Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
File: suwbpoVLv1vD7VVP9_7zul_ky1E.mft (raw, json)
Hash identifier: jvqCIaP5FtPcJMBmlQA7xDBQZSreeNlEzK2QVsR+64I=
Subject key identifier: C3:75:0A:14:19:90:8F:6D:82:35:7D:8F:C6:E4:AB:FE:CA:37:40:BA
Authority key identifier: B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
Certificate issuer: /CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Certificate serial: 019D9AABE7562A653B6C55CC8EA5BA120971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
Manifest number: 12DD
Signing time: Fri 17 Apr 2026 09:00:50 +0000
Manifest this update: Fri 17 Apr 2026 09:00:50 +0000
Manifest next update: Sat 18 Apr 2026 09:00:50 +0000
Files and hashes: 1: UU7xm8N0gLKzystvr7K0vFPPnwM.roa (hash: AIlX5yaREYq7YP0aVDh7YsVcoDln+tEm7zV1uCXEZfo=)
2: suwbpoVLv1vD7VVP9_7zul_ky1E.crl (hash: TekQAHNkLnsJhKYPT0H9k6lKTU/Xz6puukiyB5FOHJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:e7:56:2a:65:3b:6c:55:cc:8e:a5:ba:12:09:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Validity
Not Before: Apr 17 09:00:50 2026 GMT
Not After : Apr 18 09:00:50 2026 GMT
Subject: CN=c3750a1419908f6d82357d8fc6e4abfeca3740ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:cc:a2:0b:ba:b3:ec:23:27:18:c6:83:3e:
3c:04:09:14:9f:61:54:45:38:11:07:1b:7e:55:40:
27:1f:99:dc:60:a3:45:b4:cf:88:92:c9:e2:97:c1:
72:c5:fc:89:6c:1e:b2:7d:da:f6:f7:46:1c:b6:82:
8f:79:34:12:88:6d:87:8d:64:c3:db:c5:29:a2:6a:
00:dc:93:ee:34:0a:d2:b8:77:e6:a8:50:7c:b7:0c:
4c:17:46:50:2f:a1:46:46:1a:48:b2:85:7b:09:32:
f5:97:89:2f:61:9f:ca:4e:40:75:f4:f5:0e:02:54:
fa:57:f5:36:22:54:36:89:61:86:68:de:96:49:d7:
e6:9e:ef:64:e8:23:e0:ca:f6:04:c1:39:48:18:46:
6e:51:be:1c:7b:c2:2b:3c:83:1a:1f:f2:7c:ad:84:
58:7d:ba:5f:97:c6:1f:0f:2d:dc:1d:fd:3c:38:31:
6e:4c:5c:f6:85:cb:f2:f7:38:a6:ab:13:3f:35:7f:
b5:91:fe:dc:4c:1c:aa:3d:3b:dc:ba:49:c9:31:e7:
22:ba:46:09:64:14:4d:4f:30:8d:58:db:eb:db:7c:
68:85:7e:ac:d4:bb:56:2f:34:c1:e7:11:45:82:f0:
86:55:7d:23:c7:04:d2:93:37:ff:08:9b:89:0a:c5:
57:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:75:0A:14:19:90:8F:6D:82:35:7D:8F:C6:E4:AB:FE:CA:37:40:BA
X509v3 Authority Key Identifier:
keyid:B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:2c:63:d4:40:0e:d3:10:1a:1a:f8:11:59:d2:77:64:0f:a1:
19:37:59:55:62:1b:75:a2:4e:5a:1e:08:17:22:9e:1e:7f:0d:
