Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
File: su0dYGb05GVO9fPMcKXZBamvgpA.mft (raw, json)
Hash identifier: MDfBSplMFDMPeKSC7oR/qavDSGngZqD4snG6K8rDSP0=
Subject key identifier: D9:E9:E8:0D:42:D1:C0:A7:2D:9D:66:8D:FB:30:8D:3C:F8:17:CD:C8
Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
Certificate issuer: /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Certificate serial: 01A06C4ADF7A3C5E4E67F41C289CF654E17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
Manifest number: 1A3B
Signing time: Fri 04 Sep 2026 12:00:41 +0000
Manifest this update: Fri 04 Sep 2026 12:00:41 +0000
Manifest next update: Sat 05 Sep 2026 12:00:41 +0000
Files and hashes: 1: 600lLjQN8NaUtu9vwfIFMpqTNQc.roa (hash: MUp+FLIccBAFPNwMS4Gw63hQ+b8ZEvvsOZeWkDj1pdQ=)
2: UFBqlqbDbCJdY4yyGZXAZPEHhZ0.roa (hash: NYR75LT8EcYVp5wWj3tYR34PO47ZPDQS52OiuEfA/iM=)
3: mh-GYVdTRd_42s-4vmsQOV1tY40.roa (hash: pgFeIkHEDR3yEGlYLLu69s0r5w/mu9jqvo+vTtixs6s=)
4: ndFKEl0wI8WgAsJHTynnR8s626U.roa (hash: iToJm74Xq6g6h01i3TJnsDzizJuEXJ+pOugGZB7SEMU=)
5: su0dYGb05GVO9fPMcKXZBamvgpA.crl (hash: 6O8uG+dfggf4H5gb0lea0DK70DzMJTbFSijYNivvVBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:4a:df:7a:3c:5e:4e:67:f4:1c:28:9c:f6:54:e1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Validity
Not Before: Sep 4 12:00:41 2026 GMT
Not After : Sep 5 12:00:41 2026 GMT
Subject: CN=d9e9e80d42d1c0a72d9d668dfb308d3cf817cdc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:02:53:46:f6:9d:0a:46:6b:d2:a7:6e:b1:4b:
f1:bb:ab:f5:d7:72:28:06:48:5f:9a:2f:d6:ac:78:
1d:07:7d:74:ea:86:c0:f8:52:fa:d3:58:a9:01:6d:
ea:02:df:0a:c1:5e:19:ff:d7:e2:7b:d9:68:e5:ee:
a5:52:fd:1c:4b:3d:51:cb:6c:12:9e:b5:43:28:24:
eb:77:8b:7d:e2:b4:63:95:65:b0:5f:49:bf:92:ec:
09:5e:63:0f:9d:58:c7:95:aa:99:4f:9c:bb:c8:9c:
e5:7f:59:31:51:a8:e4:c7:f2:e9:45:c0:a5:88:8d:
78:3e:7e:2d:4e:14:20:b1:00:af:b4:86:38:30:09:
94:3a:a8:7c:35:86:39:7b:e0:4e:94:a1:1b:db:d3:
8f:bc:49:e0:54:99:2f:79:33:03:f0:95:c8:cd:06:
b3:92:a4:d4:43:d4:fe:27:fe:e7:5d:37:8d:3c:b7:
23:09:a2:53:de:aa:01:6f:7b:bd:6e:10:41:b8:1d:
5b:37:7a:d4:50:8e:b7:87:c3:fe:9b:d2:98:e1:09:
8d:6e:e9:55:e7:58:71:00:34:c5:99:b8:d5:d7:ce:
2a:cc:f0:14:ad:43:7f:7a:b8:c4:78:56:09:18:3a:
95:61:89:a2:10:48:99:59:51:68:23:08:7a:9f:65:
a5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E9:E8:0D:42:D1:C0:A7:2D:9D:66:8D:FB:30:8D:3C:F8:17:CD:C8
X509v3 Authority Key Identifier:
keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ea:8e:ea:ae:6b:f9:73:0f:bf:e2:c9:28:7f:67:49:70:77:
58:50:28:17:bf:84:c5:6b:2c:8c:f8:1a:88:a9:13:53:94:3f:
aa:7c:68:86:f9:ce:89:16:ab:2f:5e:d5:92:ef:cd:a3:a9:2c:
67:a9:f5:94:6d:69:54:8f:1a:6e:34:aa:ca:a0:70:17:36:07:
63:b1:8b:56:f6:33:3c:53:a7:6e:ec:fd:92:28:07:ce:53:f6:
0f:b1:23:d3:ef:a8:71:7c:3d:8a:34:cc:59:0f:a5:43:c5:ce:
3c:47:61:91:51:8c:e1:b1:e3:da:96:33:b7:db:ec:07:34:c2:
a6:f5:ff:c1:8c:36:ea:06:f8:ff:16:4f:c8:33:d5:ae:4b:b3:
6f:5d:99:2c:be:e8:2e:33:02:4e:70:6e:66:99:67:a0:a7:b8:
eb:ed:28:c3:74:de:35:33:82:90:a8:d4:41:71:82:af:3b:25:
33:6a:f5:fd:92:f0:84:89:14:d7:a2:21:44:0d:72:98:7b:f8:
be:51:4c:70:52:85:32:64:db:e8:f1:e8:1b:72:90:e6:40:b8:
ae:5c:8d:1f:15:0b:b7:fe:2d:b7:38:f8:2c:06:bd:78:15:b3:
2b:86:da:ff:3e:f4:6e:eb:1e:80:3d:9a:cd:b9:a7:fd:6f:ea:
3b:57:92:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 19:05:48 2026 by rpki-client