Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
File: SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft (raw, json)
Hash identifier: nImYkD38ghEX7wGhsZIYJ6COcvmmBBIjpvQ3et/AXuc=
Subject key identifier: 53:17:8B:3A:21:E5:3D:3E:C4:E3:4D:B2:73:BB:81:72:0E:8D:A1:F9
Authority key identifier: 49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
Certificate issuer: /CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Certificate serial: 01A10ADDD36CFB20044776FB8285169E8376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
Manifest number: 143D
Signing time: Mon 05 Oct 2026 07:01:12 +0000
Manifest this update: Mon 05 Oct 2026 07:01:12 +0000
Manifest next update: Tue 06 Oct 2026 07:01:12 +0000
Files and hashes: 1: G2qFSj-zHSZn_cR0UfWs4GFJbTA.roa (hash: LmGaxovGZ/u+AYW4AE5opwjlV2xNZIKAOEsB5GmrX1g=)
2: SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl (hash: FEzpP26gjNbhOfcx7ZIc8A7iWyTZHuBOR8OJdIat7LA=)
3: T1xFBI_FXFj5vusDJo-pUeK0x0I.roa (hash: +8wuXinY8Xk3FyPY/iHD7k7tBAC8V4xrKKtAxVLmilA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:dd:d3:6c:fb:20:04:47:76:fb:82:85:16:9e:83:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Validity
Not Before: Oct 5 07:01:12 2026 GMT
Not After : Oct 6 07:01:12 2026 GMT
Subject: CN=53178b3a21e53d3ec4e34db273bb81720e8da1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3f:b5:8f:f6:aa:cb:f1:da:f3:89:96:04:49:
71:19:51:c2:70:36:3f:7a:1b:03:0a:ee:d5:27:18:
48:f1:ac:0c:ec:d1:74:1d:39:77:70:5f:74:68:cb:
ab:38:b5:32:31:7e:30:eb:08:44:45:aa:cb:5c:a3:
8a:3c:58:64:9e:35:1b:10:f9:9d:cb:74:50:05:c9:
a9:3a:a2:7c:b3:28:74:de:07:50:32:fb:41:17:0a:
b7:5d:75:e1:17:8f:9e:2b:15:55:e9:ad:c3:62:e7:
c5:73:8d:65:d0:2c:a9:3c:e3:38:4f:ba:d7:88:1a:
28:21:a9:10:6c:d3:54:d9:7d:bb:ab:b6:6d:46:26:
31:88:54:71:0d:5f:5c:84:79:46:2c:cd:0a:79:f9:
55:95:d2:3e:27:d7:e9:66:9b:b6:6b:41:09:d8:4e:
38:ea:36:d1:bf:99:03:cd:53:be:2e:51:72:03:a5:
3a:fc:ca:c2:ce:6c:ac:bf:cf:e0:6b:46:44:91:bc:
fc:c3:81:51:5e:82:7a:21:11:8b:a5:ff:59:61:aa:
4b:f6:98:7f:d9:fc:e1:62:03:3d:33:9d:31:db:db:
99:0f:b7:48:78:ae:ea:bb:14:5a:02:de:f5:37:a8:
b4:90:22:c0:70:48:17:58:3f:11:e4:f9:fb:fb:68:
1b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:17:8B:3A:21:E5:3D:3E:C4:E3:4D:B2:73:BB:81:72:0E:8D:A1:F9
X509v3 Authority Key Identifier:
keyid:49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b3:cd:18:57:8d:6e:20:1e:15:35:97:bd:e0:7e:90:93:63:
21:e7:43:01:d3:4f:1f:6e:b3:41:75:21:19:d1:58:78:42:b0:
e0:b7:f7:7d:0f:df:7f:b4:91:59:ff:aa:e3:b7:bc:52:a6:90:
ba:ec:46:db:67:bd:d2:6d:58:bb:51:fa:05:90:ff:c3:d7:f2:
15:0d:77:64:ea:27:ce:bb:3e:26:be:ec:ba:67:8a:c3:7d:1a:
01:b1:21:d1:5f:d5:ac:fe:07:02:e2:29:02:ce:b9:b6:05:06:
7a:56:79:7f:97:3f:e9:28:ff:9c:6a:df:cc:f3:eb:58:41:f4:
0b:d7:b2:e2:47:b3:5e:26:6c:68:16:cf:65:c7:58:0d:a9:58:
62:69:13:24:37:ff:96:51:c3:9f:27:2a:f5:8e:ba:93:1a:64:
4c:fd:03:7a:00:39:d9:77:1a:50:55:f1:89:21:c0:15:9f:9f:
45:0a:f8:98:11:02:28:ad:43:68:4b:73:10:eb:25:30:78:3a:
f3:c6:7b:2c:9e:45:fb:7f:e4:48:09:24:eb:4b:3c:a4:e8:d5:
21:f8:fa:46:5d:0a:f2:17:b2:1a:c8:ef:ea:18:d4:f7:a8:df:
83:f1:a7:65:de:2d:ef:a3:a5:e1:1c:38:10:f7:5b:e8:cc:0e:
fc:3c:4c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 15:55:22 2026 by rpki-client