Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
File: Su-5nSoG7pneqVZvFr8ibbPlbJI.mft (raw, json)
Hash identifier: BFWg+enRt85XRQAzRy4S6qUVVworYH3on2uJy04KnLw=
Subject key identifier: E8:B8:8D:03:61:8E:CA:D9:3F:E1:38:D5:46:1E:FF:7E:77:8B:34:6A
Authority key identifier: 4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
Certificate issuer: /CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Certificate serial: 019CAC0FAEE40F4048A5968A79F480DAEF05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 01:00:34 +0000
Manifest this update: Mon 02 Mar 2026 01:00:34 +0000
Manifest next update: Tue 03 Mar 2026 01:00:34 +0000
Files and hashes: 1: 0qSgEj9RKFqvqN-inwjjWZFI1pg.roa (hash: k4mc0z9gAu2JzOR/GrWxi/A3ANg5O3FYVYf/5aBTRK4=)
2: Su-5nSoG7pneqVZvFr8ibbPlbJI.crl (hash: y/JEZ4mk9nUIkMQV9Dayk9V2ORyRsx/F0pSF2sRu99k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:ae:e4:0f:40:48:a5:96:8a:79:f4:80:da:ef:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Validity
Not Before: Mar 2 01:00:34 2026 GMT
Not After : Mar 3 01:00:34 2026 GMT
Subject: CN=e8b88d03618ecad93fe138d5461eff7e778b346a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:63:9a:35:fa:b1:25:da:2c:28:c9:6c:34:
81:b9:33:c3:a0:0e:cb:49:ce:4f:f7:46:09:95:c6:
63:10:00:1e:18:eb:a9:5a:f3:57:c3:9a:59:fb:dc:
f2:6e:b2:f0:ee:8d:e6:26:ec:11:90:1a:51:83:d6:
c2:3b:d6:b5:7c:49:de:fe:9b:d6:2e:12:b1:a9:78:
64:c8:ad:6b:59:a5:19:7a:d5:83:a8:93:ca:e0:84:
aa:92:1b:52:c7:4a:9b:02:99:31:d3:ec:db:56:cd:
f5:69:b3:31:98:c7:8b:e1:5e:87:7d:0b:be:11:40:
a8:57:13:ac:04:bb:81:36:15:04:b0:ab:0e:27:1d:
3b:84:ee:cb:3b:c3:bf:e9:e8:cf:b6:79:c6:fa:5d:
d5:d8:e0:ff:16:cf:72:7b:a0:82:5c:4c:32:1f:74:
33:9a:10:21:42:bd:f3:0b:b8:7f:06:b6:e6:c3:c6:
44:13:d9:fc:4c:05:71:cf:f8:4d:92:ac:71:56:fe:
db:e3:73:95:e7:97:30:32:d3:23:a5:24:b0:5e:96:
63:0d:ba:19:d2:31:dd:5a:bf:0a:bd:c0:bf:3c:03:
3c:df:52:6e:44:c6:20:98:0c:2c:65:4f:55:85:83:
74:09:34:51:cc:3f:d2:8a:6a:9a:ea:f4:9a:63:98:
5c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B8:8D:03:61:8E:CA:D9:3F:E1:38:D5:46:1E:FF:7E:77:8B:34:6A
X509v3 Authority Key Identifier:
keyid:4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:05:46:fd:3d:8a:e9:c5:c5:6d:35:f1:bb:dc:b8:10:8e:b2:
f2:3d:91:f5:74:f9:c3:9b:ac:b8:f2:0c:c5:43:25:23:d4:3f:
8e:aa:13:f2:91:83:6a:f8:62:de:58:e9:8c:18:47:73:ee:fc:
ed:14:31:aa:5f:c7:af:e7:5d:b3:05:ec:d2:8a:53:64:20:da:
e4:6a:fb:87:23:74:0c:3c:5d:97:e3:c1:57:fa:15:a1:4f:2c:
a3:5f:b2:ee:09:04:94:0c:8d:1d:16:fb:48:5a:65:b1:bd:13:
d0:88:ee:f4:02:35:97:99:37:cc:64:53:3e:6b:39:7b:7a:10:
59:c3:cd:bd:42:81:a8:f6:cc:bf:b7:e2:e1:eb:40:ab:67:83:
93:a1:4c:39:b9:82:72:32:27:7a:37:f8:8e:58:2d:b8:05:21:
03:79:b6:fe:57:d5:f2:80:1b:de:9f:c8:1c:f4:d3:f1:42:81:
5c:fa:e3:78:ac:5d:40:8c:d7:8d:10:e9:dc:aa:9d:a0:a2:2e:
da:f1:80:d1:98:4c:f4:75:02:4b:7a:a6:ed:69:8b:69:ea:a1:
bc:cb:d6:e7:76:a1:58:7d:9e:93:7a:8a:e2:60:fd:e8:47:2a:
56:fe:94:e7:63:c9:10:45:df:a7:64:e1:cb:7e:be:65:b4:cf:
76:f6:78:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:33 2026 by rpki-client