Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
File: spuNaKggdWqqP4l5UdWv1n_bPbs.mft (raw, json)
Hash identifier: 3iD5JEc02EwSMXc7a6LvauSQhoRDDdAF6k6YFvh5lj8=
Subject key identifier: EA:1B:D1:75:08:7B:3E:B1:74:39:16:A1:4B:91:07:95:DA:54:DF:74
Authority key identifier: B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB
Certificate issuer: /CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb
Certificate serial: 019CAB6BE48FC6C299B9ED4A5D973EF25DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 22:01:40 +0000
Manifest this update: Sun 01 Mar 2026 22:01:40 +0000
Manifest next update: Mon 02 Mar 2026 22:01:40 +0000
Files and hashes: 1: spuNaKggdWqqP4l5UdWv1n_bPbs.crl (hash: 07gyOere3D/zJuCraXi0U5d5Lu5pMcaN6vn75tEnWr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:e4:8f:c6:c2:99:b9:ed:4a:5d:97:3e:f2:5d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb
Validity
Not Before: Mar 1 22:01:40 2026 GMT
Not After : Mar 2 22:01:40 2026 GMT
Subject: CN=ea1bd175087b3eb1743916a14b910795da54df74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8e:03:08:27:9b:fa:6d:2e:22:8b:2d:da:42:
ba:5a:60:8a:18:40:0c:66:89:11:8d:3f:f1:8c:ce:
f0:ec:68:61:b8:10:8c:09:38:bd:72:af:a3:43:d9:
77:d2:b8:7e:3b:5e:58:73:ec:12:1c:b0:5f:cd:f0:
39:67:c7:d3:44:db:07:12:a2:2e:7f:90:c2:02:45:
cc:27:a1:b4:4c:d6:3d:04:cb:4c:cb:2e:3d:c4:c6:
c2:f4:ab:52:30:bc:d8:df:f1:07:0c:d9:fd:da:73:
90:c4:fa:a6:20:68:a7:bd:26:8d:da:cf:91:d5:47:
e4:3e:62:e4:95:78:8a:67:b5:16:db:b6:71:39:eb:
08:5d:4f:8f:4d:8f:62:d7:c5:d0:4d:04:4b:e5:38:
25:61:ca:ef:4b:84:7d:23:aa:56:fd:51:38:04:ac:
ef:16:d0:8d:e5:56:12:56:fd:24:74:69:3a:d5:0e:
41:8b:a8:8e:8e:92:e5:ad:79:dc:c0:85:14:e9:10:
bf:c3:0c:b6:fa:31:1f:79:df:c4:ff:dd:75:68:be:
e0:36:42:61:b8:6c:e3:e2:a3:de:e2:ae:3e:69:aa:
c5:f8:a0:bd:8d:6a:87:cd:8f:a7:aa:24:19:9e:2a:
15:96:68:69:2e:65:50:ba:a3:7c:cb:7a:7b:9a:42:
bc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1B:D1:75:08:7B:3E:B1:74:39:16:A1:4B:91:07:95:DA:54:DF:74
X509v3 Authority Key Identifier:
keyid:B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:56:e1:d8:91:0d:aa:16:fb:90:80:aa:9c:47:22:4e:07:8e:
8a:9b:26:5d:35:f0:69:2a:5c:45:1d:e6:ee:32:64:70:ef:bc:
10:e1:26:a8:0b:80:4c:0b:49:da:c5:97:ab:78:60:90:6d:ce:
6a:74:51:46:ba:e4:3d:90:00:dd:4d:7d:59:f3:c9:7f:95:a0:
03:d3:d3:18:2b:71:6a:a3:18:a5:cd:1f:8d:20:58:6d:71:3b:
9b:fa:b8:a0:be:18:97:5d:f4:34:67:50:6b:bd:4e:38:38:d1:
0d:1e:13:7e:62:63:93:51:80:5d:d2:fe:79:99:67:ff:35:6d:
46:25:61:07:7a:0c:73:c6:70:d1:48:a2:80:76:d4:95:4c:95:
52:07:83:c8:cc:de:97:14:ca:7b:55:21:d6:52:d3:fd:a4:4c:
59:6a:0d:4f:c6:a4:9a:6a:01:c2:fe:51:7a:6a:00:a0:93:61:
c6:ef:d6:d6:06:e1:fe:5e:c2:d7:6e:bd:11:d8:f2:a3:46:b9:
93:a0:d9:b4:13:3c:a4:3d:ed:c7:a0:0f:89:59:38:c4:d7:a0:
e3:eb:6a:01:95:0b:e9:29:3d:40:76:75:65:e6:c0:6b:18:b2:
81:56:c8:4a:9f:90:34:7c:d5:6e:02:15:e0:a9:11:b1:40:f8:
a5:e4:cd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:16:11 2026 by rpki-client