Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
File: suORFp8MnyGqjy6J5zdccuxnT-s.mft (raw, json)
Hash identifier: 8TpkZSqpuapAHdPecCBwwnYM/l18MWD9D1rPg+i++hc=
Subject key identifier: 63:7A:58:AC:3D:FD:C4:1C:5A:93:59:3F:74:48:5C:88:CE:75:C6:A4
Authority key identifier: B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
Certificate issuer: /CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Certificate serial: 019D9A3E59703D9A5410C2DA73EAB64F6871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
Manifest number: 1855
Signing time: Fri 17 Apr 2026 07:01:10 +0000
Manifest this update: Fri 17 Apr 2026 07:01:10 +0000
Manifest next update: Sat 18 Apr 2026 07:01:10 +0000
Files and hashes: 1: PaUq1i1qchD33WEhkgfziRXOQqo.roa (hash: 4jZTQPexjQrBRUzBh0uva4unQWrx3Cy+0TA6XIINReI=)
2: suORFp8MnyGqjy6J5zdccuxnT-s.crl (hash: Q4pIG2zdt91v+xjO0NaIfa14pi+QfGpjjli0olgf1oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:59:70:3d:9a:54:10:c2:da:73:ea:b6:4f:68:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Validity
Not Before: Apr 17 07:01:10 2026 GMT
Not After : Apr 18 07:01:10 2026 GMT
Subject: CN=637a58ac3dfdc41c5a93593f74485c88ce75c6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:a0:af:44:89:e7:e7:79:38:63:dc:2e:79:
ab:71:17:fb:59:86:9a:fa:96:4f:aa:7b:76:ad:18:
77:02:44:60:56:68:72:bc:35:2b:8a:0a:69:d6:10:
01:1c:57:7b:23:42:65:01:76:ce:ea:f2:4a:5e:a8:
ab:fc:ac:b2:64:9a:80:76:82:7c:30:88:89:62:29:
3b:ad:37:32:a0:f6:72:f1:5b:02:1c:0d:69:10:2e:
05:b3:8e:a8:b6:2d:73:d3:19:e9:d6:3a:82:60:f0:
74:ec:ff:ab:67:cf:c7:13:76:e0:1b:a5:12:23:3d:
12:3a:24:51:7c:c6:38:e8:0a:33:1c:da:2e:95:88:
18:a8:a7:1a:3d:fc:07:cb:73:8d:2f:19:6e:ff:33:
71:8c:06:aa:ce:bc:61:6b:e7:53:24:80:89:f1:b8:
3a:64:aa:57:51:16:4c:10:df:2a:83:65:9e:9a:aa:
0c:f3:09:24:86:ba:a5:9f:36:e2:cd:37:ce:3f:43:
e2:60:c1:5f:79:58:e8:61:bc:b7:ab:9c:cb:f5:0a:
d3:9a:69:35:31:c4:38:2e:9f:7c:a2:ad:ed:8f:1e:
af:58:6c:50:d0:a4:da:a9:85:74:02:6b:f0:20:3d:
97:42:93:8c:bc:ed:87:f1:46:cb:fd:4c:c1:cd:a5:
ef:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7A:58:AC:3D:FD:C4:1C:5A:93:59:3F:74:48:5C:88:CE:75:C6:A4
X509v3 Authority Key Identifier:
keyid:B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b9:62:09:d3:96:11:c4:86:d8:59:cb:9c:02:02:d5:93:ac:
c5:07:2a:49:32:81:46:23:75:84:8f:6a:e6:31:86:c5:30:af:
40:3f:36:42:27:00:0b:0d:86:f4:77:1f:45:e1:a9:bb:e0:25:
a1:87:f2:9b:24:31:42:38:1b:65:7b:d6:6f:bc:ec:2d:91:ee:
f6:f6:d0:8e:88:7b:86:c1:fa:cb:de:31:f1:77:0a:16:e8:dd:
64:06:d0:3d:11:70:f5:2b:d0:8b:d1:3a:e8:9a:61:18:dc:d8:
5f:03:e1:30:eb:e2:36:e3:e4:65:f3:7f:ad:bb:bf:5a:8a:0d:
a2:bd:fa:4b:ee:a3:ce:de:75:2f:49:4c:a9:0c:2e:ce:43:fc:
e1:dc:78:b5:60:8c:d2:47:c0:1c:12:2f:b7:cb:70:b1:bf:ca:
26:89:03:9c:69:0e:85:23:a4:c0:c8:fd:6d:d9:e3:3e:d5:0c:
ef:84:14:56:19:28:79:e7:8e:ea:6f:65:d9:e3:c0:68:a6:6a:
c4:79:2a:fa:34:c9:79:33:12:04:85:b0:f0:12:32:0f:db:76:
b9:fa:c3:0e:48:4a:76:b0:f5:69:4f:1a:cc:58:d9:76:0c:6d:
70:37:cf:e0:c6:29:95:70:d9:ab:ee:b8:3d:e3:f8:5d:07:f8:
ad:21:91:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:30 2026 by rpki-client