Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
File: suRItKCPDkxYooPYBzWoqAPhDU4.mft (raw, json)
Hash identifier: x+AVMOHRMUkqCCH87r5xJj1WXWlvZ1Od5qemjhUDDlI=
Subject key identifier: A0:F7:76:1A:D1:D2:F9:9F:12:A9:F4:07:4C:92:2A:12:32:39:B1:F6
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 01A1DCF03AE54AD5CA3804BBFAEF31D07BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
Manifest number: 1B00
Signing time: Sun 15 Nov 2026 02:01:33 +0000
Manifest this update: Sun 15 Nov 2026 02:01:33 +0000
Manifest next update: Mon 16 Nov 2026 02:01:33 +0000
Files and hashes: 1: 6gi0D2d3F-6yRjXm-eX58bSWUUA.roa (hash: NKrlT1w6l/oPfwmwNC99xSyujc091Feg3snRea0OXPM=)
2: BFse6czCzhUX4BFCXNbQpH61aUc.roa (hash: lrRMx6suq3q2UqEU3Xlh4+QvJ0ImVI5zT7U/+FSxmC4=)
3: Ky8jp1Zp3SE33IK4OJ5ro_Au50s.roa (hash: 3YeTlhlPLg4f3wbYqV7xvH/ZVjip5tcjie4ghX8ZC2U=)
4: Qdkm6PKgiBsT4JZ1n8rJEzIQYHs.roa (hash: u+F0D46TeogunUYjDLBQ/aHLUk0cfPyyk8VSCqcft9w=)
5: SGh_0_StZ-bip9gscWJB5whR3RM.roa (hash: 6hZbIPbSJWU4puEyHHUPbKbE4av5+/Ai8H+XhwiWL6Q=)
6: _55ywDLnzvOKWe2unaSpuNQ0t3c.roa (hash: XA1Xcl34gTTJa1QUQQ662CXBI++I6u11CFStYV9ej58=)
7: slsZ68MPftYXN9pQnzxYluXDbhA.roa (hash: jrP6prWJ1ru05dcj4SCoZCFUzqKdj7enUCqjPJl+Z1U=)
8: snWlJ9KWiKllVlOYxcTSSk2w5Qc.roa (hash: ZxgfjmsocDadOVUIv+6VPgxBAaxcQnvX/Wg+wlyzBz8=)
9: suRItKCPDkxYooPYBzWoqAPhDU4.crl (hash: elEa8xjjv0IGxC1xPdYfJSVsirU1Blafnv2GxhzocBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:3a:e5:4a:d5:ca:38:04:bb:fa:ef:31:d0:7b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: Nov 15 02:01:33 2026 GMT
Not After : Nov 16 02:01:33 2026 GMT
Subject: CN=a0f7761ad1d2f99f12a9f4074c922a123239b1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b9:38:8d:e6:19:ec:ed:d7:75:31:ff:56:fb:
69:81:71:e5:5b:02:ab:eb:53:9d:1a:d3:18:bc:15:
47:55:95:a7:5d:95:69:11:27:0e:d7:da:f2:8d:b6:
2e:2d:e3:7e:78:84:90:69:42:15:ee:8d:6f:5a:e7:
cc:57:14:41:91:36:eb:46:5a:b6:a0:ff:44:1f:78:
56:d8:68:2b:4b:3e:d7:ea:25:18:ca:9f:c6:8b:39:
3f:ba:58:41:be:9b:d3:43:4f:39:c7:f6:60:7f:d3:
f6:3c:9d:f1:ce:77:ae:37:08:e0:dc:49:80:f0:63:
c6:78:76:11:33:b0:f0:3b:1f:08:06:3b:86:39:9e:
58:9b:f5:df:fc:c4:3e:8b:d0:34:b8:f9:fd:35:18:
06:c9:41:c2:4e:11:22:08:60:4a:31:31:a0:46:7c:
d0:5a:61:bd:e6:10:c2:5b:9e:82:e0:44:3c:4a:c8:
d4:d8:57:61:e2:c6:0b:a0:35:64:2d:58:30:ff:ce:
bf:5e:2d:68:16:61:33:30:11:62:0d:21:4b:f7:77:
65:29:85:af:12:10:0f:e1:54:ce:6a:8b:ea:4a:8b:
6d:cf:a9:38:2a:84:72:1f:a4:7e:5b:6b:96:89:e8:
b8:6a:ed:a6:59:a7:4d:b2:ae:99:1e:aa:b6:0d:4d:
69:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F7:76:1A:D1:D2:F9:9F:12:A9:F4:07:4C:92:2A:12:32:39:B1:F6
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1a:f4:a4:a0:3f:bb:2e:50:80:60:2a:d4:89:c9:3c:b7:9e:
f2:6b:0a:97:ca:80:74:ce:e4:d1:61:37:15:9c:6a:ab:0f:1a:
23:36:08:02:b7:0b:95:04:d1:59:74:d9:2c:79:29:17:fa:05:
e2:a2:e0:6a:69:85:8f:97:ab:88:5c:06:09:65:12:59:b1:49:
a5:cf:d0:42:2b:d1:ee:9d:c5:d3:22:58:97:f3:94:71:b1:70:
80:ed:f1:55:26:44:f3:9c:23:63:20:80:19:c7:57:86:49:0e:
89:83:c1:dc:4b:53:0c:41:bd:54:06:4a:64:7b:db:a8:92:01:
01:13:38:60:01:8a:d6:b5:84:c6:41:50:e3:a0:02:1f:6e:55:
5e:0d:90:4b:b9:d5:28:bf:5e:7f:2e:7b:fa:75:b2:6a:14:22:
82:b2:e5:c8:03:de:08:2c:29:3c:b6:03:39:dc:f5:9b:d0:43:
b5:c2:df:20:f2:cf:65:a3:89:b0:00:3e:36:11:aa:38:b0:ff:
21:c8:b8:2d:5e:68:41:e9:de:79:8d:ec:ac:1d:57:13:e3:97:
4d:84:fe:9e:d9:7d:26:d9:48:1d:f6:98:6f:fe:98:a3:d3:22:
ec:8c:a5:89:e9:22:6f:04:29:9c:cb:34:94:7f:9c:bf:bc:93:
bb:d1:c1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:15:46 2026 by rpki-client