Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
File: sUqqmwhIZPRLrhi6B2smBndU-2I.mft (raw, json)
Hash identifier: pQeZ+pN38XWReXrcinJPvM5oIkBhbM54+DPivwP059o=
Subject key identifier: 70:6D:68:76:1C:83:7F:1A:E6:20:60:A0:D5:8B:C5:23:C3:9A:5B:60
Authority key identifier: B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
Certificate issuer: /CN=b14aaa9b084864f44bae18ba076b26067754fb62
Certificate serial: 01A14CBD6CB7910F60250206679AF89DDC36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
Manifest number: 1AAB
Signing time: Sun 18 Oct 2026 02:00:44 +0000
Manifest this update: Sun 18 Oct 2026 02:00:44 +0000
Manifest next update: Mon 19 Oct 2026 02:00:44 +0000
Files and hashes: 1: ICjM29Ho5ilzx2CC9UyPCpBHk08.roa (hash: iDThEuTUmWf3SPJoG/mF6aomqM2YAji1cqVmI0Zj0pI=)
2: d6GlurZjrrwt2Mzk129b7bT_DCU.roa (hash: 2ZHYIA1Xr0+oHcfnaFr8fQOS6BVciW3KH+j7gwm8oEg=)
3: sUqqmwhIZPRLrhi6B2smBndU-2I.crl (hash: djtS2ukuvzi1cYfuUJAXU2qmj5EBh0I7mCbpJ4LVHhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:bd:6c:b7:91:0f:60:25:02:06:67:9a:f8:9d:dc:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aaa9b084864f44bae18ba076b26067754fb62
Validity
Not Before: Oct 18 02:00:44 2026 GMT
Not After : Oct 19 02:00:44 2026 GMT
Subject: CN=706d68761c837f1ae62060a0d58bc523c39a5b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:a8:2d:bd:09:47:4d:fa:43:18:e0:bf:20:
5d:15:0c:ee:49:d0:12:60:2d:72:70:e5:eb:3e:72:
5c:8d:6f:ad:83:72:d1:4e:62:44:ae:be:f9:63:7b:
d1:a9:9b:70:80:6b:80:5d:e3:7a:81:76:52:7a:4b:
7c:3d:54:10:1d:3f:8e:2c:85:27:7e:fc:a6:67:a4:
a5:dd:7b:88:94:be:ec:ee:ec:52:3c:52:6c:c9:d6:
62:1a:fd:ce:95:62:73:f6:15:eb:d2:d4:ab:10:fe:
8d:6a:d3:3f:41:86:04:ef:b8:91:a3:e6:06:0c:fd:
f2:21:7f:7d:02:0e:dd:4d:4d:5b:d9:a8:7e:c2:1f:
7d:5c:0a:53:bd:30:04:54:5f:7e:3a:57:f7:4b:ee:
cb:e3:6d:c8:70:05:36:e0:7a:e5:79:b8:dc:04:2e:
66:66:70:51:78:40:a1:ee:24:22:41:93:57:ab:eb:
ce:1a:63:4a:9a:eb:ad:3c:b4:de:45:58:89:ae:1e:
c8:8f:9e:29:d4:4d:59:34:e2:5a:6c:c5:46:6d:49:
0f:72:69:ad:54:6b:c6:1e:b2:59:2e:8b:9d:57:cd:
64:3b:39:fb:1b:b0:d0:c4:a9:74:d9:6b:dd:c9:32:
10:39:55:62:0e:92:17:29:09:e6:0b:af:75:cc:86:
b7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6D:68:76:1C:83:7F:1A:E6:20:60:A0:D5:8B:C5:23:C3:9A:5B:60
X509v3 Authority Key Identifier:
keyid:B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:af:44:40:38:13:c7:29:e3:aa:a1:09:87:48:34:60:2c:cc:
71:bd:b5:6f:38:03:a1:8e:21:92:2a:ed:30:41:94:e1:5e:23:
c3:9d:86:07:cd:b7:eb:4f:cb:39:a7:32:be:8e:73:8b:f7:60:
5f:f5:1b:d9:20:e8:1f:5c:b6:2f:4a:90:4d:66:f2:07:53:23:
19:5c:08:7d:3f:0a:af:90:d7:fc:22:72:d1:4a:0d:df:ab:54:
5a:2f:ae:bb:0a:c0:fd:7a:9a:d9:a1:01:6a:3a:f2:6f:cb:b1:
c7:37:c3:92:8a:70:96:00:40:67:b0:23:40:c7:cf:cc:d1:87:
a6:6c:e9:1c:56:78:ca:e9:78:3c:86:a2:83:d5:e0:6a:0c:ca:
2d:f6:59:ff:ce:cf:8f:60:76:55:a8:a8:fa:39:c4:a8:88:21:
60:a7:04:c3:6e:89:e6:dd:24:c2:44:9e:fe:04:18:4b:21:7a:
b5:e1:5e:de:00:ab:8a:52:87:ca:4b:ce:a1:8b:9f:19:36:8c:
15:df:4c:cb:e2:a6:d5:83:5a:a1:00:4e:76:6b:f4:e0:97:9e:
ee:02:36:2c:75:8f:f5:ab:58:d6:db:78:97:ed:f9:6e:c6:12:
93:52:8b:1d:10:a5:37:be:cf:00:3b:3a:8b:b6:f0:6b:fc:f1:
b4:3a:58:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:11:04 2026 by rpki-client