Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
File: Su_P7VH_FY--aMzWC3s5vl8-riA.mft (raw, json)
Hash identifier: Y09SIuWlCQh5UyjiqEXjkbKW/Owe/0r42ZT/o8rxkPM=
Subject key identifier: D8:74:1C:8F:C3:69:35:70:65:C0:70:E5:64:BE:D1:C0:E2:25:33:1F
Authority key identifier: 4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
Certificate issuer: /CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Certificate serial: 019D984FE0953F0C95A85428B449CCF32E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 22:01:04 +0000
Manifest this update: Thu 16 Apr 2026 22:01:04 +0000
Manifest next update: Fri 17 Apr 2026 22:01:04 +0000
Files and hashes: 1: KUDAYGIsT3CXoWuYxHO7vusuZwM.roa (hash: 04pcVXnvwMaNPBLFWogLi25UblwMiRGuELwew3PlXfA=)
2: Su_P7VH_FY--aMzWC3s5vl8-riA.crl (hash: iM1A540LURDnZbGgU5JNIHKvxlMfpbClVJs003aoV8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:e0:95:3f:0c:95:a8:54:28:b4:49:cc:f3:2e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Validity
Not Before: Apr 16 22:01:04 2026 GMT
Not After : Apr 17 22:01:04 2026 GMT
Subject: CN=d8741c8fc369357065c070e564bed1c0e225331f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7b:19:a5:9f:13:fd:39:88:dd:a4:d1:96:88:
50:57:6a:72:e3:91:3b:bd:6c:17:06:fe:36:5d:98:
4d:4b:86:d4:eb:68:4c:87:12:cc:28:7f:93:87:06:
2b:66:37:3f:b2:27:e6:c1:28:20:da:19:6a:e4:19:
25:d8:1d:ba:58:8d:58:8c:19:65:24:12:5a:72:32:
0d:08:bb:f5:dc:3c:1d:c3:08:c7:f4:8b:74:d2:10:
f0:9a:dd:66:79:7e:77:7e:cf:a9:af:70:47:3f:40:
23:98:20:37:c6:d3:0f:73:67:a0:a1:18:a6:0b:bf:
07:23:3b:cc:14:a4:4f:c5:58:01:c7:c8:5e:f6:e7:
f5:00:c8:29:0d:32:62:03:bb:29:d7:54:a9:8a:a0:
a0:f3:dc:96:c0:0c:b9:6f:93:02:a7:f6:93:8d:b1:
96:c8:1d:ed:27:75:4e:54:44:de:cd:d6:6f:80:ee:
41:e6:2c:d9:d7:e2:b4:b7:b5:37:26:48:9a:74:7a:
e5:f9:fa:3a:6d:c4:50:04:56:66:20:36:d4:da:a0:
76:4e:76:7e:1c:85:db:05:e2:ce:74:bd:64:ba:7a:
08:8a:79:b5:3c:b5:30:59:8a:c4:a5:f0:b1:83:a0:
b7:3d:e6:62:ab:07:99:08:bd:d2:13:83:be:2b:80:
01:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:74:1C:8F:C3:69:35:70:65:C0:70:E5:64:BE:D1:C0:E2:25:33:1F
X509v3 Authority Key Identifier:
keyid:4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:60:cb:ef:42:38:2c:a1:55:92:bd:f3:ef:4c:8e:85:b9:33:
be:14:d6:72:ac:66:04:3e:45:22:4c:c1:cc:a1:ee:3f:b4:89:
59:40:10:a7:34:c0:91:ea:ce:34:8e:8a:d8:a9:14:14:e8:06:
d9:da:0c:4a:28:22:c7:a6:cb:c4:3f:7d:cf:18:a9:dd:aa:1a:
b7:1e:39:39:d0:e9:2f:f1:00:34:ed:b2:65:52:6a:6c:ed:1e:
b4:e4:c7:5a:6a:16:1a:b0:1d:fc:4b:5e:1d:9b:fa:6f:2b:a0:
ae:e7:a5:68:18:90:ee:bc:16:b4:a6:ff:bd:f6:80:3e:e3:e1:
9d:48:ac:f8:13:73:76:5c:9c:c4:b5:2d:e8:3e:0a:ff:88:df:
c1:54:d5:25:2d:8d:6e:5e:6b:b3:8f:24:1d:28:30:57:68:fc:
5a:93:c2:1d:95:23:c8:0d:2e:93:0d:d6:db:cf:4a:32:f6:bd:
56:98:ef:c7:84:41:04:f5:7c:aa:92:d9:b4:40:f5:50:3d:cd:
3a:a2:32:61:1a:0d:6a:06:68:6d:5c:f9:bf:4b:86:4b:c2:fc:
6a:d9:21:6a:b3:1d:49:e6:a2:bd:ef:70:d3:4b:12:ba:6a:74:
1c:03:ea:b7:46:ac:da:ef:b5:22:89:c1:9c:90:fc:81:f3:62:
36:0e:7e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:48 2026 by rpki-client