Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
File: suORFp8MnyGqjy6J5zdccuxnT-s.mft (raw, json)
Hash identifier: RbpQLxp60ndlIuJjHSvSA6aRneOHdmjcQPkH1/qH8Po=
Subject key identifier: 50:DE:63:BB:85:82:99:C1:9A:1B:F4:47:ED:FF:2B:2F:18:13:A4:3D
Authority key identifier: B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
Certificate issuer: /CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Certificate serial: 019CAAC6C7883916D8D3126CB65C26040FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
Manifest number: 17D9
Signing time: Sun 01 Mar 2026 19:01:19 +0000
Manifest this update: Sun 01 Mar 2026 19:01:19 +0000
Manifest next update: Mon 02 Mar 2026 19:01:19 +0000
Files and hashes: 1: PaUq1i1qchD33WEhkgfziRXOQqo.roa (hash: 4jZTQPexjQrBRUzBh0uva4unQWrx3Cy+0TA6XIINReI=)
2: suORFp8MnyGqjy6J5zdccuxnT-s.crl (hash: sRvGagMgr8U75G9z5aK2B23XPTGByfmQzRzXpxCF1jU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:c7:88:39:16:d8:d3:12:6c:b6:5c:26:04:0f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Validity
Not Before: Mar 1 19:01:19 2026 GMT
Not After : Mar 2 19:01:19 2026 GMT
Subject: CN=50de63bb858299c19a1bf447edff2b2f1813a43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:f0:b2:68:3b:40:4e:50:70:d9:67:09:78:
d4:91:7c:60:38:54:e5:67:3d:99:7a:d7:dd:7e:c2:
2d:4f:9d:73:69:c4:ae:3d:c0:98:cc:18:d6:a4:aa:
e9:b4:43:e5:f3:3b:9c:62:2d:b6:91:d1:79:4d:50:
38:86:03:df:74:0e:fc:f9:07:3c:31:d1:6d:92:96:
10:92:e1:93:24:6c:c5:4c:3f:f2:14:3e:65:bb:e4:
cb:0e:ff:58:50:72:09:9d:aa:52:4d:08:51:3d:e4:
e4:20:46:83:77:2c:ea:2f:b4:18:b6:1a:d9:e1:ad:
0c:a7:68:f1:b8:31:fc:a2:b5:cd:d6:33:b9:c4:7a:
55:48:23:32:3a:7a:6b:8a:16:c5:de:21:4d:df:49:
9e:24:a1:42:21:f0:52:59:14:35:c1:d4:f6:83:b6:
22:c1:d1:2c:4a:1e:32:2c:32:c4:3a:63:ef:76:13:
e1:ba:27:0b:16:5f:01:1c:09:97:4e:ce:a5:ce:8f:
e9:a7:a5:49:24:b5:8b:73:4b:c7:9a:9d:b2:0f:99:
e7:ee:07:3b:5c:36:8f:8a:b2:d4:25:80:d0:4b:81:
8b:37:af:ce:88:ba:74:51:fa:73:7e:0c:69:c6:3c:
55:be:26:6d:8d:4d:80:b2:3e:61:de:56:a1:53:12:
36:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DE:63:BB:85:82:99:C1:9A:1B:F4:47:ED:FF:2B:2F:18:13:A4:3D
X509v3 Authority Key Identifier:
keyid:B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:44:d0:d2:8c:9c:36:32:ad:c6:4d:47:d2:2f:66:e9:81:f9:
c0:7c:47:bc:5a:59:e2:f6:75:0d:09:eb:e5:f5:15:a7:5c:c3:
40:0e:c0:1b:e6:b5:9b:3a:d5:f7:54:d9:4c:81:f7:9a:68:6c:
ff:79:20:b7:08:a5:7a:8c:b1:b2:e8:a5:23:38:5f:1a:8e:e9:
dc:27:fc:1a:df:34:06:63:e1:33:b3:c5:56:b0:c2:fe:77:c8:
d0:d6:4b:3c:bd:e0:40:ef:7e:c1:7b:44:c8:c0:3e:8a:d0:17:
05:8b:ed:73:e1:b3:22:66:83:4e:30:92:f6:85:2f:c2:6b:4c:
fc:fb:d7:9f:1c:11:e9:54:a3:10:e3:e8:63:76:64:1a:4f:df:
ce:79:ae:43:d5:9d:25:6b:d8:5d:2e:ee:36:ac:97:bc:1c:63:
02:a0:96:e9:69:92:76:b9:1c:42:3e:0e:b8:32:17:15:15:2b:
29:bc:aa:21:63:42:4b:00:97:14:9f:aa:98:90:be:9c:10:41:
1a:84:16:56:7f:80:5c:fb:74:80:ff:92:8e:80:96:53:54:30:
03:35:f6:73:52:f1:94:59:ee:d5:d2:92:57:6a:57:fb:a3:e3:
e5:b3:3a:9c:60:c7:27:75:01:62:11:46:aa:03:ad:20:f9:bf:
f4:69:a1:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxseIORbY0xJstlwmBA/MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZTM5MTE2OWYwYzlmMjFhYThmMmU4OWU3Mzc1YzcyZWM2
NzRmZWIwHhcNMjYwMzAxMTkwMTE5WhcNMjYwMzAyMTkwMTE5WjAzMTEwLwYDVQQD
Eyg1MGRlNjNiYjg1ODI5OWMxOWExYmY0NDdlZGZmMmIyZjE4MTNhNDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7Xwsmg7QE5QcNlnCXjUkXxgOFTl
Zz2ZetfdfsItT51zacSuPcCYzBjWpKrptEPl8zucYi22kdF5TVA4hgPfdA78+Qc8
MdFtkpYQkuGTJGzFTD/yFD5lu+TLDv9YUHIJnapSTQhRPeTkIEaDdyzqL7QYthrZ
4a0Mp2jxuDH8orXN1jO5xHpVSCMyOnprihbF3iFN30meJKFCIfBSWRQ1wdT2g7Yi
wdEsSh4yLDLEOmPvdhPhuicLFl8BHAmXTs6lzo/pp6VJJLWLc0vHmp2yD5nn7gc7
XDaPirLUJYDQS4GLN6/OiLp0UfpzfgxpxjxVviZtjU2Asj5h3lahUxI2kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDeY7uFgpnBmhv0R+3/Ky8YE6Q9MB8GA1UdIwQY
MBaAFLLjkRafDJ8hqo8uiec3XHLsZ0/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS84OGMyMDQtYmMzMC00YjlkLWI5ZWMt
NTY4NjI3OWVjOTZlLzEvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS84OGMyMDQtYmMzMC00YjlkLWI5ZWMtNTY4NjI3OWVjOTZl
LzEvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkTQ0oyc
NjKtxk1H0i9m6YH5wHxHvFpZ4vZ1DQnr5fUVp1zDQA7AG+a1mzrV91TZTIH3mmhs
/3kgtwileoyxsuilIzhfGo7p3Cf8Gt80BmPhM7PFVrDC/nfI0NZLPL3gQO9+wXtE
yMA+itAXBYvtc+GzImaDTjCS9oUvwmtM/PvXnxwR6VSjEOPoY3ZkGk/fznmuQ9Wd
JWvYXS7uNqyXvBxjAqCW6WmSdrkcQj4OuDIXFRUrKbyqIWNCSwCXFJ+qmJC+nBBB
GoQWVn+AXPt0gP+SjoCWU1QwAzX2c1LxlFnu1dKSV2pX+6Pj5bM6nGDHJ3UBYhFG
qgOtIPm/9Gmhww==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:30 2026 by rpki-client