Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
File: Su-5nSoG7pneqVZvFr8ibbPlbJI.mft (raw, json)
Hash identifier: H+J+5bdQexvL3Bv27jYS5Nm0cI8DbIAlRVQ18KstzJ8=
Subject key identifier: CD:31:E3:02:E3:A9:85:48:AE:FF:5E:37:72:97:7F:4D:30:64:FD:F3
Authority key identifier: 4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
Certificate issuer: /CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Certificate serial: 019D9998FFC3D719AC53CB98617D8932B36B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 04:00:34 +0000
Manifest this update: Fri 17 Apr 2026 04:00:34 +0000
Manifest next update: Sat 18 Apr 2026 04:00:34 +0000
Files and hashes: 1: 0qSgEj9RKFqvqN-inwjjWZFI1pg.roa (hash: k4mc0z9gAu2JzOR/GrWxi/A3ANg5O3FYVYf/5aBTRK4=)
2: Su-5nSoG7pneqVZvFr8ibbPlbJI.crl (hash: IzXxw7BufVk2yyJRuCCo9nCqCjAmxhrH7XwS7flXDDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:ff:c3:d7:19:ac:53:cb:98:61:7d:89:32:b3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Validity
Not Before: Apr 17 04:00:34 2026 GMT
Not After : Apr 18 04:00:34 2026 GMT
Subject: CN=cd31e302e3a98548aeff5e3772977f4d3064fdf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:22:28:76:b4:73:0b:9b:74:ef:1e:fb:f8:04:
ed:4f:5d:a4:e6:d4:11:6e:a2:85:7c:af:48:c6:5e:
b3:cf:c5:84:27:3f:29:aa:e8:ef:38:c9:d5:e9:c4:
83:75:17:d8:2d:01:94:df:e9:08:40:11:8c:5c:10:
11:7f:c4:1a:79:92:94:9c:0c:4f:2d:ee:74:58:8e:
af:7e:01:94:3f:98:1b:42:52:bd:c0:f0:d5:f8:5e:
df:1b:44:92:8e:9e:a4:78:00:8e:57:26:65:a6:68:
41:31:3c:17:22:18:27:34:a7:8e:50:f1:cc:fd:4a:
27:49:e7:2f:4c:f5:a4:19:9c:91:f3:04:cf:cd:7d:
3e:c0:38:53:3c:b7:92:51:53:17:eb:cb:e2:44:b6:
db:0f:3b:5b:ce:45:c8:20:d7:f4:7e:28:57:3a:ca:
0d:02:fa:ac:02:ca:7c:e3:5c:4e:33:59:c1:50:69:
46:61:84:ae:1f:5d:fc:5e:38:8a:9f:93:ce:a5:e1:
d7:bb:38:09:22:e8:b6:fd:7e:96:49:95:ab:89:41:
3c:b8:bd:b1:5c:7a:25:28:32:82:7a:74:ae:0a:9c:
7a:fe:d2:16:5d:5c:d5:3a:5c:1b:52:7c:30:68:3b:
10:f0:a4:dd:7f:99:6d:3d:bd:a3:be:b1:21:26:ea:
e7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:31:E3:02:E3:A9:85:48:AE:FF:5E:37:72:97:7F:4D:30:64:FD:F3
X509v3 Authority Key Identifier:
keyid:4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:25:8b:2f:eb:ad:71:ba:f5:e7:3e:5b:85:0b:84:5f:82:50:
b4:73:4f:4c:b1:7b:ef:27:d9:d7:7f:96:b9:4d:a8:df:18:76:
13:cd:aa:5d:c8:c2:c7:54:23:c6:75:09:d7:0d:28:32:69:c8:
