Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
File: spuNaKggdWqqP4l5UdWv1n_bPbs.mft (raw, json)
Hash identifier: AtzXBWug1aaSEFwnbnIewvRr+va1aT7yWD9LhFNB0nw=
Subject key identifier: 4C:4E:E8:4A:60:2D:64:19:36:6D:E9:56:C3:94:83:49:75:1F:1C:0E
Authority key identifier: B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB
Certificate issuer: /CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb
Certificate serial: 019D9AE2D78B79C9AA4765136B2E63F36EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 10:00:50 +0000
Manifest this update: Fri 17 Apr 2026 10:00:50 +0000
Manifest next update: Sat 18 Apr 2026 10:00:50 +0000
Files and hashes: 1: spuNaKggdWqqP4l5UdWv1n_bPbs.crl (hash: hxoB61HR0JJCVUFpHjjXTW+pBjwoAgZayVkGSGiNw1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:d7:8b:79:c9:aa:47:65:13:6b:2e:63:f3:6e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb
Validity
Not Before: Apr 17 10:00:50 2026 GMT
Not After : Apr 18 10:00:50 2026 GMT
Subject: CN=4c4ee84a602d6419366de956c3948349751f1c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:e8:ee:33:50:b7:ec:c7:24:b8:37:0a:db:
89:1f:5d:3f:b6:5a:78:06:4e:84:43:08:67:fc:ac:
36:4b:08:31:64:c0:2a:bd:7f:22:d0:e8:89:79:dc:
a6:9e:f6:9d:8c:6d:d0:ab:84:e3:be:ce:7d:bd:6d:
72:54:8b:3b:81:16:91:e0:f2:15:af:68:3c:97:f9:
e9:d0:ec:69:3e:6c:28:c1:cf:45:88:ec:bb:d2:69:
95:11:fe:43:ed:a7:5c:41:21:f4:ca:7d:22:38:2f:
ac:24:9a:c7:b1:bb:b7:58:99:c2:89:f4:bd:4e:15:
f8:9f:6b:f6:cf:8c:67:55:42:10:e4:ae:26:dd:24:
87:db:ba:53:18:2b:5f:2f:12:da:78:47:ac:e9:7b:
45:d8:8b:62:c7:59:fe:89:3a:50:7c:c5:4b:97:18:
1d:13:f3:52:9b:f3:41:e5:48:e1:7e:ce:4e:9c:67:
b1:fd:1e:6d:2f:cd:55:06:de:33:2f:9f:59:09:07:
4f:6d:0c:c0:b7:c6:e3:20:c6:33:62:92:ed:e0:d1:
23:62:09:c5:8a:f5:cf:58:e2:68:88:c7:b0:bf:ee:
42:f8:10:94:c2:97:ee:1f:f6:4e:a2:70:ad:18:02:
e4:35:62:4d:86:f8:fb:6e:ce:29:ea:e5:f0:99:ea:
c6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4E:E8:4A:60:2D:64:19:36:6D:E9:56:C3:94:83:49:75:1F:1C:0E
X509v3 Authority Key Identifier:
keyid:B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1c:22:01:30:cc:31:71:dd:51:8d:66:d7:7a:5f:2a:f0:a4:
1d:79:cb:fd:af:86:2f:ce:35:67:5f:85:9c:9c:5d:fe:db:8a:
85:96:ab:d2:ac:87:03:ad:8a:64:70:4d:54:19:94:e6:5b:fe:
35:39:57:00:db:f7:ac:3e:9e:27:3b:37:2d:8d:92:6d:ae:b8:
bd:ae:68:da:5b:c4:ba:82:4f:1f:4e:04:7f:37:b0:b0:52:c7:
cc:aa:cf:97:5d:b4:16:a4:e9:d0:02:a4:d3:09:4c:1c:6a:a8:
98:62:bc:08:43:11:2a:c3:60:7e:e7:55:22:53:d8:b4:03:9b:
48:be:fb:b7:f0:d7:59:34:ce:50:76:71:80:de:87:96:0e:3c:
e2:bb:6e:d9:eb:fd:5f:35:e8:18:f6:fe:2a:11:78:ae:de:4b:
ea:4e:56:51:55:3e:8d:ab:98:c2:f0:bb:60:cf:e6:4f:8b:4b:
cc:a2:35:a7:92:43:da:a1:52:7a:a1:b2:64:e2:e9:09:04:f7:
41:04:59:95:52:01:4b:d7:0e:ed:1d:3f:8d:b3:ac:a8:c7:b6:
63:b6:88:43:e3:96:89:5e:35:d2:b5:95:23:d7:94:e5:ec:9f:
f0:1e:53:8c:66:0b:00:f1:d4:c7:40:0f:e4:8b:82:b2:a1:85:
c5:e6:b3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:41:04 2026 by rpki-client