee:d2:
58:52:a2:cb:f5:b1:b4:30:ab:16:4e:84:ad:1b:a8:7f:29:a5:
2f:ae:a5:f4:52:25:e3:10:1b:3c:c0:9a:64:6b:e1:e2:56:4b:
9f:61:24:15:69:5a:b6:46:98:82:be:48:60:1f:a4:d3:cc:7c:
21:88:64:e0:c6:de:5c:a4:47:84:e1:0f:ce:a2:6f:89:23:da:
bb:7b:b0:de:3e:45:50:9f:4a:2a:e6:d5:44:bd:d7:10:97:96:
d9:ad:ef:cb:af:38:f2:18:4b:72:29:51:74:5d:5f:44:02:51:
90:71:94:0f:eb:94:68:9b:93:24:6e:ef:45:24:f9:35:c4:b6:
f0:cd:b9:bd:c2:c4:b6:68:69:f0:e9:06:1f:b4:1c:be:31:9c:
6d:fb:2f:7c:bb:1a:b7:73:36:84:7f:a9:57:a8:25:08:20:11:
e3:53:32:6a:48:15:6b:54:c8:6f:43:54:fd:4f:30:88:7f:b2:
e2:c8:16:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDliA2fjEP/x2iyDLa0TKIcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZmEwYzdhYmMxMDc5NjkxNWUzMzViYTE5NzgwZTQ3M2Uw
Mjc5NjkwHhcNMjYwOTI4MDEwMTMzWhcNMjYwOTI5MDEwMTMzWjAzMTEwLwYDVQQD
EyhkMDcyYTBmNmRlYjcwMGMxOTkyZDAzMjcxNGM4NDQxYTJjZjRhMjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVyvcHczJnqt+CbWLVEUaWO1Hq1O
qCykS6oNj4B/Pj/Ach6lFsF5XBFErGiLbFARND3vkPIzVh9/B65Wg5nkgRbF7FCi
v4uI1142ZdDHa2XQf/tj0Cw4FmMSPuCarW9KqoT2iYzXWehM8jZd41x2D/FbZwHA
JRfhRhh84UMB7nD/rXoBxCOr6tA5cgTgK3tC3WRrpy8UWGfWXDZYDdJvghkAeceR
06lXPuFyqe/FZIPzp8Ro7ehr7sBuQjzVBswGU1EMrLzv62qmHGe3imUCz+6Gu7ss
YKrEL2p9jRXXFbSePdOyW1mKJBnmSXvXtr8Zkf4C1aXq7KiZNBj+tZDyVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNByoPbetwDBmS0DJxTIRBos9KIfMB8GA1UdIwQY
MBaAFLD6DHq8EHlpFeM1uhl4Dkc+AnlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1BvTWVyd1FlV2tWNHpXNkdYZ09SejRDZVdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85NzQ3NDktNGQ3ZS00NDUwLTk3OTMt
ZGY4NTRmNDdiYWY0LzEvc1BvTWVyd1FlV2tWNHpXNkdYZ09SejRDZVdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85NzQ3NDktNGQ3ZS00NDUwLTk3OTMtZGY4NTRmNDdiYWY0
LzEvc1BvTWVyd1FlV2tWNHpXNkdYZ09SejRDZVdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn5Daw3/l
aXFK+/AL0wMogfffXGg6tJZm5+J45gHmXpBJkyTKLRd8VLzWeqIwWUBUzmWnVC1w
EPBYidGB2T0Fp3Lex+70fu7SWFKiy/WxtDCrFk6ErRuofymlL66l9FIl4xAbPMCa
ZGvh4lZLn2EkFWlatkaYgr5IYB+k08x8IYhk4MbeXKRHhOEPzqJviSPau3uw3j5F
UJ9KKubVRL3XEJeW2a3vy6848hhLcilRdF1fRAJRkHGUD+uUaJuTJG7vRST5NcS2
8M25vcLEtmhp8OkGH7QcvjGcbfsvfLsat3M2hH+pV6glCCAR41MyakgVa1TIb0NU
/U8wiH+y4sgWwQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 04:05:39 2026 by rpki-client