49:6a:81:5b:68:7f:26:7f:1f:1a:33:11:7b:50:4e:08:59:67:
81:b5:8c:ce:4e:6a:47:eb:05:15:94:97:ce:86:2d:4d:07:ac:
c9:c2:5f:61:e1:39:6b:09:3e:58:94:9b:90:0b:d0:a6:09:e0:
7b:71:48:73:1d:a1:2d:b2:d4:40:f8:2f:78:dc:ff:77:05:3e:
32:fa:ab:b9:ed:94:72:b0:97:25:fa:80:b1:5e:70:4c:4d:fd:
97:ce:5b:c5:b7:0a:08:cd:15:fc:a4:ee:f0:68:08:6f:fb:99:
12:cd:bd:bb:31:da:71:be:d4:a6:e8:00:6e:44:b4:bf:75:29:
a0:80:96:ff:09:64:7a:e8:5c:fa:de:d1:a3:cc:0e:72:f2:86:
f3:a2:75:6d:44:3d:59:19:0b:97:3b:63:ad:30:8b:a5:08:c4:
59:bf:d8:27:ad:07:17:a2:b8:ba:f9:17:95:fe:23:05:b2:86:
a5:99:88:ee:59:22:99:a5:4d:1c:22:38:32:79:48:bc:6a:74:
c4:10:03:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmP/D1xmsU8uYYX2JMrNrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZWZiOTlkMmEwNmVlOTlkZWE5NTY2ZjE2YmYyMjZkYjNl
NTZjOTIwHhcNMjYwNDE3MDQwMDM0WhcNMjYwNDE4MDQwMDM0WjAzMTEwLwYDVQQD
EyhjZDMxZTMwMmUzYTk4NTQ4YWVmZjVlMzc3Mjk3N2Y0ZDMwNjRmZGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiIodrRzC5t07x77+ATtT12k5tQR
bqKFfK9Ixl6zz8WEJz8pqujvOMnV6cSDdRfYLQGU3+kIQBGMXBARf8QaeZKUnAxP
Le50WI6vfgGUP5gbQlK9wPDV+F7fG0SSjp6keACOVyZlpmhBMTwXIhgnNKeOUPHM
/UonSecvTPWkGZyR8wTPzX0+wDhTPLeSUVMX68viRLbbDztbzkXIINf0fihXOsoN
AvqsAsp841xOM1nBUGlGYYSuH138XjiKn5POpeHXuzgJIui2/X6WSZWriUE8uL2x
XHolKDKCenSuCpx6/tIWXVzVOlwbUnwwaDsQ8KTdf5ltPb2jvrEhJurnJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0x4wLjqYVIrv9eN3KXf00wZP3zMB8GA1UdIwQY
MBaAFErvuZ0qBu6Z3qlWbxa/Im2z5WySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3UtNW5Tb0c3cG5lcVZadkZyOGliYlBsYkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xNjlhM2ItNmE3My00OWVjLWFmZmEt
ZWQwYTdhYmE4Y2IyLzEvU3UtNW5Tb0c3cG5lcVZadkZyOGliYlBsYkpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8xNjlhM2ItNmE3My00OWVjLWFmZmEtZWQwYTdhYmE4Y2Iy
LzEvU3UtNW5Tb0c3cG5lcVZadkZyOGliYlBsYkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiWLL+ut
cbr15z5bhQuEX4JQtHNPTLF77yfZ13+WuU2o3xh2E82qXcjCx1QjxnUJ1w0oMmnI
SWqBW2h/Jn8fGjMRe1BOCFlngbWMzk5qR+sFFZSXzoYtTQesycJfYeE5awk+WJSb
kAvQpgnge3FIcx2hLbLUQPgveNz/dwU+Mvqrue2UcrCXJfqAsV5wTE39l85bxbcK
CM0V/KTu8GgIb/uZEs29uzHacb7UpugAbkS0v3UpoICW/wlkeuhc+t7Ro8wOcvKG
86J1bUQ9WRkLlztjrTCLpQjEWb/YJ60HF6K4uvkXlf4jBbKGpZmI7lkimaVNHCI4
MnlIvGp0xBADVQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:07 2026 by rpki-client