Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
File: SU14c0FlEKL7I0bvNCKAFVUicTs.mft (raw, json)
Hash identifier: Jt42DPoskcvKVSzjcfd8p6tVZxtPpXteyCNmqg0/FYw=
Subject key identifier: 6D:33:E4:BA:60:FF:A6:6F:DA:56:51:64:46:A6:00:C2:29:F7:D1:DC
Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
Certificate issuer: /CN=494d7873416510a2fb2346ef342280155522713b
Certificate serial: 019CADC79D3DE364AB59D53CCE42BA9ADBB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
Manifest number: 1560
Signing time: Mon 02 Mar 2026 09:01:06 +0000
Manifest this update: Mon 02 Mar 2026 09:01:06 +0000
Manifest next update: Tue 03 Mar 2026 09:01:06 +0000
Files and hashes: 1: 32Nopwa7iDrMzQvWR2AiGUXyxqI.roa (hash: UhsqgA9BDo8hjf2FELCXlR0HFZ2+BdgenG+by3xwFz8=)
2: LjPmzvpwanEzWC7YwFcmuEsNkws.roa (hash: MIJ/J6I5pbMxfY/A5H3VycZbhKC12p0Tut4YaO1yZlQ=)
3: SU14c0FlEKL7I0bvNCKAFVUicTs.crl (hash: mxZjgyhSt+p9osmtx1BbWok/3xbjGFTd6gtnVYR4ezg=)
4: U032uAEUZ0b4mkUs5GY7tAVTTzU.roa (hash: DED8ognEIVQikRQX7YkZQcK+eDMVkhFnX19M3oaeQrw=)
5: UKW6ggBaCeq2EWzJWVDTUUG5C5M.roa (hash: RrnGAk5DcSVwnr4K/OnsZ4KSQkqSg7XT17ThtWs4Qzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:9d:3d:e3:64:ab:59:d5:3c:ce:42:ba:9a:db:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d7873416510a2fb2346ef342280155522713b
Validity
Not Before: Mar 2 09:01:06 2026 GMT
Not After : Mar 3 09:01:06 2026 GMT
Subject: CN=6d33e4ba60ffa66fda56516446a600c229f7d1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:8e:34:da:5e:2c:27:1d:72:90:94:69:f0:
f3:1f:fa:41:18:ed:70:2d:2a:38:b7:8a:d2:f4:07:
a2:18:1e:54:19:7e:1f:17:3c:e8:dc:05:cc:0f:bb:
42:2c:5a:27:12:8f:42:93:46:7b:6d:e1:86:99:0a:
d3:5d:e3:be:e3:3c:07:02:fd:41:b2:24:27:b8:45:
29:3c:dd:0a:f4:46:9e:48:44:40:02:d6:a8:9a:8c:
bc:2b:6a:af:6d:6f:08:57:e1:51:01:56:2b:2c:6b:
d9:a2:c3:6f:fb:91:10:aa:23:dd:3b:3d:24:e5:9a:
ec:0d:f6:6e:f1:99:75:b0:e3:64:4f:ac:99:fc:a6:
14:ed:4f:5a:b7:1b:d7:b9:e9:d0:83:0b:a8:d6:c9:
51:d2:98:91:d3:30:50:78:98:92:16:73:dc:4c:c0:
88:7c:0d:17:57:b0:60:b2:19:23:60:36:60:67:58:
b7:db:e0:3f:fc:da:29:0c:e8:e2:6a:36:86:19:4a:
f4:5c:ec:4c:cc:98:db:30:57:70:90:17:f0:cc:5f:
c4:34:da:b2:60:e1:97:fc:b3:5c:e2:e0:97:83:25:
c3:c4:b6:e0:f2:02:78:f0:55:af:08:69:f7:d3:40:
68:07:f6:07:21:a8:03:3b:ec:89:4c:d1:62:81:39:
d4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:33:E4:BA:60:FF:A6:6F:DA:56:51:64:46:A6:00:C2:29:F7:D1:DC
