Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/950a20-599a-4e78-998c-a769db907bf4/1/suXMb3FVOXdgDMQRu-uYjRZjHnU.mft
File: suXMb3FVOXdgDMQRu-uYjRZjHnU.mft (raw, json)
Hash identifier: /z0CIsxjhPi+O45brf/b1c98KdYPPwl946QgmbE3eG4=
Subject key identifier: 04:A4:F3:08:C1:AE:C3:E8:E8:57:B4:9B:7C:25:48:A7:6A:4E:E4:3D
Authority key identifier: B2:E5:CC:6F:71:55:39:77:60:0C:C4:11:BB:EB:98:8D:16:63:1E:75
Certificate issuer: /CN=b2e5cc6f71553977600cc411bbeb988d16631e75
Certificate serial: 01A0D6F0F55DCA5ACE1890D10488D1B15149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suXMb3FVOXdgDMQRu-uYjRZjHnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/950a20-599a-4e78-998c-a769db907bf4/1/suXMb3FVOXdgDMQRu-uYjRZjHnU.mft
Manifest number: 41
Signing time: Fri 25 Sep 2026 05:01:50 +0000
Manifest this update: Fri 25 Sep 2026 05:01:50 +0000
Manifest next update: Sat 26 Sep 2026 05:01:50 +0000
Files and hashes: 1: suXMb3FVOXdgDMQRu-uYjRZjHnU.crl (hash: Ob89z9+ibVEsCFjtt0MDyzNe6AKEOkcDJ7SwMOQahvc=)
2: x4cPD1EJXBWEbFTeeGp8lHvzP6s.roa (hash: 1c7bHKSm2FryEiD26IsKwnBSp5MMVBFvGXNakIgfTYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/950a20-599a-4e78-998c-a769db907bf4/1/suXMb3FVOXdgDMQRu-uYjRZjHnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/950a20-599a-4e78-998c-a769db907bf4/1/suXMb3FVOXdgDMQRu-uYjRZjHnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/suXMb3FVOXdgDMQRu-uYjRZjHnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 05:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:f5:5d:ca:5a:ce:18:90:d1:04:88:d1:b1:51:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e5cc6f71553977600cc411bbeb988d16631e75
Validity
Not Before: Sep 25 05:01:50 2026 GMT
Not After : Sep 26 05:01:50 2026 GMT
Subject: CN=04a4f308c1aec3e8e857b49b7c2548a76a4ee43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2c:0c:f8:39:b4:8e:b6:07:eb:84:d7:1c:14:
a6:93:77:4d:be:98:b3:08:23:e3:da:f3:bc:d5:d5:
f2:0d:44:2f:c8:c5:80:81:47:04:5d:9c:3b:73:a6:
be:73:90:95:9a:a4:8f:49:29:4f:20:49:53:37:fa:
fc:8e:38:30:a8:43:4f:90:4d:d2:a8:52:fa:f6:dd:
cc:da:19:56:88:93:bf:db:25:3f:79:ed:32:a7:de:
78:23:5d:da:d2:10:2c:04:5c:9b:e6:c5:77:95:10:
ef:73:7f:81:3d:92:9f:e1:08:dd:68:9f:1e:d6:29:
79:13:b5:51:b2:dc:9b:22:52:65:eb:3d:a7:ce:5b:
35:3b:3d:fb:c4:89:cc:67:93:ed:b9:82:01:e8:24:
ab:18:5c:fb:b2:18:7d:2c:bb:d2:ef:54:05:57:b0:
f0:45:32:65:30:e3:82:80:ea:68:24:1a:7e:25:ec:
92:01:f9:78:9e:cc:93:44:fc:83:29:88:a0:8b:2c:
56:f3:a7:1d:5f:da:7a:2d:69:1a:b3:62:a4:a3:19:
9b:22:19:a0:90:e2:b8:9b:f2:5e:68:73:55:47:a2:
df:1a:b7:be:cb:ee:1a:ed:ff:21:95:99:63:bf:28:
20:5a:4a:59:7b:66:b2:ad:4b:f0:c7:cf:c8:83:18:
e0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A4:F3:08:C1:AE:C3:E8:E8:57:B4:9B:7C:25:48:A7:6A:4E:E4:3D
X509v3 Authority Key Identifier:
keyid:B2:E5:CC:6F:71:55:39:77:60:0C:C4:11:BB:EB:98:8D:16:63:1E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suXMb3FVOXdgDMQRu-uYjRZjHnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/950a20-599a-4e78-998c-a769db907bf4/1/suXMb3FVOXdgDMQRu-uYjRZjHnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/950a20-599a-4e78-998c-a769db907bf4/1/suXMb3FVOXdgDMQRu-uYjRZjHnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:cf:f2:f3:bd:14:05:cc:cb:2d:5f:0a:95:ed:7c:96:2e:08:
e6:20:2d:40:ae:89:9d:fe:7c:12:df:52:91:26:c3:0c:3a:90:
17:1f:26:4d:fd:58:25:e0:87:ec:4d:2e:5d:59:1a:f5:66:20:
8d:a1:ae:2b:b2:71:2c:0e:0a:1e:d4:ab:c0:5a:e1:65:e3:4e:
6b:0c:04:23:8a:32:ae:a1:ef:9a:37:8a:b4:2a:58:88:b9:02:
ab:70:ef:61:88:4b:7b:47:2b:53:21:12:4e:cd:a2:99:0a:53:
e0:e8:6c:db:bf:d1:08:fe:0e:66:f3:fb:51:f5:a8:80:25:b1:
ca:16:87:af:4c:14:f8:7d:01:da:84:3e:c2:d0:ed:7a:4d:98:
54:a3:78:3a:6a:c7:9d:27:54:db:3d:a6:7b:48:14:b6:71:ac:
0a:d0:33:ae:c5:a5:f2:b0:06:f3:a3:cb:ab:58:49:56:14:74:
52:d2:aa:af:92:d2:b6:7b:1b:f3:db:eb:f7:d8:f7:33:d7:2a:
51:4c:d2:26:a2:b5:38:e8:71:dd:e3:d8:6a:8d:88:31:49:da:
27:0e:c9:92:48:8b:11:d6:08:59:23:79:dd:d3:b2:3d:e6:38:
ba:4d:66:4b:88:0c:7f:8a:7d:7f:18:1e:cb:a2:6d:75:23:aa:
e1:f0:82:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:21:20 2026 by rpki-client