Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
File: suwbpoVLv1vD7VVP9_7zul_ky1E.mft (raw, json)
Hash identifier: OJMgp3B94T2mCc6iHITEp78jja63Cb1c3HgzocmsU88=
Subject key identifier: 0F:08:73:C2:73:EF:75:CE:86:1D:AA:45:9F:C4:A4:F8:44:54:CD:2D
Authority key identifier: B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
Certificate issuer: /CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Certificate serial: 019CAB349AE2AC02F4ED1B1BED6B5A2F6571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
Manifest number: 1261
Signing time: Sun 01 Mar 2026 21:01:17 +0000
Manifest this update: Sun 01 Mar 2026 21:01:17 +0000
Manifest next update: Mon 02 Mar 2026 21:01:17 +0000
Files and hashes: 1: UU7xm8N0gLKzystvr7K0vFPPnwM.roa (hash: AIlX5yaREYq7YP0aVDh7YsVcoDln+tEm7zV1uCXEZfo=)
2: suwbpoVLv1vD7VVP9_7zul_ky1E.crl (hash: yc7ZD4oZ6qwwObD9JQjDLacuy1ZYzTEKDDih8M05Bts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:9a:e2:ac:02:f4:ed:1b:1b:ed:6b:5a:2f:65:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Validity
Not Before: Mar 1 21:01:17 2026 GMT
Not After : Mar 2 21:01:17 2026 GMT
Subject: CN=0f0873c273ef75ce861daa459fc4a4f84454cd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:db:1a:e1:11:db:29:2b:17:0e:97:93:3f:d4:
5f:b5:35:89:62:e8:82:c5:50:d6:e4:5b:e5:5c:08:
66:98:77:38:0b:aa:48:1f:b7:03:d7:a8:11:5f:31:
24:b1:13:da:1a:2f:1d:03:ed:4a:55:79:52:0d:df:
0e:57:24:37:d9:b2:f6:38:72:eb:2e:6d:80:1a:5b:
da:f8:25:39:27:f6:9e:27:ad:76:ad:c9:7d:64:29:
ea:7c:a2:02:3e:68:12:39:4d:de:ce:b3:16:1d:4c:
91:4b:ed:e5:5e:2e:d5:fa:54:b2:39:fb:9b:fb:9f:
85:8b:ca:99:4c:44:02:b1:29:b4:29:4f:40:e8:6f:
78:63:b3:6e:ef:b3:d5:53:e6:47:68:9d:f1:d6:23:
44:56:4e:0e:6e:bf:8b:8a:a4:9c:d6:83:7d:f5:fc:
4d:19:32:9c:5c:dc:e3:d3:60:ed:7e:0d:2b:0f:e7:
66:cd:84:fe:cb:13:ba:e4:99:f4:74:0c:c8:f4:7f:
d5:16:5d:c4:56:c7:82:88:96:94:c0:c4:14:7b:8c:
94:a1:46:5e:01:ae:28:d8:dc:54:18:04:9e:e4:33:
05:d0:fb:e4:c1:2c:84:83:84:de:42:a5:63:14:dc:
87:aa:89:49:da:60:1f:ec:b3:df:48:ef:d6:1e:1d:
74:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:08:73:C2:73:EF:75:CE:86:1D:AA:45:9F:C4:A4:F8:44:54:CD:2D
X509v3 Authority Key Identifier:
keyid:B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9b:30:cb:4b:e4:1e:b4:d8:d3:94:86:c1:0a:15:b3:bc:fb:
a3:78:82:cd:da:bb:b1:80:c6:38:e0:d6:dd:80:83:e4:10:06:
