Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
File: sUqqmwhIZPRLrhi6B2smBndU-2I.mft (raw, json)
Hash identifier: sQf5V0v3Ei1W6PEkRfQrOetu6XfTKCG12IzFSLiACM8=
Subject key identifier: 0D:37:BA:21:A3:9D:29:D9:99:3A:3A:87:43:AB:95:D9:09:5D:9E:FF
Authority key identifier: B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
Certificate issuer: /CN=b14aaa9b084864f44bae18ba076b26067754fb62
Certificate serial: 01A11C75BEB1AB3271943A2C1488AAFF831E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
Manifest number: 1A92
Signing time: Thu 08 Oct 2026 17:00:40 +0000
Manifest this update: Thu 08 Oct 2026 17:00:40 +0000
Manifest next update: Fri 09 Oct 2026 17:00:40 +0000
Files and hashes: 1: ICjM29Ho5ilzx2CC9UyPCpBHk08.roa (hash: iDThEuTUmWf3SPJoG/mF6aomqM2YAji1cqVmI0Zj0pI=)
2: d6GlurZjrrwt2Mzk129b7bT_DCU.roa (hash: 2ZHYIA1Xr0+oHcfnaFr8fQOS6BVciW3KH+j7gwm8oEg=)
3: sUqqmwhIZPRLrhi6B2smBndU-2I.crl (hash: b5mNs6OxC5OYsa/XrS2UGuSB2XD0M5F5DcFz2i7uwpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:75:be:b1:ab:32:71:94:3a:2c:14:88:aa:ff:83:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aaa9b084864f44bae18ba076b26067754fb62
Validity
Not Before: Oct 8 17:00:40 2026 GMT
Not After : Oct 9 17:00:40 2026 GMT
Subject: CN=0d37ba21a39d29d9993a3a8743ab95d9095d9eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:bf:78:e8:88:dd:f8:6e:e5:0b:43:15:b9:
7a:e0:76:32:83:cf:f1:10:6b:74:e0:4f:a6:63:f0:
fd:29:f6:57:0f:9d:f2:d5:30:a2:72:87:85:a5:e2:
43:9a:d5:69:b7:cb:f6:ba:ea:08:67:cd:d4:69:56:
25:39:82:2d:17:9a:de:24:ef:ee:ca:03:e7:24:52:
32:c8:7e:dc:08:62:49:85:85:5f:3f:7d:b7:ca:3b:
68:65:4f:6e:95:43:74:08:a0:46:f6:f7:2b:33:4d:
2e:a1:79:89:46:a2:e7:fb:9a:88:05:65:36:85:73:
ff:e0:5b:8b:bc:9e:36:29:cf:61:f0:98:71:51:67:
33:bc:0c:da:26:a2:6e:21:6d:19:e4:96:07:25:28:
1f:19:5a:6e:8e:9e:3e:81:7c:56:d3:91:fd:c2:f5:
9e:e3:62:60:ab:f4:ca:2e:2f:e7:20:49:a0:ee:0e:
72:f8:40:f8:92:14:bf:b1:1a:64:d0:63:ba:63:4f:
c6:40:c4:9f:b7:6b:61:69:d1:0c:12:b2:17:ed:1f:
90:c9:c2:17:b7:48:d1:1e:18:96:c4:99:3c:e4:c6:
1b:39:da:a1:da:74:46:77:dc:ca:b3:81:c5:f7:e6:
60:12:9f:99:58:db:4c:2a:75:9a:c2:14:4b:7e:f6:
8e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:37:BA:21:A3:9D:29:D9:99:3A:3A:87:43:AB:95:D9:09:5D:9E:FF
X509v3 Authority Key Identifier:
keyid:B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4f:73:b0:89:2a:38:ef:f7:8a:f3:cc:1f:68:74:24:6c:9c:
fc:98:65:a3:db:5a:5e:60:d8:0a:8b:0d:cd:63:fa:14:c8:1d:
8e:82:8b:3c:e5:07:81:58:9c:28:95:21:6b:f4:46:c5:38:bb:
a5:8d:a0:03:ad:c3:20:23:15:db:41:b4:c0:05:ef:2f:83:92:
14:2b:f1:a6:e0:bb:8c:e2:1c:64:07:78:29:70:17:68:01:f7:
c7:7b:9f:5d:6a:43:24:4e:6a:60:f1:76:41:c9:fd:46:d7:af:
b3:8c:32:5f:a1:37:43:4b:1a:3c:36:c0:c1:ab:cf:6b:34:39:
a0:eb:3b:5b:b0:89:da:64:a6:7b:48:64:f3:0b:79:90:b3:00:
60:a2:24:8b:e7:31:1b:1a:b1:63:b6:0a:1c:5a:62:c9:46:3c:
87:58:d0:df:e1:a4:25:93:2d:38:62:e8:c5:2d:72:7f:17:2c:
8e:c4:2b:46:56:b8:3e:53:21:0c:7c:69:33:b7:f2:86:26:b2:
4d:0d:b6:ee:80:73:2e:f0:f6:69:10:80:2e:c5:ac:20:86:d9:
ce:6f:1d:f6:c3:fe:a3:6f:37:b0:27:38:07:ae:49:ba:88:f4:
04:68:6c:c7:bc:cc:0e:ec:ab:b1:14:34:68:66:eb:b4:91:0b:
8a:b4:c3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:28:24 2026 by rpki-client