X509v3 Authority Key Identifier:
keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:29:11:f0:17:af:46:80:ba:5d:75:8b:d0:c2:b9:91:08:b4:
42:6b:1c:b6:8c:1c:2b:f9:81:81:c1:58:3b:45:d8:5f:93:31:
4d:ef:1b:7d:c5:ac:0f:da:49:59:04:aa:01:63:88:7a:cf:86:
a9:73:80:a7:bf:18:71:c4:fa:12:69:b9:dc:a2:4d:85:0f:b0:
cf:08:c0:da:ef:97:87:59:5a:9f:df:3e:0c:a4:39:50:d3:8e:
50:f9:bf:38:f4:5c:76:a7:ff:67:79:bd:a5:c8:1c:ac:8e:42:
9b:e3:01:24:14:e3:ee:59:89:8b:5a:74:d8:d3:db:6f:a6:8e:
6c:77:99:f7:2a:66:d0:0d:eb:a3:8b:fc:47:c0:60:aa:08:b9:
c4:13:4a:3b:ff:20:ea:e9:df:5a:de:4c:6c:90:c6:71:84:02:
97:ea:79:f0:e5:5f:16:40:84:ce:4e:c9:bf:50:ab:ad:cb:88:
38:3b:fa:72:12:fb:dc:1a:e3:d8:94:ef:cf:7d:b0:dd:fe:15:
ea:a2:17:3e:7d:78:f0:61:30:9d:6d:c6:20:90:c7:a0:21:08:
8d:a0:c8:62:a9:99:a3:15:81:3b:0d:bf:b1:9c:a5:85:25:32:
e1:6c:40:48:62:af:4a:2c:e4:74:2e:2a:0e:6b:9e:32:ee:3b:
19:79:a4:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx50942SrWdU8zkK6mtu2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NGQ3ODczNDE2NTEwYTJmYjIzNDZlZjM0MjI4MDE1NTUy
MjcxM2IwHhcNMjYwMzAyMDkwMTA2WhcNMjYwMzAzMDkwMTA2WjAzMTEwLwYDVQQD
Eyg2ZDMzZTRiYTYwZmZhNjZmZGE1NjUxNjQ0NmE2MDBjMjI5ZjdkMWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHSONNpeLCcdcpCUafDzH/pBGO1w
LSo4t4rS9AeiGB5UGX4fFzzo3AXMD7tCLFonEo9Ck0Z7beGGmQrTXeO+4zwHAv1B
siQnuEUpPN0K9EaeSERAAtaomoy8K2qvbW8IV+FRAVYrLGvZosNv+5EQqiPdOz0k
5ZrsDfZu8Zl1sONkT6yZ/KYU7U9atxvXuenQgwuo1slR0piR0zBQeJiSFnPcTMCI
fA0XV7BgshkjYDZgZ1i32+A//NopDOjiajaGGUr0XOxMzJjbMFdwkBfwzF/ENNqy
YOGX/LNc4uCXgyXDxLbg8gJ48FWvCGn300BoB/YHIagDO+yJTNFigTnU/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0z5Lpg/6Zv2lZRZEamAMIp99HcMB8GA1UdIwQY
MBaAFElNeHNBZRCi+yNG7zQigBVVInE7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yOGY3YTYtZTFiYS00OTc4LTkxMjIt
ZTE4ZTdiMmFjNTM2LzEvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8yOGY3YTYtZTFiYS00OTc4LTkxMjItZTE4ZTdiMmFjNTM2
LzEvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjykR8Bev
RoC6XXWL0MK5kQi0QmsctowcK/mBgcFYO0XYX5MxTe8bfcWsD9pJWQSqAWOIes+G
qXOAp78YccT6Emm53KJNhQ+wzwjA2u+Xh1lan98+DKQ5UNOOUPm/OPRcdqf/Z3m9
pcgcrI5Cm+MBJBTj7lmJi1p02NPbb6aObHeZ9ypm0A3ro4v8R8Bgqgi5xBNKO/8g
6unfWt5MbJDGcYQCl+p58OVfFkCEzk7Jv1CrrcuIODv6chL73Brj2JTvz32w3f4V
6qIXPn148GEwnW3GIJDHoCEIjaDIYqmZoxWBOw2/sZylhSUy4WxASGKvSizkdC4q
DmueMu47GXmkNw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:07 2026 by rpki-client