Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
File: su0dYGb05GVO9fPMcKXZBamvgpA.mft (raw, json)
Hash identifier: qPSpajbjR7A4MiH35AZfsVMtppkALXkKM2cZbs3EWAw=
Subject key identifier: 4D:A4:B9:1D:79:AD:F7:FC:96:F7:D1:9B:21:97:E8:54:6A:E9:5F:44
Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
Certificate issuer: /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Certificate serial: 019FA93DD5D5A5057E7B8B3A2D6F26D31F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 15:00:29 +0000
Manifest this update: Tue 28 Jul 2026 15:00:29 +0000
Manifest next update: Wed 29 Jul 2026 15:00:29 +0000
Files and hashes: 1: 600lLjQN8NaUtu9vwfIFMpqTNQc.roa (hash: MUp+FLIccBAFPNwMS4Gw63hQ+b8ZEvvsOZeWkDj1pdQ=)
2: UFBqlqbDbCJdY4yyGZXAZPEHhZ0.roa (hash: NYR75LT8EcYVp5wWj3tYR34PO47ZPDQS52OiuEfA/iM=)
3: mh-GYVdTRd_42s-4vmsQOV1tY40.roa (hash: pgFeIkHEDR3yEGlYLLu69s0r5w/mu9jqvo+vTtixs6s=)
4: ndFKEl0wI8WgAsJHTynnR8s626U.roa (hash: iToJm74Xq6g6h01i3TJnsDzizJuEXJ+pOugGZB7SEMU=)
5: su0dYGb05GVO9fPMcKXZBamvgpA.crl (hash: l4j0Way9D9b4xkcPOOSRsqxrceeVSPhqMeV60beBWXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:d5:d5:a5:05:7e:7b:8b:3a:2d:6f:26:d3:1f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Validity
Not Before: Jul 28 15:00:29 2026 GMT
Not After : Jul 29 15:00:29 2026 GMT
Subject: CN=4da4b91d79adf7fc96f7d19b2197e8546ae95f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5a:31:a3:62:1e:8c:49:1c:c3:4d:88:d3:1d:
66:1e:b6:6b:c8:d8:6e:86:f3:1c:1b:24:82:12:3f:
56:01:71:40:68:65:7e:90:15:0e:92:70:49:4a:c9:
2e:ea:97:29:18:e9:82:b8:97:a1:b8:b3:4c:fe:db:
7c:0c:43:ca:35:bb:00:05:03:70:fa:56:3b:3e:14:
fc:eb:24:e7:91:35:c5:7d:1d:1c:c8:56:15:71:a9:
c4:e3:bb:7c:dd:e1:f6:81:7d:70:c6:af:8f:01:37:
90:ca:0a:df:14:21:72:33:a5:dd:33:16:b6:f0:7f:
bb:29:7f:5c:1a:45:9b:b7:e5:85:3e:ce:e3:5e:6c:
39:81:7b:76:97:42:29:30:12:69:c4:37:39:b2:d8:
d9:48:42:57:f7:f4:dc:08:2b:47:12:da:32:e1:4b:
30:47:81:14:9e:8c:7d:9b:9f:05:d2:c9:32:88:fe:
31:38:f9:83:59:01:28:75:bb:0a:30:4a:f8:42:a0:
8d:7d:75:8d:17:fa:62:06:ce:d3:57:30:8f:6b:12:
43:d5:3c:19:1e:a7:29:a7:d8:3f:c5:28:49:a2:ac:
80:a1:35:97:72:37:fe:12:5d:90:fa:e0:62:fa:5d:
e6:11:18:72:f6:97:9f:31:03:97:f8:f6:a7:e1:10:
d9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A4:B9:1D:79:AD:F7:FC:96:F7:D1:9B:21:97:E8:54:6A:E9:5F:44
X509v3 Authority Key Identifier:
keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:14:cc:33:d1:50:bd:0b:1a:54:87:bb:be:42:a8:e9:58:fa:
28:d9:91:e3:f5:17:e9:43:f9:77:a6:b9:05:cf:b4:2b:78:08:
87:02:81:79:58:b8:31:8e:80:a4:2f:a3:7d:e3:01:f2:bc:fc:
88:08:33:c9:ad:40:50:70:4f:80:27:8d:1c:7b:49:78:b0:18:
a5:49:79:54:9f:a0:a3:00:ff:d9:da:20:f4:c8:50:99:ac:db:
74:64:d2:d1:b7:ae:12:5f:00:ce:d4:d5:d9:48:66:f1:7b:e1:
44:e0:5b:ed:5b:7e:1b:d0:32:1a:f8:99:8d:74:9e:ea:02:46:
95:cf:5d:6c:31:ef:da:eb:31:af:ed:d4:78:fe:b9:52:60:02:
f0:8b:9d:85:bd:36:59:c9:d4:ab:68:6b:06:7b:d1:d5:1b:68:
df:c3:75:59:c2:39:7a:98:68:ec:32:d3:b4:3d:01:88:54:e3:
47:72:9e:f1:e4:dd:87:60:ba:8c:60:c4:6c:80:8c:de:78:31:
9a:72:f4:38:a6:8e:bb:34:9c:3f:ae:dd:48:07:ec:8f:cb:3b:
cb:d3:8e:e9:9f:41:01:e4:d5:bf:b4:7e:f1:d2:92:eb:b6:7d:
0f:3e:99:76:69:ff:66:a2:31:2e:8f:72:7f:89:f1:4e:c7:4a:
27:fc:fe:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:50:41 2026 by rpki-client