Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
File: SU14c0FlEKL7I0bvNCKAFVUicTs.mft (raw, json)
Hash identifier: VvbjeHpmpm2+3kZ4HjD2T7fB+sX/8GkpfW5KvvdZAX0=
Subject key identifier: A0:45:EF:EF:58:AB:23:ED:2F:3B:A0:2A:BF:D4:8E:B9:98:B1:CD:98
Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
Certificate issuer: /CN=494d7873416510a2fb2346ef342280155522713b
Certificate serial: 019CABD97FFB6778AF2F7423AC01E78D9266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
Manifest number: 155F
Signing time: Mon 02 Mar 2026 00:01:23 +0000
Manifest this update: Mon 02 Mar 2026 00:01:23 +0000
Manifest next update: Tue 03 Mar 2026 00:01:23 +0000
Files and hashes: 1: 32Nopwa7iDrMzQvWR2AiGUXyxqI.roa (hash: UhsqgA9BDo8hjf2FELCXlR0HFZ2+BdgenG+by3xwFz8=)
2: LjPmzvpwanEzWC7YwFcmuEsNkws.roa (hash: MIJ/J6I5pbMxfY/A5H3VycZbhKC12p0Tut4YaO1yZlQ=)
3: SU14c0FlEKL7I0bvNCKAFVUicTs.crl (hash: dS14921Bdgv8IpURBLM9lWEUzL+rVgcexvBXX7270us=)
4: U032uAEUZ0b4mkUs5GY7tAVTTzU.roa (hash: DED8ognEIVQikRQX7YkZQcK+eDMVkhFnX19M3oaeQrw=)
5: UKW6ggBaCeq2EWzJWVDTUUG5C5M.roa (hash: RrnGAk5DcSVwnr4K/OnsZ4KSQkqSg7XT17ThtWs4Qzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:7f:fb:67:78:af:2f:74:23:ac:01:e7:8d:92:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d7873416510a2fb2346ef342280155522713b
Validity
Not Before: Mar 2 00:01:23 2026 GMT
Not After : Mar 3 00:01:23 2026 GMT
Subject: CN=a045efef58ab23ed2f3ba02abfd48eb998b1cd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:99:88:f1:b5:8e:7c:c8:e1:f0:19:6e:60:2a:
74:e8:a0:84:d8:ff:52:59:83:db:35:24:9e:40:44:
25:e7:96:34:aa:04:c7:09:e4:72:90:ff:d8:af:56:
55:ce:0e:e6:e0:11:1e:70:0c:69:79:7f:fd:45:32:
1c:df:13:4e:a6:74:f8:7b:88:69:10:33:ee:6f:c0:
ba:cd:68:cc:bb:d1:d7:c2:83:93:22:19:81:25:05:
61:e4:f5:0c:1f:5c:55:9d:d8:fb:23:63:e4:8f:0b:
d8:cc:44:14:4a:bc:29:ad:80:3c:51:bc:c9:6e:58:
13:e1:30:e1:fd:7f:db:ea:b3:92:65:fd:e9:6e:99:
00:a1:34:ce:f0:8e:30:46:95:e8:31:b2:d3:b4:cc:
ef:c9:86:c6:88:f6:26:43:00:c8:70:f7:4e:04:e3:
de:9c:24:a4:7b:2d:44:b2:d5:a3:c8:97:3b:cd:41:
9a:6a:06:2d:79:c6:00:31:3d:0c:ec:f9:38:35:f5:
44:b8:87:1d:e0:4d:54:ca:3b:20:e1:85:95:e7:44:
d7:0b:95:3b:13:bc:81:8f:94:b2:cc:c2:1b:23:4a:
a4:25:06:79:1e:63:2a:25:64:0d:d6:28:58:ba:7b:
b9:49:d4:f3:99:66:a2:2f:91:1f:76:7e:3a:95:d4:
ef:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:45:EF:EF:58:AB:23:ED:2F:3B:A0:2A:BF:D4:8E:B9:98:B1:CD:98
X509v3 Authority Key Identifier:
keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:18:89:d0:29:f7:6e:25:92:9c:10:4e:d3:b3:20:89:58:9b:
b0:15:c2:13:9a:19:22:22:5d:cb:67:17:8c:57:de:4a:2f:f0:
94:aa:44:84:16:8f:a4:48:69:03:70:3c:03:c1:34:db:3b:19:
e3:4a:01:eb:78:85:66:57:62:6d:d6:9d:46:24:29:73:09:9a:
f2:a9:22:eb:e9:5f:29:75:f0:9f:1d:63:0a:8b:b7:e9:b9:06:
9e:60:cf:f8:13:f7:2f:28:96:dd:93:30:ac:dd:72:e8:a6:85:
1c:4f:8c:a4:5e:b9:99:35:a1:c3:fc:27:b7:10:01:77:21:bc:
b7:1b:f6:6d:ff:c0:d4:d6:4d:05:72:00:48:76:ab:18:ac:34:
c3:19:63:b2:dd:f7:c2:05:c8:90:b3:be:67:27:55:a4:7e:3d:
1e:53:9f:49:71:37:45:b3:fb:60:9a:c6:49:79:4e:5c:0f:0d:
ad:6f:1f:d9:75:d3:46:9c:e7:49:eb:14:0b:e0:18:54:04:6e:
fa:87:99:df:75:49:d2:af:bb:30:26:07:9d:71:36:bc:23:18:
30:d0:04:dc:dc:46:ba:ac:4c:45:72:8c:7f:40:f5:21:e0:b6:
a3:0c:49:a0:da:d9:49:23:84:a3:12:a4:20:74:48:6e:5a:47:
0f:6b:9f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:36:25 2026 by rpki-client