
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
File: SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft (raw, json)
Hash identifier: p3UKmbc3R09MsUmWyB4hHDyrB0BSSqPNOcifdrWfxRc=
Subject key identifier: 32:12:49:A0:B6:91:C6:94:3F:B1:95:7F:22:E0:8D:EA:36:8B:41:FA
Authority key identifier: 49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
Certificate issuer: /CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Certificate serial: 019D9A3EED6D9F0B3D986C228772BEE973C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
Manifest number: 1275
Signing time: Fri 17 Apr 2026 07:01:48 +0000
Manifest this update: Fri 17 Apr 2026 07:01:48 +0000
Manifest next update: Sat 18 Apr 2026 07:01:48 +0000
Files and hashes: 1: G2qFSj-zHSZn_cR0UfWs4GFJbTA.roa (hash: LmGaxovGZ/u+AYW4AE5opwjlV2xNZIKAOEsB5GmrX1g=)
2: SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl (hash: P86zt/pks2iMpwnurrW7KRef5kiStBH4xjAFGE3IHwg=)
3: T1xFBI_FXFj5vusDJo-pUeK0x0I.roa (hash: +8wuXinY8Xk3FyPY/iHD7k7tBAC8V4xrKKtAxVLmilA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:ed:6d:9f:0b:3d:98:6c:22:87:72:be:e9:73:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Validity
Not Before: Apr 17 07:01:48 2026 GMT
Not After : Apr 18 07:01:48 2026 GMT
Subject: CN=321249a0b691c6943fb1957f22e08dea368b41fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1a:52:3c:bd:70:db:6a:83:76:51:5f:55:a5:
96:55:38:cd:02:f7:c9:4a:ba:62:59:2a:61:75:37:
83:73:c4:2e:16:6a:a8:2c:8e:ff:10:2f:58:94:03:
03:1a:ab:49:91:a4:53:00:fe:89:bd:8b:49:b6:06:
5a:0a:02:da:3b:22:9e:54:84:32:36:23:d5:2c:41:
e0:43:af:06:8d:d2:48:30:44:2b:8c:9d:4f:2b:a8:
7a:bc:68:fb:a0:10:d4:f2:97:76:03:d6:cb:14:ac:
4b:6e:94:63:e6:b7:18:26:6b:1f:ef:0a:cd:49:af:
8f:00:69:c1:a6:bc:06:d5:9c:ac:37:ed:5f:4e:a9:
f8:7d:ee:01:79:83:88:ed:9e:e6:c4:32:08:ad:a5:
00:42:1e:6a:6a:41:07:37:bc:5d:a8:53:7d:5d:35:
a8:0b:4c:7a:71:83:86:45:1b:8e:6c:b0:52:60:90:
c1:77:cc:e3:04:ed:4d:71:c3:1a:50:cf:8d:f1:55:
d3:58:14:ff:c6:ee:d7:5d:8b:36:71:aa:af:a0:e2:
65:3d:cd:b0:d5:3b:85:b7:70:9d:52:e7:47:11:7a:
d1:56:2e:82:f9:1a:1c:7d:3a:62:bb:07:38:72:f8:
9a:79:72:26:f6:e4:22:7a:2c:24:23:5f:43:7e:a5:
47:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:12:49:A0:B6:91:C6:94:3F:B1:95:7F:22:E0:8D:EA:36:8B:41:FA
X509v3 Authority Key Identifier:
keyid:49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:dc:1f:72:4b:5d:67:5f:95:9b:ee:81:fe:3d:f6:be:4a:e1:
95:36:da:53:0f:e9:fb:f3:ac:00:25:1e:0b:e2:cd:da:c0:8f:
44:64:c6:eb:3b:a1:15:90:03:f1:7c:65:86:50:97:02:76:2f:
3a:78:41:aa:be:fb:f3:47:af:e1:c5:38:8f:ed:87:58:d5:f0:
bc:3c:12:48:76:85:e9:39:56:a0:e9:c6:49:1a:db:c6:85:a6:
5d:0d:ef:23:99:d6:84:75:54:0c:23:83:73:21:f8:30:c5:95:
db:22:77:8e:67:e2:ca:06:6d:fa:f1:92:7f:bc:12:d3:a1:7b:
f0:56:79:fc:4c:fb:c0:54:44:35:86:8b:2e:ef:13:b0:a3:85:
1e:a3:e5:fb:ee:e9:31:9b:01:a5:f0:9f:86:7b:e0:e1:d4:f0:
4a:3a:25:9a:54:c2:6b:42:24:20:81:04:ca:29:73:6b:23:20:
9a:12:d4:8b:1e:fc:e5:fc:fe:58:5d:f9:a2:4f:e3:0d:3c:43:
d5:df:c9:c9:17:c9:b9:1f:f5:31:89:2d:54:4f:7f:d5:0a:69:
08:f5:63:76:8a:1f:ca:5a:e6:ce:8a:15:8b:4a:c1:0b:1f:30:
fd:9f:c9:f7:70:a0:fc:c5:96:35:85:9f:ea:fc:81:05:f5:12:
ef:ed:62:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:54:09 2026 by rpki-client