Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
File: SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft (raw, json)
Hash identifier: GIdc8Qqq9DcoYg6ClMChsshI6CG8WaneuglWywvdBlY=
Subject key identifier: 9E:D6:13:B0:95:9D:0F:05:BD:DA:92:1C:36:F3:80:D6:4D:AD:40:0D
Authority key identifier: 4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
Certificate issuer: /CN=4aebd4543df29da64e4232ef3791f534573c12f1
Certificate serial: 019CAB3474D9E09C20C63E18241E89EA4AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
Manifest number: 0C4A
Signing time: Sun 01 Mar 2026 21:01:07 +0000
Manifest this update: Sun 01 Mar 2026 21:01:07 +0000
Manifest next update: Mon 02 Mar 2026 21:01:07 +0000
Files and hashes: 1: SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl (hash: hJvW7g2UFs65XyX35dN8PAjwTg4mCJGXhPERn4W8vMY=)
2: kypMcuIm-WpR0ZjTrQvN18lgASs.roa (hash: rpyCcsQ2xUEDWY8mMlJ3ItAHPdOq2MVR8TSSQ09U5AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:74:d9:e0:9c:20:c6:3e:18:24:1e:89:ea:4a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aebd4543df29da64e4232ef3791f534573c12f1
Validity
Not Before: Mar 1 21:01:07 2026 GMT
Not After : Mar 2 21:01:07 2026 GMT
Subject: CN=9ed613b0959d0f05bdda921c36f380d64dad400d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:84:33:24:b3:ae:25:23:4f:2a:aa:89:73:
58:f2:79:da:ef:b5:d8:6c:b4:a8:a3:96:64:a1:1b:
20:16:6b:bc:0d:a8:e8:82:d4:7d:7d:f2:40:ab:50:
9a:08:07:99:e8:d3:25:02:3b:ea:17:f4:f9:05:45:
6f:59:06:76:b9:5f:7d:06:06:b1:4e:33:8e:77:e6:
52:f4:b2:c2:d9:12:82:fc:05:95:85:4a:c6:e7:88:
e9:a4:29:33:a6:ad:52:97:67:4c:de:32:8b:4b:0b:
fc:87:5a:00:73:5f:ed:f4:a5:95:20:95:3e:09:81:
0b:42:a2:c1:5f:a3:e3:4c:3e:ca:51:6e:8c:ed:a6:
f9:a8:7c:cc:50:5b:5d:4b:c1:97:37:70:b1:23:0b:
f2:bb:a7:5b:aa:94:ce:48:7a:bd:92:6a:fc:84:66:
53:cc:e7:65:c8:52:dd:05:49:70:ad:09:09:8e:af:
f9:7c:e6:eb:c3:de:45:43:6f:82:a8:7a:f6:d1:6c:
00:57:31:ef:a7:b5:c3:0a:eb:bc:19:e2:53:a9:f3:
79:9f:60:c6:bb:a0:3c:02:1f:84:25:0c:b8:d5:5f:
2e:45:39:28:50:48:52:0b:6e:e0:fe:98:dc:9f:2f:
90:3c:7b:c6:54:88:14:70:07:9a:47:bb:fb:e2:00:
22:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D6:13:B0:95:9D:0F:05:BD:DA:92:1C:36:F3:80:D6:4D:AD:40:0D
X509v3 Authority Key Identifier:
keyid:4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:93:e0:ad:b0:35:b3:f0:39:5c:fa:b7:d2:a5:87:a0:f9:07:
59:66:ae:09:5c:87:53:39:c3:0a:3b:3e:7f:e9:25:cc:49:e3:
49:5f:e2:80:9a:d7:69:89:b0:a1:e6:ae:2d:b1:2e:09:0b:4f:
13:51:7d:e1:d8:cc:bd:94:7a:f7:d3:8f:fc:b9:a9:19:f0:82:
9f:30:23:71:96:79:02:02:9d:7f:d9:03:d5:42:9b:16:66:52:
af:c7:8a:c0:b1:6c:4c:3d:d0:75:72:ea:13:4f:bc:d1:a6:b3:
ea:6d:c1:55:64:cb:8d:10:6c:ff:90:fc:25:02:0a:fa:e7:d5:
7b:61:9e:36:84:50:54:2c:78:9a:6a:fe:a1:aa:b0:70:b3:f2:
5e:84:24:5f:5e:dc:32:ab:49:2a:4c:56:13:3d:fd:7f:9f:37:
ef:5a:8a:3a:0b:4f:2b:88:65:de:5f:cf:6b:ae:f1:e6:79:ce:
23:3f:6c:b3:02:e8:06:ec:eb:cc:72:19:24:ce:09:a0:9d:d1:
82:83:8b:4f:0b:76:6d:df:6d:9e:8a:45:c2:f5:03:59:6e:94:
06:07:8e:2e:1d:2b:61:30:62:a0:df:41:ac:13:b9:99:fc:8c:
1e:b4:f8:22:bb:55:8e:7e:26:0c:c2:b5:c1:19:a4:52:23:79:
af:30:46:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:43 2026 by rpki-client