Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
File: sUqqmwhIZPRLrhi6B2smBndU-2I.mft (raw, json)
Hash identifier: pO88WZVrgObobl5kiiakAPux8jrF9DDLPjJ8l5tb4bs=
Subject key identifier: 45:A4:F2:D9:1B:CD:C9:D5:6B:79:E3:A8:74:18:78:1F:10:6E:3C:DA
Authority key identifier: B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
Certificate issuer: /CN=b14aaa9b084864f44bae18ba076b26067754fb62
Certificate serial: 019EBFFF0FF6F40FB718E3CD255685FD9ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 08:00:24 +0000
Manifest this update: Sat 13 Jun 2026 08:00:24 +0000
Manifest next update: Sun 14 Jun 2026 08:00:24 +0000
Files and hashes: 1: ICjM29Ho5ilzx2CC9UyPCpBHk08.roa (hash: iDThEuTUmWf3SPJoG/mF6aomqM2YAji1cqVmI0Zj0pI=)
2: d6GlurZjrrwt2Mzk129b7bT_DCU.roa (hash: 2ZHYIA1Xr0+oHcfnaFr8fQOS6BVciW3KH+j7gwm8oEg=)
3: sUqqmwhIZPRLrhi6B2smBndU-2I.crl (hash: TQQMcsvHkCtUYtmJtrpDLQfXTpf3a7LWXKLxyxDLOt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:0f:f6:f4:0f:b7:18:e3:cd:25:56:85:fd:9a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aaa9b084864f44bae18ba076b26067754fb62
Validity
Not Before: Jun 13 08:00:24 2026 GMT
Not After : Jun 14 08:00:24 2026 GMT
Subject: CN=45a4f2d91bcdc9d56b79e3a87418781f106e3cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:22:10:dd:e2:b9:82:c6:9d:c3:63:12:a1:7d:
bd:7a:f0:29:b3:58:0b:81:ba:80:15:b4:81:53:0b:
07:ba:57:0b:0d:21:e2:11:7f:e4:60:8a:23:f3:dc:
41:f2:2c:b7:b6:8c:e0:0a:df:c8:6a:88:ca:99:37:
61:2c:40:02:53:45:2e:f1:f4:07:fa:df:54:28:ea:
87:e5:a2:65:3c:84:34:fd:40:71:03:2e:08:cb:31:
b4:3a:8c:4b:ff:d9:9b:20:f4:9f:61:90:4d:1d:e5:
88:7d:f9:90:c2:7d:7d:0e:0f:76:c7:0a:77:d0:3e:
cb:c1:79:6a:eb:69:74:20:89:9c:00:fd:b0:e5:f8:
84:52:48:35:38:ad:d2:f5:a9:a7:65:a1:be:9e:ad:
2b:5f:65:41:91:01:31:2b:98:5c:cd:24:c0:79:78:
a6:00:c9:3b:07:c5:60:06:3a:54:9e:be:c2:9a:26:
67:ca:00:5c:1d:af:b8:c2:3f:73:f3:54:d6:3c:97:
79:e5:6d:4a:59:12:75:a7:03:b1:fa:e0:17:75:6f:
a0:d8:fd:62:b0:03:95:d7:40:13:0a:8b:58:67:26:
c0:3d:51:8b:3c:a9:ba:8c:1f:68:5a:57:12:b9:50:
a1:33:c5:9d:11:1d:fc:ab:ab:56:31:14:01:d3:d4:
32:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A4:F2:D9:1B:CD:C9:D5:6B:79:E3:A8:74:18:78:1F:10:6E:3C:DA
X509v3 Authority Key Identifier:
keyid:B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b7:77:35:4c:c8:00:cc:18:d2:44:b8:f6:32:f4:dc:e6:5f:
3d:8f:d3:ea:8b:dc:8e:b3:bb:73:6b:ae:ff:6e:c3:f1:c7:81:
aa:90:ae:6c:19:f3:83:54:96:62:77:17:a4:77:4b:9d:26:58:
88:f9:f7:46:f6:74:af:9f:19:13:a3:af:26:03:a2:66:0f:37:
df:75:cb:fb:2b:75:62:78:9d:20:55:f9:c2:f1:ac:a3:2b:be:
90:11:e8:0d:34:74:56:d7:6b:69:02:ba:8d:59:8b:e7:81:83:
9c:21:b2:79:d9:31:9e:f3:1c:51:ce:44:9b:ca:49:2c:18:a5:
17:df:4c:dc:7b:d0:8f:f2:4d:13:a4:56:ad:1a:d5:74:ad:c2:
10:bc:26:58:f3:76:9b:80:7f:99:d7:52:00:a2:c5:17:a9:9c:
d1:34:8a:57:8e:c1:39:d0:15:73:5d:4d:26:cd:ca:65:08:aa:
52:61:7d:01:a1:76:90:b6:72:4a:15:e5:c1:a0:6d:cc:a9:27:
63:1d:41:59:73:0e:96:fb:59:42:ba:68:e1:72:25:6e:fc:45:
30:07:ad:ee:dc:36:7e:2b:fc:5f:ff:86:42:c2:45:9f:dc:a3:
11:d6:3a:f8:e1:d1:b0:be:c7:81:6e:32:2d:18:45:41:ba:d8:
96:22:bc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:31:21 2026 by rpki-client