Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
File: spvHpkk9OBeN1_XpxJDI7zqKWYs.mft (raw, json)
Hash identifier: VFZ2g2r5/9WfYtJPQyYnwiVPot7QSok37nkb8y6DbFQ=
Subject key identifier: 4C:F1:8C:04:02:B8:B7:00:CE:E3:36:4E:F0:CB:FB:A2:F0:3D:05:00
Authority key identifier: B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
Certificate issuer: /CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Certificate serial: 019CACB4A481289FD2608B96BC3865E55F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
Manifest number: 044A
Signing time: Mon 02 Mar 2026 04:00:45 +0000
Manifest this update: Mon 02 Mar 2026 04:00:45 +0000
Manifest next update: Tue 03 Mar 2026 04:00:45 +0000
Files and hashes: 1: spvHpkk9OBeN1_XpxJDI7zqKWYs.crl (hash: 43VII9d+eTifynrS49HdVsUl/YJvI3KDSvDen6imLOY=)
2: yP4RNTLUKk_P7r0qobg3b_Bq0bc.roa (hash: 7RS0tj1L1t6QadBqzoijZL2F1NYP+eQ5vizwcCjgqj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:a4:81:28:9f:d2:60:8b:96:bc:38:65:e5:5f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Validity
Not Before: Mar 2 04:00:45 2026 GMT
Not After : Mar 3 04:00:45 2026 GMT
Subject: CN=4cf18c0402b8b700cee3364ef0cbfba2f03d0500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:1c:6e:b0:91:3f:ad:ad:c7:a4:02:f6:cb:
fb:dd:46:bc:09:0e:6f:56:1d:88:82:a2:b5:92:75:
d2:97:46:bb:cb:1f:ea:ac:d9:31:09:f6:ff:f7:48:
e0:60:18:f4:40:57:48:7e:39:21:5e:11:67:be:8a:
42:b7:ef:08:91:e0:8b:d4:b9:5c:2b:16:e6:5c:7b:
b6:0e:f1:fc:a5:9d:cf:09:32:4b:de:0c:e8:1f:65:
b6:83:35:3b:60:c4:73:51:4a:2b:3f:fc:49:0c:3a:
b5:f1:ed:cc:fe:82:d3:e8:11:e3:f2:05:79:68:61:
df:ef:00:b6:2b:dd:40:da:cf:3f:fa:58:33:58:24:
07:68:8c:1e:c4:e2:98:12:4b:48:9a:f8:ba:a0:9a:
c4:33:a6:6f:06:26:72:ab:74:9a:1a:03:ab:63:a2:
91:e3:30:de:5b:7f:30:e0:db:03:d4:c3:80:a9:3a:
14:1f:c3:66:ba:a9:67:7a:69:2e:c7:85:ac:db:80:
93:e7:45:c8:f7:ab:54:24:51:f0:65:cc:7f:28:e0:
15:43:48:b5:f6:d5:68:85:ea:c5:37:06:6d:ec:aa:
1c:cf:6e:72:89:f2:be:d8:50:9d:34:41:bd:68:b8:
b6:bf:0e:de:50:cb:dc:fd:35:ac:d6:95:d2:b5:79:
ed:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F1:8C:04:02:B8:B7:00:CE:E3:36:4E:F0:CB:FB:A2:F0:3D:05:00
X509v3 Authority Key Identifier:
keyid:B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:76:aa:03:01:8e:14:20:10:f2:b1:b4:94:5e:3d:13:77:79:
f9:16:24:99:f4:fc:ed:ea:c2:89:f8:08:da:86:0b:25:9e:0d:
d9:73:e9:fc:3a:3b:e0:01:91:9d:2b:8c:fc:69:a1:ed:ad:1a:
7f:21:9f:64:c1:a6:43:96:00:e5:36:d5:df:54:fa:39:67:c0:
53:f8:a9:77:06:9e:b5:c1:30:0d:56:2c:04:3e:c4:6f:6b:1a:
3f:24:2b:6e:b5:47:ed:fc:51:21:bd:bd:09:28:eb:0b:60:a2:
36:8d:f0:38:69:61:ef:f1:3c:2a:8c:f0:b3:47:e1:8c:ce:11:
95:38:54:be:a6:3b:b5:68:e2:39:e7:9a:59:21:45:69:12:1a:
0b:1e:00:e8:f6:fb:e2:74:0b:13:fa:af:aa:a1:2b:8b:01:27:
39:72:3a:6b:69:5b:8d:f8:06:df:74:74:e8:31:ef:97:fe:17:
f7:3a:0e:03:9e:7b:7f:b7:a6:49:13:43:4e:50:c9:87:5e:5a:
54:66:6b:ae:4d:3b:d5:4c:6c:01:25:56:d3:fb:1c:73:b6:b1:
6f:07:bc:17:85:3f:58:96:c2:b9:34:74:1e:7f:d4:32:4f:40:
99:e0:da:73:11:e3:a7:e5:96:56:23:4e:23:c4:ab:93:c0:6e:
d3:bf:99:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystKSBKJ/SYIuWvDhl5V8JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyOWJjN2E2NDkzZDM4MTc4ZGQ3ZjVlOWM0OTBjOGVmM2E4
YTU5OGIwHhcNMjYwMzAyMDQwMDQ1WhcNMjYwMzAzMDQwMDQ1WjAzMTEwLwYDVQQD
Eyg0Y2YxOGMwNDAyYjhiNzAwY2VlMzM2NGVmMGNiZmJhMmYwM2QwNTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthgcbrCRP62tx6QC9sv73Ua8CQ5v
Vh2IgqK1knXSl0a7yx/qrNkxCfb/90jgYBj0QFdIfjkhXhFnvopCt+8IkeCL1Llc
KxbmXHu2DvH8pZ3PCTJL3gzoH2W2gzU7YMRzUUorP/xJDDq18e3M/oLT6BHj8gV5
aGHf7wC2K91A2s8/+lgzWCQHaIwexOKYEktImvi6oJrEM6ZvBiZyq3SaGgOrY6KR
4zDeW38w4NsD1MOAqToUH8Nmuqlnemkux4Ws24CT50XI96tUJFHwZcx/KOAVQ0i1
9tVoherFNwZt7Kocz25yifK+2FCdNEG9aLi2vw7eUMvc/TWs1pXStXntLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzxjAQCuLcAzuM2TvDL+6LwPQUAMB8GA1UdIwQY
MBaAFLKbx6ZJPTgXjdf16cSQyO86ilmLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3B2SHBrazlPQmVOMV9YcHhKREk3enFLV1lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84YWY4YWYtNTlhNC00MjBjLTllM2Ut
ZDQ4MmRhOTgwNGQ3LzEvc3B2SHBrazlPQmVOMV9YcHhKREk3enFLV1lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS84YWY4YWYtNTlhNC00MjBjLTllM2UtZDQ4MmRhOTgwNGQ3
LzEvc3B2SHBrazlPQmVOMV9YcHhKREk3enFLV1lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3aqAwGO
FCAQ8rG0lF49E3d5+RYkmfT87erCifgI2oYLJZ4N2XPp/Do74AGRnSuM/Gmh7a0a
fyGfZMGmQ5YA5TbV31T6OWfAU/ipdwaetcEwDVYsBD7Eb2saPyQrbrVH7fxRIb29
CSjrC2CiNo3wOGlh7/E8Kozws0fhjM4RlThUvqY7tWjiOeeaWSFFaRIaCx4A6Pb7
4nQLE/qvqqEriwEnOXI6a2lbjfgG33R06DHvl/4X9zoOA557f7emSRNDTlDJh15a
VGZrrk071UxsASVW0/scc7axbwe8F4U/WJbCuTR0Hn/UMk9AmeDacxHjp+WWViNO
I8Srk8Bu07+ZVA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:20 2026 by rpki-client