Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
File: su0dYGb05GVO9fPMcKXZBamvgpA.mft (raw, json)
Hash identifier: jbkg0UHAohnRXtVprgmHUsMOB+r5ENdtJNE12xyofP0=
Subject key identifier: 35:34:BA:8B:B9:C1:54:BB:18:5B:5C:BE:04:0F:AB:05:C0:AA:31:58
Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
Certificate issuer: /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Certificate serial: 019CAC7E0E604463C4B19167AE4FD1747AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 03:01:08 +0000
Manifest this update: Mon 02 Mar 2026 03:01:08 +0000
Manifest next update: Tue 03 Mar 2026 03:01:08 +0000
Files and hashes: 1: 600lLjQN8NaUtu9vwfIFMpqTNQc.roa (hash: MUp+FLIccBAFPNwMS4Gw63hQ+b8ZEvvsOZeWkDj1pdQ=)
2: UFBqlqbDbCJdY4yyGZXAZPEHhZ0.roa (hash: NYR75LT8EcYVp5wWj3tYR34PO47ZPDQS52OiuEfA/iM=)
3: mh-GYVdTRd_42s-4vmsQOV1tY40.roa (hash: pgFeIkHEDR3yEGlYLLu69s0r5w/mu9jqvo+vTtixs6s=)
4: ndFKEl0wI8WgAsJHTynnR8s626U.roa (hash: iToJm74Xq6g6h01i3TJnsDzizJuEXJ+pOugGZB7SEMU=)
5: su0dYGb05GVO9fPMcKXZBamvgpA.crl (hash: oLvVCdvdGH5kdtRl18TlOjnu11NQL7yr3bt+ITvu5Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:0e:60:44:63:c4:b1:91:67:ae:4f:d1:74:7a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Validity
Not Before: Mar 2 03:01:08 2026 GMT
Not After : Mar 3 03:01:08 2026 GMT
Subject: CN=3534ba8bb9c154bb185b5cbe040fab05c0aa3158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:07:46:52:77:cd:8e:db:87:7b:01:c0:82:0d:
ea:af:d4:94:14:08:db:7a:18:6b:c5:5a:4d:ed:db:
6e:e7:3c:02:84:4f:61:af:8b:75:21:ee:fa:40:96:
05:72:5e:d5:b3:92:61:db:8d:74:22:ce:d2:8c:31:
eb:06:f3:86:7a:c8:a1:61:45:35:4b:7c:31:51:b0:
e1:bc:51:81:95:5e:28:3f:22:6c:ad:e9:1c:b0:65:
3e:25:3d:fd:f5:9e:aa:3c:14:8a:d5:12:51:4a:fe:
b1:22:d0:ef:e7:1f:23:26:09:b2:d3:bf:d6:2b:ec:
4f:74:2b:8c:db:44:9e:57:22:c8:40:e9:5f:f7:85:
df:ce:93:2a:9b:4c:4f:4f:f9:a3:91:9e:5c:7c:b9:
46:28:d8:7f:4a:97:75:a7:fd:2b:3b:d0:59:b9:1d:
ff:24:ee:f2:3e:be:8d:d6:25:9f:49:04:09:f9:fb:
66:73:0b:e7:f1:48:90:8c:b7:af:d4:82:df:3e:a4:
74:19:8b:0b:7c:ee:ef:27:a9:ca:2d:6e:2e:f4:be:
8a:8d:7e:5b:4a:0d:65:75:be:d8:2d:1c:14:83:04:
0e:2c:dc:0b:64:55:ea:e5:ad:99:f7:8b:77:27:f8:
d8:79:f7:90:99:28:8b:62:a7:08:4e:14:4d:db:ef:
3c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:34:BA:8B:B9:C1:54:BB:18:5B:5C:BE:04:0F:AB:05:C0:AA:31:58
X509v3 Authority Key Identifier:
keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c0:62:c0:7d:22:5a:d7:36:7c:ae:39:98:14:b5:d6:12:f6:
a0:cf:2b:4c:a4:ab:df:ad:bf:ac:9d:d1:37:d5:b1:de:b4:dc:
61:18:2f:2b:3c:24:f2:a8:ea:07:79:cc:9d:9b:12:54:c4:f0:
dc:c0:6b:12:f4:a7:d1:61:a2:8f:7b:1c:5c:fa:75:f4:dd:8a:
2b:19:80:7a:f7:7d:0c:59:59:85:87:9f:e1:dc:e5:fd:9d:21:
69:75:9e:cb:5f:a3:a3:cf:5f:6e:54:10:30:1d:64:c4:23:05:
59:7b:10:f1:cc:04:ee:93:64:3f:0c:fe:b3:30:04:2a:df:52:
cb:8d:84:c0:8c:e5:ff:9e:81:6e:61:48:82:0e:f0:1a:e5:04:
e7:9e:a0:58:69:89:40:9a:3a:0b:3f:68:d1:2d:ea:c5:47:6c:
ff:80:38:1f:73:07:72:01:f5:3f:87:e5:c5:1f:fe:a0:99:09:
a9:75:70:3b:e8:ee:c5:70:8c:3f:50:f4:24:c3:32:f7:b5:58:
40:b2:32:cc:7e:0e:6e:b5:a6:cd:e8:f6:e4:52:3b:c1:b6:1e:
14:3f:32:26:e6:17:5e:5f:d2:1e:1f:94:69:03:57:78:0d:ad:
5e:a9:56:a9:c8:7b:00:f2:ca:57:93:03:39:a5:ce:e8:89:43:
59:3f:71:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:27:08 2026 by rpki-client