ee:f1:cb:93:1b:09:de:c6:c0:5d:c0:8c:ac:1c:8c:38:7f:2f:
b0:c3:b3:01:ef:61:4a:b3:bf:19:79:8c:9d:3b:b1:ad:01:d4:
90:5b:94:3d:64:c7:bd:ab:70:d5:b1:88:c6:12:c9:71:8f:6b:
2a:7d:6c:36:c1:03:91:27:5c:60:3b:ed:79:65:12:e3:75:57:
d3:dd:7d:34:65:0a:03:70:ff:ce:10:da:ec:72:59:12:00:4b:
6b:f6:3b:04:6a:53:25:58:bd:69:d2:da:b4:ae:7e:01:21:9c:
93:4c:e1:64:90:e3:47:38:6c:79:a4:e5:f2:34:75:22:9f:7e:
ea:4c:60:52:50:9c:95:9f:7f:19:8a:41:e6:66:d5:28:03:62:
93:9c:02:f5:36:23:e6:90:74:ad:2b:b1:51:10:61:61:6c:30:
1b:bd:bb:d7:e9:58:71:a3:c5:c6:4e:67:e6:e6:90:cb:45:08:
30:64:6c:8b:1b:4d:d4:7c:7f:cd:39:96:8a:eb:62:bb:dc:53:
9d:f9:b9:c0:8b:35:17:98:d7:bd:44:9b:27:48:57:c3:f5:86:
0d:05:ae:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq+dWKmU7bFXMjqW6EglxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZWMxYmE2ODU0YmJmNWJjM2VkNTU0ZmY3ZmVmM2JhNWZl
NGNiNTEwHhcNMjYwNDE3MDkwMDUwWhcNMjYwNDE4MDkwMDUwWjAzMTEwLwYDVQQD
EyhjMzc1MGExNDE5OTA4ZjZkODIzNTdkOGZjNmU0YWJmZWNhMzc0MGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0zMogu6s+wjJxjGgz48BAkUn2FU
RTgRBxt+VUAnH5ncYKNFtM+Iksnil8FyxfyJbB6yfdr290YctoKPeTQSiG2HjWTD
28UpomoA3JPuNArSuHfmqFB8twxMF0ZQL6FGRhpIsoV7CTL1l4kvYZ/KTkB19PUO
AlT6V/U2IlQ2iWGGaN6WSdfmnu9k6CPgyvYEwTlIGEZuUb4ce8IrPIMaH/J8rYRY
fbpfl8YfDy3cHf08ODFuTFz2hcvy9zimqxM/NX+1kf7cTByqPTvcuknJMeciukYJ
ZBRNTzCNWNvr23xohX6s1LtWLzTB5xFFgvCGVX0jxwTSkzf/CJuJCsVXdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMN1ChQZkI9tgjV9j8bkq/7KN0C6MB8GA1UdIwQY
MBaAFLLsG6aFS79bw+1VT/f+87pf5MtRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3V3YnBvVkx2MXZEN1ZWUDlfN3p1bF9reTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81Mjc5ZWYtYTFjOS00ZGEyLWExYzUt
MWQ4ZDkzM2Q2YzAwLzEvc3V3YnBvVkx2MXZEN1ZWUDlfN3p1bF9reTFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi81Mjc5ZWYtYTFjOS00ZGEyLWExYzUtMWQ4ZDkzM2Q2YzAw
LzEvc3V3YnBvVkx2MXZEN1ZWUDlfN3p1bF9reTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATixj1EAO
0xAaGvgRWdJ3ZA+hGTdZVWIbdaJOWh4IFyKeHn8N7vHLkxsJ3sbAXcCMrByMOH8v
sMOzAe9hSrO/GXmMnTuxrQHUkFuUPWTHvatw1bGIxhLJcY9rKn1sNsEDkSdcYDvt
eWUS43VX0919NGUKA3D/zhDa7HJZEgBLa/Y7BGpTJVi9adLatK5+ASGck0zhZJDj
RzhseaTl8jR1Ip9+6kxgUlCclZ9/GYpB5mbVKANik5wC9TYj5pB0rSuxURBhYWww
G7271+lYcaPFxk5n5uaQy0UIMGRsixtN1Hx/zTmWiutiu9xTnfm5wIs1F5jXvUSb
J0hXw/WGDQWung==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:57:58 2026 by rpki-client