Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
File: Su_P7VH_FY--aMzWC3s5vl8-riA.mft (raw, json)
Hash identifier: 89QFCNvqRTmsKsOMnRDjzt7iylO/kJYS1jis1Sj24Ts=
Subject key identifier: 39:47:26:EE:11:4D:4E:5A:1D:46:CA:D0:4B:D5:6C:18:A4:A5:D0:F6
Authority key identifier: 4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
Certificate issuer: /CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Certificate serial: 019CAAC629BC26011674F947113C08F17008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:00:39 +0000
Manifest this update: Sun 01 Mar 2026 19:00:39 +0000
Manifest next update: Mon 02 Mar 2026 19:00:39 +0000
Files and hashes: 1: KUDAYGIsT3CXoWuYxHO7vusuZwM.roa (hash: 04pcVXnvwMaNPBLFWogLi25UblwMiRGuELwew3PlXfA=)
2: Su_P7VH_FY--aMzWC3s5vl8-riA.crl (hash: NHSFhAQxQarOxP+XP65pKZl72AXJ0gFToIJUQS2zcuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:29:bc:26:01:16:74:f9:47:11:3c:08:f1:70:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Validity
Not Before: Mar 1 19:00:39 2026 GMT
Not After : Mar 2 19:00:39 2026 GMT
Subject: CN=394726ee114d4e5a1d46cad04bd56c18a4a5d0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:66:76:87:30:0d:37:70:01:58:8d:50:d2:3f:
33:a3:a4:b3:d3:84:d9:8b:85:b6:f9:6f:0b:c9:a1:
cb:7a:9d:aa:55:a9:d2:63:42:25:f0:26:51:8a:23:
f9:c4:12:67:da:cb:e8:a2:1a:81:c8:df:f9:eb:0c:
31:38:ff:c6:ff:a5:96:32:7c:03:89:28:26:1f:3e:
8a:45:0c:de:ea:3a:84:21:2d:ac:d2:32:fd:76:3b:
27:ca:af:fa:0c:2c:5a:f5:9d:42:52:2a:bf:42:7a:
c7:5b:07:e8:79:e4:7e:98:5c:e3:5f:a0:f5:48:43:
93:2e:36:cf:96:a8:f1:2e:22:b8:89:9e:60:45:b0:
33:7f:78:bf:2c:a2:35:33:d4:cc:cb:05:30:cb:2b:
c2:6b:7b:14:1d:df:c3:94:3e:67:8b:81:79:81:19:
a3:56:0c:74:d2:4f:e5:f9:93:ac:d3:ef:03:98:a9:
75:fa:be:23:95:b4:86:05:f5:11:4c:2a:0d:a2:1c:
f0:25:b8:fe:97:d0:31:32:26:25:ba:91:20:dc:88:
09:c2:43:87:81:7a:b5:b5:15:5f:95:f6:06:0a:a5:
58:5b:81:5b:b4:97:17:0a:4f:d5:50:4e:ed:fc:84:
7c:96:a0:2f:e6:f6:c8:74:05:12:65:3f:dc:86:37:
85:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:47:26:EE:11:4D:4E:5A:1D:46:CA:D0:4B:D5:6C:18:A4:A5:D0:F6
X509v3 Authority Key Identifier:
keyid:4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:46:3b:4d:48:3b:f6:d2:a8:9c:5a:0a:95:f3:59:4f:bb:13:
64:6f:cb:ba:37:28:d0:e9:fb:5c:e0:61:49:f2:34:c3:a2:3a:
5c:bd:38:15:41:11:99:47:06:93:72:48:f3:0d:9e:ff:55:85:
73:6c:22:da:03:5e:37:e5:0d:08:e0:31:81:e3:cb:c4:3f:09:
65:59:2e:82:74:f4:81:28:36:b0:e0:43:70:61:79:b6:27:67:
f1:2e:36:99:6a:e3:b9:6d:9c:2f:c5:25:d4:23:c1:04:5b:2f:
33:fb:df:20:73:ee:c3:7a:e9:fc:31:da:b1:92:ba:1c:3a:a8:
68:16:14:b3:92:05:89:e2:03:4a:26:fe:6f:1d:ae:b4:d0:c1:
1e:67:c9:13:82:cc:17:29:98:6b:c4:99:3f:df:f4:8f:e2:8b:
43:4c:61:f8:3a:61:d8:f9:09:aa:f7:68:8f:30:6e:6d:03:29:
d3:6c:5f:e2:b4:40:22:15:ff:ff:5d:63:46:3f:6d:7c:40:14:
1b:63:74:1a:49:0f:a7:c4:85:43:90:fb:1c:38:b1:22:79:a0:
ad:b3:d5:84:65:b4:84:be:70:79:7b:4c:aa:59:03:d4:7f:2b:
b0:ec:78:d0:34:ca:59:04:d2:b5:a8:ed:2c:e9:ca:3c:c2:4f:
ec:50:66:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:04 2026 by rpki-client