Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
File: sUiB-j51o4Uc9wQZE1q91SnS9oI.mft (raw, json)
Hash identifier: Wd+9iJ06pfNRg5tz6DB/2Pc4aabs8HWt3k5i51bqwoE=
Subject key identifier: 76:3D:85:05:65:5D:AB:93:FA:C6:FF:37:93:27:30:15:97:A6:AF:C8
Authority key identifier: B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82
Certificate issuer: /CN=b14881fa3e75a3851cf70419135abdd529d2f682
Certificate serial: 019D394183818E626FA058167FAD95F7CC69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 11:01:27 +0000
Manifest this update: Sun 29 Mar 2026 11:01:27 +0000
Manifest next update: Mon 30 Mar 2026 11:01:27 +0000
Files and hashes: 1: UPKKwW9VJYZFBiA_WvIaqWPdF7s.roa (hash: K2pc24cJyQQfvnYYt5miofrs9P0Hxb8DyAeGlZ+9xFY=)
2: sUiB-j51o4Uc9wQZE1q91SnS9oI.crl (hash: wYuJXZMx1Io6NNLEKTJIqGKqFi0DN2CuRv+VqYPppWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:83:81:8e:62:6f:a0:58:16:7f:ad:95:f7:cc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14881fa3e75a3851cf70419135abdd529d2f682
Validity
Not Before: Mar 29 11:01:27 2026 GMT
Not After : Mar 30 11:01:27 2026 GMT
Subject: CN=763d8505655dab93fac6ff379327301597a6afc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a5:45:58:d4:a4:fd:6e:2b:1f:c3:7f:d7:92:
4f:32:87:37:81:51:a3:9c:66:93:b0:a1:93:a5:a3:
43:ca:86:75:03:a6:96:39:d0:e5:98:e0:46:15:9a:
4f:13:02:9b:52:c2:2b:0f:03:a8:f4:36:0b:34:bb:
a4:5d:52:04:5c:fd:36:2e:79:e5:83:47:d0:d2:4d:
e5:e9:f4:55:43:80:72:31:1a:4b:12:54:05:d6:d6:
49:83:d3:03:6c:8f:49:68:20:a2:6a:0a:ac:fd:00:
1a:b0:13:cd:c0:bf:7f:ae:f7:a1:0b:c6:6c:41:53:
57:87:f9:a1:8c:4a:77:5f:7e:f4:6e:80:9d:1d:e9:
bb:c9:e7:54:32:39:10:83:ed:3e:6d:bb:79:d0:80:
30:5f:5d:31:67:70:ef:96:4b:7c:a8:9e:4e:c1:c6:
6f:c8:1f:f7:ee:0a:74:95:c2:5e:33:e8:20:9b:80:
f3:30:e9:51:14:c8:f1:cc:48:6d:05:d6:05:9c:c4:
66:92:4a:12:a5:8e:5d:76:cf:82:4d:92:4d:99:74:
a8:b3:7a:73:7e:c3:b5:30:2b:e4:36:60:6c:31:3c:
c6:a9:33:ac:3c:06:74:3f:10:95:06:31:66:f7:ce:
2e:ef:43:49:a6:01:e1:a4:4a:85:ef:a9:a1:61:a0:
56:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3D:85:05:65:5D:AB:93:FA:C6:FF:37:93:27:30:15:97:A6:AF:C8
X509v3 Authority Key Identifier:
keyid:B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4b:c4:6a:50:5b:73:c2:08:54:e5:2b:35:ec:75:c3:02:1b:
a2:6c:ec:9a:48:b5:87:0e:a8:3a:3e:12:65:52:a7:fb:4c:02:
77:82:43:b9:77:22:71:46:7d:c9:23:7c:2e:b7:1e:f3:e9:c6:
fb:67:7c:fd:f3:57:f6:75:3a:d8:00:11:46:52:e7:0b:85:d8:
0d:6c:de:04:0b:83:b2:06:57:62:77:5f:f2:83:32:99:5f:b8:
b8:5d:c3:66:5f:14:c2:e8:36:49:51:45:da:a6:72:43:4a:18:
75:49:2e:d3:67:b4:d7:c9:bb:f8:e0:62:62:33:06:53:b7:31:
d8:f8:00:80:a4:85:c4:ab:26:86:fe:79:40:84:3f:ba:a6:8a:
0e:9d:2b:f1:ac:fb:f8:01:bf:c4:e5:0c:47:f8:c6:f4:f2:a4:
f0:49:c4:a0:56:3b:d6:08:ce:75:8d:c9:ba:fd:04:13:11:6d:
fb:b1:e6:04:25:20:24:a5:68:a8:9d:f8:d8:08:dc:eb:10:bc:
47:fd:78:26:36:60:85:50:7d:e1:09:95:ce:1b:94:32:ac:dc:
b9:f4:f9:4f:5e:d7:c3:ae:25:cb:4b:5d:a1:49:0a:4c:02:01:
eb:3d:23:0f:8b:1e:ee:e9:2d:60:ea:7d:fc:cb:a1:3c:69:fe:
d4:d3:f9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:21 2026 by rpki-client