Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
File: suwbpoVLv1vD7VVP9_7zul_ky1E.mft (raw, json)
Hash identifier: IiQD+uzmxTUn02Jvj/qJMKpVNo5YWo0g/xkdbypMiMY=
Subject key identifier: 91:EB:58:49:01:26:21:64:F9:EC:91:BF:98:6E:2F:2E:85:6B:1E:82
Authority key identifier: B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
Certificate issuer: /CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Certificate serial: 01A0DCF29B5845FBDCB961557827772C9863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
Manifest number: 148D
Signing time: Sat 26 Sep 2026 09:01:22 +0000
Manifest this update: Sat 26 Sep 2026 09:01:22 +0000
Manifest next update: Sun 27 Sep 2026 09:01:22 +0000
Files and hashes: 1: UU7xm8N0gLKzystvr7K0vFPPnwM.roa (hash: AIlX5yaREYq7YP0aVDh7YsVcoDln+tEm7zV1uCXEZfo=)
2: suwbpoVLv1vD7VVP9_7zul_ky1E.crl (hash: +iJ20KEbAVSTGDHcs/nDSIm2vvGW+GgTTLV0k7LLvEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:9b:58:45:fb:dc:b9:61:55:78:27:77:2c:98:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Validity
Not Before: Sep 26 09:01:22 2026 GMT
Not After : Sep 27 09:01:22 2026 GMT
Subject: CN=91eb584901262164f9ec91bf986e2f2e856b1e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:87:4e:57:d7:f2:13:57:e1:f6:2f:cd:50:
0b:7e:53:ca:e2:d6:77:6a:60:45:58:6b:3d:d5:8a:
18:c2:7a:74:cb:5e:fc:4b:be:77:c6:f8:2a:ca:6c:
27:89:ed:23:5f:79:41:57:d9:16:63:61:87:cf:26:
79:d2:ee:f1:0e:0e:53:0c:cf:ee:b6:55:4f:d2:b4:
2b:16:c6:c8:b4:7f:4c:32:90:b8:71:a5:be:bb:60:
d3:93:cf:8e:11:76:fa:e9:30:0b:d4:56:2e:ff:41:
34:54:f9:08:07:bd:7c:d2:80:ff:69:6a:d0:4d:86:
4f:53:8b:5e:95:53:14:d5:68:34:c6:03:d2:e9:18:
4b:a3:2e:2a:ac:3a:22:65:af:ef:52:50:1a:1f:57:
5f:a3:c4:e7:6b:a0:6c:54:34:10:dc:a9:42:1a:c5:
2d:55:35:d4:bb:4f:60:3e:12:f8:e5:31:5b:24:8f:
d4:36:2e:6d:7e:ff:9d:ad:2a:8d:9e:64:d1:b9:0b:
c3:d2:4f:87:2b:3f:9e:c8:76:b3:eb:78:78:eb:64:
5a:3b:bc:1c:69:61:e8:4f:62:ea:8c:cf:0a:97:b3:
b8:b2:5c:6a:b1:25:79:4c:21:70:86:9e:f8:c7:d8:
82:ca:f4:9c:a9:d7:87:9b:4c:24:de:28:09:9b:e5:
d9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EB:58:49:01:26:21:64:F9:EC:91:BF:98:6E:2F:2E:85:6B:1E:82
X509v3 Authority Key Identifier:
keyid:B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f9:aa:6c:63:b8:30:9d:b8:80:09:d7:4b:3c:39:12:8d:e1:
c9:c1:dc:50:e1:fa:c9:61:a0:a5:30:f2:8f:16:c2:f5:15:5e:
d6:9d:5f:17:53:1e:b1:98:bf:18:10:8d:9c:a3:75:d9:be:81:
9d:ea:00:25:af:38:6d:58:5b:02:2d:9d:03:48:87:1c:40:a8:
f8:e0:0f:c2:c4:d2:81:bc:03:25:b8:fa:2b:a9:78:6d:c4:04:
52:71:2f:c6:a5:6e:3c:5b:4b:58:2c:12:cf:1a:8d:ab:98:ea:
e0:61:d5:b2:34:b3:fa:76:f4:02:12:45:87:0c:ea:44:f8:5c:
5d:82:32:bf:2a:29:f9:b0:f1:26:21:e0:75:b6:c1:4a:f8:61:
d7:51:b3:6d:d2:4d:37:f0:f1:3d:ce:0e:29:1a:92:26:e8:1a:
b1:5a:a0:0d:d7:25:8f:8f:18:9f:07:1b:09:ff:f1:c6:db:a9:
f6:72:83:dd:e6:75:9d:f0:9f:65:d3:23:38:c7:5c:78:03:97:
21:00:2e:ca:2e:e7:cf:28:1c:05:41:d2:4d:ab:85:de:13:4f:
02:dd:4f:aa:3c:b5:4f:65:84:f8:43:79:83:23:83:3b:df:e7:
db:38:ff:db:27:79:b0:2c:04:e2:24:3f:12:ca:61:3c:6d:bb:
ee:34:83:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:08:53 2026 by rpki-client