ad:88:ef:26:74:48:8c:d1:e0:af:ca:99:b2:52:14:79:d1:8e:
ef:ac:2a:7e:01:80:34:53:c7:91:00:5c:e8:f4:76:bc:04:40:
49:d7:0a:9b:39:d0:d6:71:b1:e0:f9:3f:f8:82:e1:d0:67:7b:
6f:6d:9c:d3:4f:47:d4:f1:47:e8:dc:44:00:a0:eb:57:3a:0c:
72:83:b5:c9:06:21:bf:c0:33:97:c6:89:ca:be:25:38:fa:4d:
67:f9:27:c7:d1:ee:f5:ce:c3:74:3c:c9:fd:f3:c5:20:b1:f5:
4b:3d:a6:ad:46:e1:a2:9d:a4:be:d1:fb:20:d8:e7:18:33:7a:
f6:a9:de:29:a5:79:61:70:1a:9c:12:f5:75:ab:6c:43:0a:54:
8c:1d:e8:78:a9:a7:ce:55:6a:33:68:80:44:ed:1f:d2:6c:f7:
d4:2d:c0:fb:78:33:98:d3:6d:17:8c:89:e8:65:71:ab:4e:e6:
aa:ac:be:21:d4:e9:2e:bc:11:f7:f5:9f:7e:bb:1b:90:17:80:
e5:fe:60:f7:93:ab:79:2c:3c:73:f2:4e:d5:8b:84:71:a7:95:
94:10:df:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNJrirAL07Rsb7WtaL2VxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZWMxYmE2ODU0YmJmNWJjM2VkNTU0ZmY3ZmVmM2JhNWZl
NGNiNTEwHhcNMjYwMzAxMjEwMTE3WhcNMjYwMzAyMjEwMTE3WjAzMTEwLwYDVQQD
EygwZjA4NzNjMjczZWY3NWNlODYxZGFhNDU5ZmM0YTRmODQ0NTRjZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNsa4RHbKSsXDpeTP9RftTWJYuiC
xVDW5FvlXAhmmHc4C6pIH7cD16gRXzEksRPaGi8dA+1KVXlSDd8OVyQ32bL2OHLr
Lm2AGlva+CU5J/aeJ612rcl9ZCnqfKICPmgSOU3ezrMWHUyRS+3lXi7V+lSyOfub
+5+Fi8qZTEQCsSm0KU9A6G94Y7Nu77PVU+ZHaJ3x1iNEVk4Obr+LiqSc1oN99fxN
GTKcXNzj02Dtfg0rD+dmzYT+yxO65Jn0dAzI9H/VFl3EVseCiJaUwMQUe4yUoUZe
Aa4o2NxUGASe5DMF0PvkwSyEg4TeQqVjFNyHqolJ2mAf7LPfSO/WHh10GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8Ic8Jz73XOhh2qRZ/EpPhEVM0tMB8GA1UdIwQY
MBaAFLLsG6aFS79bw+1VT/f+87pf5MtRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3V3YnBvVkx2MXZEN1ZWUDlfN3p1bF9reTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81Mjc5ZWYtYTFjOS00ZGEyLWExYzUt
MWQ4ZDkzM2Q2YzAwLzEvc3V3YnBvVkx2MXZEN1ZWUDlfN3p1bF9reTFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi81Mjc5ZWYtYTFjOS00ZGEyLWExYzUtMWQ4ZDkzM2Q2YzAw
LzEvc3V3YnBvVkx2MXZEN1ZWUDlfN3p1bF9reTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5swy0vk
HrTY05SGwQoVs7z7o3iCzdq7sYDGOODW3YCD5BAGrYjvJnRIjNHgr8qZslIUedGO
76wqfgGANFPHkQBc6PR2vARASdcKmznQ1nGx4Pk/+ILh0Gd7b22c009H1PFH6NxE
AKDrVzoMcoO1yQYhv8Azl8aJyr4lOPpNZ/knx9Hu9c7DdDzJ/fPFILH1Sz2mrUbh
op2kvtH7INjnGDN69qneKaV5YXAanBL1datsQwpUjB3oeKmnzlVqM2iARO0f0mz3
1C3A+3gzmNNtF4yJ6GVxq07mqqy+IdTpLrwR9/WffrsbkBeA5f5g95OreSw8c/JO
1YuEcaeVlBDffw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:47 2026 by rpki-client