Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
File: sUqqmwhIZPRLrhi6B2smBndU-2I.mft (raw, json)
Hash identifier: 3iSxrBVq/SgMWlrO0usCnKGmdhRAaJ6r0/KjbVRqvNM=
Subject key identifier: FC:B3:51:97:81:FC:6C:64:B6:DD:1C:4C:41:08:8A:05:FD:30:79:0C
Authority key identifier: B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
Certificate issuer: /CN=b14aaa9b084864f44bae18ba076b26067754fb62
Certificate serial: 01A00281B40E802E779BFBB8029E34D9D1BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 23:00:49 +0000
Manifest this update: Fri 14 Aug 2026 23:00:49 +0000
Manifest next update: Sat 15 Aug 2026 23:00:49 +0000
Files and hashes: 1: ICjM29Ho5ilzx2CC9UyPCpBHk08.roa (hash: iDThEuTUmWf3SPJoG/mF6aomqM2YAji1cqVmI0Zj0pI=)
2: d6GlurZjrrwt2Mzk129b7bT_DCU.roa (hash: 2ZHYIA1Xr0+oHcfnaFr8fQOS6BVciW3KH+j7gwm8oEg=)
3: sUqqmwhIZPRLrhi6B2smBndU-2I.crl (hash: nEBNiWQDSpFNS28UxM0zeNgNj+HfUW3+ILHjMYMfqtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:b4:0e:80:2e:77:9b:fb:b8:02:9e:34:d9:d1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aaa9b084864f44bae18ba076b26067754fb62
Validity
Not Before: Aug 14 23:00:49 2026 GMT
Not After : Aug 15 23:00:49 2026 GMT
Subject: CN=fcb3519781fc6c64b6dd1c4c41088a05fd30790c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:90:0e:a4:66:dc:5e:cc:93:32:6f:5c:e3:ff:
18:c9:d4:cb:44:6b:e3:b2:98:11:4e:f3:41:17:82:
5e:89:7d:db:93:d6:0b:c6:ac:87:8b:b7:86:e7:0c:
8e:e4:3c:2c:29:35:80:ef:80:d7:25:98:26:b9:40:
17:ad:2c:c9:26:61:fb:de:d1:bd:d4:30:d7:95:cd:
4f:35:95:21:5f:38:22:16:8f:07:d1:d7:20:26:56:
e1:9b:03:57:2e:a7:b2:33:ca:79:8a:21:17:87:93:
95:88:4d:94:10:76:a8:80:5d:52:eb:13:74:13:25:
70:68:5c:e3:66:28:ee:6b:ca:a3:db:64:97:94:be:
f2:dd:19:a0:b8:29:62:6e:08:d0:24:4f:32:03:0a:
13:69:88:3c:e2:dc:d3:c0:0d:19:d4:8f:9e:02:3a:
e4:b0:9b:f8:d6:7a:a7:0a:87:98:d3:e3:d1:45:7f:
f4:9c:71:40:8e:9b:22:f6:00:d3:cd:22:e7:9e:5f:
e9:8e:9b:3e:ab:bf:eb:b9:aa:10:70:c0:60:d0:ba:
78:4e:83:fb:55:5f:e8:59:0b:39:f6:fa:0b:36:d7:
9c:59:9b:e9:28:d1:c0:17:e6:40:1c:34:3c:64:69:
33:c2:df:c7:39:33:d0:f5:aa:f7:6f:f3:9f:36:89:
c2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B3:51:97:81:FC:6C:64:B6:DD:1C:4C:41:08:8A:05:FD:30:79:0C
X509v3 Authority Key Identifier:
keyid:B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ec:65:83:ec:13:cb:c3:51:69:10:9a:51:e1:1f:d6:b8:fd:
2b:be:2f:2f:03:2c:d7:8b:33:ad:64:c4:ba:aa:da:30:e8:7d:
33:51:3d:a6:92:c4:02:39:57:b4:5d:0f:03:13:40:cc:85:e9:
c0:aa:14:10:3b:db:b2:18:65:f6:cb:f4:03:d1:98:7c:ed:69:
65:7c:40:e2:74:23:89:d8:ab:8e:0c:9a:32:84:e3:91:38:2e:
a3:0d:a2:6a:15:fc:f1:33:84:3d:cc:79:f3:02:cd:22:7b:d1:
f2:e6:4b:f6:b9:38:8d:11:b0:3a:63:81:f3:9a:28:4e:6e:43:
7f:e4:65:2e:18:46:e4:02:3a:b3:64:b7:56:28:b8:18:fb:3a:
f9:d8:86:a0:77:1e:e2:73:99:81:9e:54:b7:52:52:e8:df:09:
71:b5:09:09:24:03:91:ca:d2:d4:e5:55:48:46:88:ff:3b:1a:
39:12:9e:dd:39:f4:4b:63:df:ea:7f:d8:6e:3d:15:f8:10:35:
de:6b:f2:d9:d8:d3:fe:1b:e1:61:d8:ce:08:5c:f4:b3:6f:df:
f2:ce:55:4e:f7:b8:0f:80:0b:fc:7f:e9:e6:b3:f0:d7:a4:48:
ee:08:55:ee:46:60:5e:78:e4:d5:fa:38:a1:5b:25:2c:8a:a2:
24:f5:41:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:32:50 2026 by rpki-client