Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
File: SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft (raw, json)
Hash identifier: l25umgSN88tAtS5oc4hz5KWeUdJBykgzLrJTyBZy2io=
Subject key identifier: D6:24:5A:AD:B8:C1:E4:C0:84:4D:42:A4:F4:A5:D0:08:34:D2:EB:5A
Authority key identifier: 49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
Certificate issuer: /CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Certificate serial: 019CAAC67E4D8AD436177EDC94D236AE37B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
Manifest number: 11F9
Signing time: Sun 01 Mar 2026 19:01:00 +0000
Manifest this update: Sun 01 Mar 2026 19:01:00 +0000
Manifest next update: Mon 02 Mar 2026 19:01:00 +0000
Files and hashes: 1: G2qFSj-zHSZn_cR0UfWs4GFJbTA.roa (hash: LmGaxovGZ/u+AYW4AE5opwjlV2xNZIKAOEsB5GmrX1g=)
2: SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl (hash: hXl5kcTHGVLQ6/5cfzIPEKTs/FNDPJNqt8BY2CZiIV0=)
3: T1xFBI_FXFj5vusDJo-pUeK0x0I.roa (hash: +8wuXinY8Xk3FyPY/iHD7k7tBAC8V4xrKKtAxVLmilA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:7e:4d:8a:d4:36:17:7e:dc:94:d2:36:ae:37:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Validity
Not Before: Mar 1 19:01:00 2026 GMT
Not After : Mar 2 19:01:00 2026 GMT
Subject: CN=d6245aadb8c1e4c0844d42a4f4a5d00834d2eb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:f0:66:c9:ab:ed:d0:77:ae:e4:8b:2b:3f:
d0:1e:fb:d8:14:60:f9:7b:52:00:95:7b:f1:06:f5:
46:64:db:45:71:0a:a6:95:63:cb:1d:02:29:95:b4:
8e:c0:ce:5c:39:97:9e:ee:e0:6d:31:d8:6b:af:93:
df:f3:6a:5d:be:03:62:aa:ae:a1:f1:b1:55:e9:8c:
fd:bf:f2:f3:31:ae:ec:fd:64:04:4c:8a:2e:12:84:
5a:4d:4c:3b:2f:92:34:2c:0a:4d:af:87:68:df:c3:
92:aa:4d:27:88:66:a6:b3:59:69:1e:e5:e8:16:d4:
44:bc:4f:9b:4b:fb:b3:16:3b:a5:29:31:69:27:b0:
d1:f7:fb:e4:c7:6a:c6:ad:78:8e:28:65:99:6d:50:
b3:98:15:43:49:75:89:6a:e8:eb:5d:45:42:22:39:
cd:5c:b0:12:3a:ed:58:1c:1b:d6:e6:6d:7f:34:3f:
e1:a7:d0:6f:dc:92:c8:46:20:67:bc:bc:7a:eb:02:
a2:54:b2:b2:ea:92:8f:1e:95:df:f3:1e:bb:bd:2c:
7c:a8:46:6c:df:95:ea:74:a6:94:2c:7c:51:e6:1c:
d6:87:a3:19:74:93:96:3c:fb:ac:73:2e:87:50:d7:
d1:86:12:86:04:31:13:9f:17:dc:2c:68:ad:c7:3d:
42:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:24:5A:AD:B8:C1:E4:C0:84:4D:42:A4:F4:A5:D0:08:34:D2:EB:5A
X509v3 Authority Key Identifier:
keyid:49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:47:a0:1e:01:ca:e8:fe:fa:38:00:7b:bb:ca:2d:52:bb:6c:
3c:37:c7:83:c3:04:55:19:e0:fc:21:aa:ac:41:c5:f9:1e:1e:
d8:88:0f:9d:62:6e:71:da:2c:aa:b2:c4:08:fb:ff:09:7e:6a:
7e:9a:13:7f:c9:64:af:ad:a6:b0:7e:ea:1a:f6:04:a3:b8:df:
d5:c5:75:e2:01:63:a0:8b:56:ac:a9:47:ca:77:a2:d1:39:e1:
b8:99:43:7d:7c:13:cb:00:78:a4:d2:ea:7b:be:78:01:80:59:
44:c0:f5:17:ca:22:d2:6a:17:36:2a:cb:13:09:ca:06:fe:6d:
3d:a8:7c:ff:13:fb:85:77:b1:4b:57:56:6a:48:75:9b:40:87:
64:83:71:c6:88:52:b4:3c:5f:5d:23:9c:c6:d4:d8:18:37:7e:
7a:b1:17:7f:fa:85:6f:e0:97:a8:a8:54:21:cc:74:f1:cb:b8:
0c:03:9b:4c:bc:23:53:99:85:a5:fa:2f:b6:33:e1:46:7a:c7:
53:89:18:ed:41:38:ab:b4:02:7b:fd:93:a0:7a:fc:25:06:05:
29:88:01:8b:d7:32:0b:2e:f9:52:e7:e5:fa:05:13:0b:c6:e4:
b0:0c:7d:cb:ea:5f:8d:4a:42:56:1b:b0:1b:03:87:be:2d:9c:
d5:22:f4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:29 2026 by rpki-client