Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
File: SU14c0FlEKL7I0bvNCKAFVUicTs.mft (raw, json)
Hash identifier: bRon9h3+TWLbsTuEaoDjn6zxgktw7H7mts4EnYhlXe0=
Subject key identifier: E1:92:AC:97:B6:04:41:98:4B:9F:36:BF:5F:3E:4B:1C:53:41:55:68
Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
Certificate issuer: /CN=494d7873416510a2fb2346ef342280155522713b
Certificate serial: 01A1A66FDA897991F15306DB57C97A16B031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
Manifest number: 17F3
Signing time: Wed 04 Nov 2026 12:01:50 +0000
Manifest this update: Wed 04 Nov 2026 12:01:50 +0000
Manifest next update: Thu 05 Nov 2026 12:01:50 +0000
Files and hashes: 1: 32Nopwa7iDrMzQvWR2AiGUXyxqI.roa (hash: UhsqgA9BDo8hjf2FELCXlR0HFZ2+BdgenG+by3xwFz8=)
2: LjPmzvpwanEzWC7YwFcmuEsNkws.roa (hash: MIJ/J6I5pbMxfY/A5H3VycZbhKC12p0Tut4YaO1yZlQ=)
3: SU14c0FlEKL7I0bvNCKAFVUicTs.crl (hash: mXN2b0AfFSXTcoz87UuxcLrtzF78uqxFFkYDsS/N1OQ=)
4: U032uAEUZ0b4mkUs5GY7tAVTTzU.roa (hash: DED8ognEIVQikRQX7YkZQcK+eDMVkhFnX19M3oaeQrw=)
5: UKW6ggBaCeq2EWzJWVDTUUG5C5M.roa (hash: RrnGAk5DcSVwnr4K/OnsZ4KSQkqSg7XT17ThtWs4Qzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 12:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:6f:da:89:79:91:f1:53:06:db:57:c9:7a:16:b0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d7873416510a2fb2346ef342280155522713b
Validity
Not Before: Nov 4 12:01:50 2026 GMT
Not After : Nov 5 12:01:50 2026 GMT
Subject: CN=e192ac97b60441984b9f36bf5f3e4b1c53415568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:77:89:8b:00:28:7c:05:d6:f5:58:dd:5b:39:
70:5b:02:f1:a9:03:37:22:98:91:13:88:e2:93:ad:
2f:06:f6:5b:ad:01:38:d0:88:8b:5f:e9:94:09:c5:
39:67:1d:1c:3d:f3:53:3f:58:0d:68:67:0f:0d:d9:
9e:cc:05:df:5e:7b:da:62:63:a2:09:ae:26:7d:38:
22:00:fa:58:b4:bb:b2:1a:05:f0:af:16:01:18:be:
2b:72:53:44:5a:08:38:3d:bc:f9:40:8a:53:9b:21:
6e:23:b9:10:1a:8b:e4:2b:e2:45:e2:71:8f:92:cf:
ab:7b:ba:d6:53:97:9e:84:57:e2:10:da:70:74:87:
f3:47:7d:9f:29:02:90:98:89:20:03:56:1e:a1:9b:
22:42:35:85:a6:5e:f1:2e:41:db:82:1a:60:11:1f:
b1:40:7c:78:0d:2b:31:a7:dc:1e:c0:ac:85:11:82:
5c:59:5a:e4:d2:0f:31:79:2d:9a:3a:48:f3:ab:37:
0b:45:65:ca:be:a3:2b:e9:d8:26:a7:05:bd:2f:00:
75:bb:8e:bf:da:31:08:e2:53:69:87:2a:44:38:cb:
9c:81:c7:7a:6c:34:5f:1e:5e:a5:c8:0c:d4:d5:00:
3a:da:16:71:c6:85:46:9e:bc:a2:d1:f0:c1:a7:72:
f3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:92:AC:97:B6:04:41:98:4B:9F:36:BF:5F:3E:4B:1C:53:41:55:68
X509v3 Authority Key Identifier:
keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:aa:97:77:7b:9a:7b:f4:79:bd:79:a6:a8:76:ca:b7:b1:df:
1b:57:73:27:66:d3:99:78:1e:bf:62:7c:ed:8b:89:c7:f3:44:
e9:d2:df:2d:af:a7:db:5d:41:46:b3:41:aa:46:00:58:15:2f:
f0:c9:4a:a4:b7:c4:f2:38:0d:47:27:eb:cc:3e:65:cb:9e:a9:
bc:17:f9:c1:18:4a:17:4d:0b:7a:27:13:3d:9d:c5:d5:64:1f:
24:f7:99:9f:53:77:a0:8d:fc:0f:5d:43:03:d9:fb:d8:37:0d:
53:76:53:47:b3:a6:02:87:0f:f1:ef:13:b2:1a:27:65:ce:71:
3b:df:d4:1c:e2:5f:91:31:30:c4:c1:07:3c:83:f2:b1:53:a4:
6c:45:ce:93:76:2d:f9:07:1e:0f:8f:79:61:5a:a1:4b:4c:d5:
56:cf:e1:8f:cd:79:0f:d7:10:ab:be:35:2c:f7:a3:77:54:78:
bc:f8:ac:da:8a:c1:e9:e0:f3:a1:88:8b:8c:e0:5d:66:e0:11:
3f:25:3e:0d:38:85:de:92:76:bc:32:50:f5:ac:75:2d:b1:b7:
af:dd:e7:63:bd:28:c7:a9:64:84:fc:40:d4:d7:dc:37:7e:e3:
98:2f:c6:45:e0:7f:66:a6:6c:2e:fc:54:99:23:e1:5f:e9:cf:
4d:9a:f9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 00:21:27 2026 by rpki-client