Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
File: sUP6cD--4Eu9kc5joyFIs2uOVao.mft (raw, json)
Hash identifier: xEVa7fEq1eNBFkNrTrtK915zfhH4zjTBp1jqN+guYBQ=
Subject key identifier: 57:13:47:74:31:BE:F2:93:ED:F5:CB:D2:9B:45:02:51:95:4C:57:41
Authority key identifier: B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
Certificate issuer: /CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Certificate serial: 01A0D8040F1A81023D543D9342A4EF1BEE52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
Manifest number: 1A74
Signing time: Fri 25 Sep 2026 10:02:19 +0000
Manifest this update: Fri 25 Sep 2026 10:02:19 +0000
Manifest next update: Sat 26 Sep 2026 10:02:19 +0000
Files and hashes: 1: AI5iPwrPeQM75vgCBirIJ7ULXR8.roa (hash: 6BPizRCmHI1yenYS4NwhiHl3z1wmNCdGTc9GKZg1Dkg=)
2: n5pV2dNWRA_f9PGG9onX31tv0X4.roa (hash: D07pEt8gK/cdGWqE9Zyt/+iA5IXUOBq9V7PLS+yh6/A=)
3: sEzlM5R6zA-ZnYv0970VvpCyW2s.roa (hash: QcSUN0qNT/RW84mhkqVzl01FcB1TS7ALX77ko6AurMc=)
4: sUP6cD--4Eu9kc5joyFIs2uOVao.crl (hash: Wd69HD0ZkJyxr4gOzBWQpRz1JOSVG7wc0pD5gWfrq2E=)
5: u3Sm5CQkYvsGuCc2LmoCaugkKjw.roa (hash: QovOPnDsIRjc0fHKUk+YUhtZOJkATZJ4vmW0nQyk6FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:0f:1a:81:02:3d:54:3d:93:42:a4:ef:1b:ee:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Validity
Not Before: Sep 25 10:02:19 2026 GMT
Not After : Sep 26 10:02:19 2026 GMT
Subject: CN=5713477431bef293edf5cbd29b450251954c5741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:18:4c:31:39:df:06:aa:85:d6:80:29:4a:38:
b0:29:55:6d:73:8e:89:b7:af:34:c6:0a:fa:0f:34:
ee:a6:e1:ac:09:6d:70:db:08:b3:a9:dd:f2:37:b2:
9c:6e:e4:a1:e3:66:00:0b:70:7b:f8:9e:92:a9:af:
35:af:cd:6f:98:23:3d:7d:fd:a1:1c:a6:70:0f:15:
1b:56:bd:d7:ef:42:88:4c:a4:75:55:9a:ca:57:22:
67:13:79:85:bb:c8:ba:65:63:42:47:0e:b6:96:ea:
8f:4f:87:ea:c2:e3:cf:f4:6d:34:ca:eb:15:8e:dc:
3a:ad:53:d4:31:40:b7:c1:2a:48:59:78:66:1c:72:
b2:e1:7d:f6:9a:99:46:cc:37:b8:06:3f:7d:5c:7a:
89:15:7c:3a:42:18:28:dc:bf:91:ef:26:86:44:e5:
04:aa:06:44:41:0d:9c:dd:56:10:40:90:b5:fc:4a:
df:2f:85:17:5f:21:11:9f:5c:4a:5b:c1:bc:ac:83:
25:4a:66:b4:78:6f:86:f1:95:3f:7d:6a:e4:c0:67:
78:bd:33:96:ff:9d:33:0a:f5:88:a1:ab:aa:1d:ab:
bd:8a:1a:5d:a0:f6:39:7f:5f:df:49:2b:3f:cc:af:
f5:1a:ce:8e:51:40:c6:8a:c6:3e:33:49:a0:92:4f:
89:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:13:47:74:31:BE:F2:93:ED:F5:CB:D2:9B:45:02:51:95:4C:57:41
X509v3 Authority Key Identifier:
keyid:B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9f:28:ed:cc:a6:2e:73:4c:10:d8:0b:a9:a2:5b:98:57:78:
28:a8:a9:ed:74:99:5c:a7:aa:c3:b5:50:d0:9b:bb:10:85:63:
e7:6d:d0:70:74:cf:3e:03:77:c0:94:f7:a5:70:8c:36:8f:7b:
4f:ae:18:00:e2:94:a9:64:21:2b:f1:5e:ca:48:f2:0d:f4:97:
88:f6:ed:dd:68:e7:29:87:58:8e:5b:2a:85:ac:76:bd:09:00:
82:a2:a8:35:75:95:ad:28:1b:f3:6d:4f:da:64:e9:ed:48:7b:
4b:1f:f9:cd:68:50:ea:74:11:12:ad:e6:51:0e:03:14:0e:ec:
d4:b2:54:55:f8:ed:92:a6:bd:5b:74:e8:3b:ce:ac:b9:6d:de:
85:9d:eb:e5:a2:d5:98:a1:f4:d7:a9:26:96:48:e0:be:bb:71:
42:50:a6:61:30:be:be:3d:2d:f1:52:ae:f7:1f:37:71:2e:ae:
b7:f8:17:6d:1b:79:95:97:04:88:4e:fb:7f:1d:b8:e9:e6:b5:
42:e9:41:8e:c2:34:c1:b5:c8:9f:1e:98:af:c1:f3:bc:42:44:
08:fe:6e:17:4d:c8:d3:42:45:f8:5a:50:e2:28:8a:87:e3:be:
40:1c:2a:41:0a:83:9d:77:b6:c5:e7:ee:86:49:8d:2b:0e:bf:
44:8f:5a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:55:40 2026 by rpki-client