Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
File: suORFp8MnyGqjy6J5zdccuxnT-s.mft (raw, json)
Hash identifier: I28LnQUQhJLBRPWYEZDiSIDOoZlupGIF9ad9zkTWwEs=
Subject key identifier: E2:99:E4:84:E7:E6:50:87:90:04:47:9F:6A:AB:EC:45:1F:54:36:47
Authority key identifier: B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
Certificate issuer: /CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Certificate serial: 019CACB5670559EB5ACBA99864ACF5761460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
Manifest number: 17DA
Signing time: Mon 02 Mar 2026 04:01:35 +0000
Manifest this update: Mon 02 Mar 2026 04:01:35 +0000
Manifest next update: Tue 03 Mar 2026 04:01:35 +0000
Files and hashes: 1: PaUq1i1qchD33WEhkgfziRXOQqo.roa (hash: 4jZTQPexjQrBRUzBh0uva4unQWrx3Cy+0TA6XIINReI=)
2: suORFp8MnyGqjy6J5zdccuxnT-s.crl (hash: IjsKYqBEwWeykMsod5IIODWg3UA6FWqL9DsZMHAbeWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:67:05:59:eb:5a:cb:a9:98:64:ac:f5:76:14:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Validity
Not Before: Mar 2 04:01:35 2026 GMT
Not After : Mar 3 04:01:35 2026 GMT
Subject: CN=e299e484e7e650879004479f6aabec451f543647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e0:39:e4:2c:1d:90:5e:cf:c1:84:32:6e:60:
89:a2:20:7c:9a:a2:14:bf:57:b8:1f:24:04:3a:6d:
6d:ed:e8:ac:58:fc:d8:64:56:e8:b0:a0:8f:9d:e6:
32:04:cc:60:56:55:a4:f5:67:f0:0c:54:54:65:fb:
5f:14:e3:18:e5:63:40:7b:f7:c2:8c:3e:f1:19:cd:
53:9b:8e:dd:cd:a6:37:98:0f:b1:6a:b3:d6:f1:f9:
6a:0f:ae:9d:13:08:92:a1:2c:0c:e7:64:8a:73:a0:
fe:89:9f:86:15:69:aa:76:2d:c8:63:90:24:6b:a3:
46:ce:49:fe:b0:83:44:2c:ec:31:69:5f:88:68:b7:
c8:7a:e3:77:a7:47:07:bd:e6:74:28:43:f7:4a:4b:
20:b3:67:cf:06:ab:3f:96:0e:59:72:d2:64:dd:6a:
e8:a3:59:11:5b:b2:eb:a1:32:e1:57:07:9a:2d:93:
83:bf:c8:0e:5b:5a:44:7f:16:30:d3:40:4e:3d:a4:
28:ee:33:81:6f:1f:8e:31:95:c0:96:10:63:94:8f:
e6:56:92:fd:47:88:0b:f2:e8:de:1a:a8:68:e6:c8:
00:03:2c:4f:c8:43:bd:9c:c4:14:f7:d1:52:4b:6f:
1d:9d:95:9c:50:a0:8a:5f:d6:5e:b5:92:39:fc:e4:
07:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:99:E4:84:E7:E6:50:87:90:04:47:9F:6A:AB:EC:45:1F:54:36:47
X509v3 Authority Key Identifier:
keyid:B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d4:96:b1:df:b2:fd:1c:c0:3b:45:f9:4c:a2:bb:0e:31:cc:
70:d3:7e:79:5e:cc:fd:a4:82:a9:31:fa:cf:78:8e:33:52:61:
a8:ed:23:a7:03:44:30:56:aa:85:10:b7:62:41:5d:20:10:f0:
12:d1:58:07:ee:cc:ca:55:ee:05:46:b6:90:4b:13:8d:5d:29:
9a:39:71:a7:e7:3a:3d:43:c6:00:d2:c5:ce:ad:94:19:1a:63:
c3:ff:26:8e:65:c5:f0:a4:a5:30:1f:3c:b6:42:34:cb:f0:56:
c5:90:06:18:80:8b:06:0b:51:3e:ea:5b:33:38:f1:b9:17:ee:
43:7d:b2:a8:bf:82:e8:26:fa:2a:5e:7d:5e:53:45:3f:bd:de:
31:16:16:4f:e2:08:34:05:de:63:3d:2f:11:73:dc:bf:7e:7f:
d3:d9:7e:0f:08:49:93:5e:73:36:1a:a5:16:98:15:69:27:83:
48:ff:24:cf:75:f0:3d:7d:20:15:81:cc:0e:b4:bb:cc:29:43:
8b:95:f3:58:bf:ab:d7:91:1e:56:f2:df:b5:6d:ff:59:28:9f:
ed:aa:ac:d3:f5:a5:77:a1:92:91:b5:6b:c6:f7:b9:4f:1f:c4:
dd:73:57:88:c0:bb:7a:b4:a5:29:4e:e2:7e:aa:47:8f:1a:6d:
ba:c5:c1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:15 2026 by rpki-client