Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
File: su0dYGb05GVO9fPMcKXZBamvgpA.mft (raw, json)
Hash identifier: 3erhlAk5S87AVVNWTJZHGrPDn3v0BQzSOluB5VGkrpg=
Subject key identifier: 28:D8:2A:29:2C:13:54:94:C3:CE:36:E7:40:53:F3:33:7A:76:13:72
Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
Certificate issuer: /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Certificate serial: 01A0C331BAE3515D9E6236F6978D2769059A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 09:00:10 +0000
Manifest this update: Mon 21 Sep 2026 09:00:10 +0000
Manifest next update: Tue 22 Sep 2026 09:00:10 +0000
Files and hashes: 1: 600lLjQN8NaUtu9vwfIFMpqTNQc.roa (hash: MUp+FLIccBAFPNwMS4Gw63hQ+b8ZEvvsOZeWkDj1pdQ=)
2: UFBqlqbDbCJdY4yyGZXAZPEHhZ0.roa (hash: NYR75LT8EcYVp5wWj3tYR34PO47ZPDQS52OiuEfA/iM=)
3: mh-GYVdTRd_42s-4vmsQOV1tY40.roa (hash: pgFeIkHEDR3yEGlYLLu69s0r5w/mu9jqvo+vTtixs6s=)
4: ndFKEl0wI8WgAsJHTynnR8s626U.roa (hash: iToJm74Xq6g6h01i3TJnsDzizJuEXJ+pOugGZB7SEMU=)
5: su0dYGb05GVO9fPMcKXZBamvgpA.crl (hash: /Nkzk+bkiAiOy92yoeTVlcaiu9h2wi8QeaCQt66tSQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:31:ba:e3:51:5d:9e:62:36:f6:97:8d:27:69:05:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Validity
Not Before: Sep 21 09:00:10 2026 GMT
Not After : Sep 22 09:00:10 2026 GMT
Subject: CN=28d82a292c135494c3ce36e74053f3337a761372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6a:1d:6f:b5:d8:51:8e:23:65:1a:1f:97:19:
66:6c:35:e2:10:67:9f:a7:d9:6a:0d:87:dd:af:d1:
6b:fc:4b:4e:35:95:db:c8:22:fc:a0:eb:85:28:2e:
5b:1f:c8:c6:7d:34:3f:43:21:b9:fa:d4:dd:a1:33:
e3:fe:83:92:bb:d0:d8:b9:7e:d7:c0:3f:fb:93:4c:
6b:49:f9:d6:69:7f:3a:a3:a5:b8:b1:0a:25:0c:65:
ac:cc:56:27:60:52:aa:4f:38:cc:55:e8:24:4a:24:
42:c8:82:0a:57:b3:a8:17:b5:8f:1a:e2:a2:91:8a:
d5:ec:2c:79:65:6e:30:4c:94:16:1e:3a:54:b9:08:
e3:f3:7d:e4:45:71:0d:a7:4f:c4:2d:57:9c:b9:e1:
c0:ad:9f:c9:f2:1d:af:ab:41:48:ef:7d:ff:ad:49:
af:07:30:30:57:2d:0b:6b:56:55:94:93:41:35:e3:
76:d3:4d:15:19:69:af:c8:8d:08:1a:f8:fb:c6:ea:
07:9d:5d:2b:0f:82:33:5e:ad:38:34:18:78:d3:70:
82:bf:8f:ac:dc:58:68:2a:b9:39:2a:79:61:ee:a1:
91:c5:32:78:b0:92:39:22:cd:9b:0f:49:51:48:a1:
1e:9f:40:a7:5d:34:1e:81:41:fd:6b:60:ed:fd:6d:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D8:2A:29:2C:13:54:94:C3:CE:36:E7:40:53:F3:33:7A:76:13:72
X509v3 Authority Key Identifier:
keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:15:51:d5:97:04:ca:66:c0:20:4a:2b:ea:d5:c5:e7:b2:5b:
e7:0e:0e:e3:55:8a:35:4d:f1:ed:57:40:b4:3a:ae:6b:03:b1:
3c:17:db:9e:52:da:61:a1:b1:1e:33:6e:c4:76:bd:9e:4d:a3:
be:ba:5b:05:14:7a:f0:f5:78:21:b5:fe:89:a2:e8:cf:68:27:
25:aa:4d:03:1d:d4:b0:40:c3:d9:4b:29:7e:51:47:1f:11:79:
8d:ee:9b:31:e0:ae:b8:e5:96:dd:1e:54:52:5d:3b:d4:57:a1:
24:57:22:66:74:74:c9:6d:bc:ca:ad:3a:27:59:84:92:b6:dd:
f0:67:cb:a7:93:7d:7e:06:cb:b2:38:ea:f0:30:8d:65:75:29:
27:c9:3c:70:e4:b1:63:4e:bc:be:93:bf:ac:76:96:4a:f3:6c:
36:61:3a:b1:50:1e:7d:aa:1c:6f:5f:36:c3:ed:b4:69:15:a1:
86:ce:58:4f:86:e3:93:df:62:11:21:b6:e4:18:75:82:dd:33:
7e:cb:cc:1f:f3:9e:2c:e0:ef:58:22:c8:99:18:2b:97:bb:43:
ab:fb:da:da:1c:5a:f7:c4:d2:e9:88:6b:c4:ac:be:f6:53:48:
34:a6:7a:db:68:27:54:b6:0d:bb:7d:df:f8:3e:6b:ca:4e:80:
3d:ae:bd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:41:37 2026 by rpki-client