Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
File: suwbpoVLv1vD7VVP9_7zul_ky1E.mft (raw, json)
Hash identifier: ZjdQAjUm6FhwfCDftD60A1F3xLmVfoXX7+1pGElFQH4=
Subject key identifier: CB:A8:68:C0:76:D9:A4:38:F4:98:43:48:37:35:E3:15:AD:3D:C8:38
Authority key identifier: B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
Certificate issuer: /CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Certificate serial: 019CE5239ADFF84C089B7A7E266A1B91075A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
Manifest number: 127F
Signing time: Fri 13 Mar 2026 03:00:41 +0000
Manifest this update: Fri 13 Mar 2026 03:00:41 +0000
Manifest next update: Sat 14 Mar 2026 03:00:41 +0000
Files and hashes: 1: UU7xm8N0gLKzystvr7K0vFPPnwM.roa (hash: AIlX5yaREYq7YP0aVDh7YsVcoDln+tEm7zV1uCXEZfo=)
2: suwbpoVLv1vD7VVP9_7zul_ky1E.crl (hash: TZljgGBDBb/tgdTd2DeRHjtYx0Uo2W6U+c2cO1P+q5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:9a:df:f8:4c:08:9b:7a:7e:26:6a:1b:91:07:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Validity
Not Before: Mar 13 03:00:41 2026 GMT
Not After : Mar 14 03:00:41 2026 GMT
Subject: CN=cba868c076d9a438f49843483735e315ad3dc838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:ff:cf:da:18:0b:bc:72:c6:d5:e4:27:6b:
d9:3a:2c:fd:9e:69:76:f4:ea:fa:9c:1f:5e:24:0a:
4d:ec:fc:2b:91:55:c2:17:cd:12:9e:33:15:b9:b8:
63:f0:37:15:e3:4a:95:2e:68:14:e2:4f:bb:3a:a7:
57:e6:15:35:c4:8a:ba:4f:bd:85:d5:a9:a2:ce:80:
fc:e5:b2:45:27:54:c2:d4:f4:f1:2d:64:04:53:15:
2a:d4:99:db:d1:c1:e0:d7:c7:38:95:ea:ee:e2:65:
73:7a:a8:01:97:0d:48:e2:72:95:92:fb:56:da:4f:
17:79:dc:66:b3:c7:5c:3f:c8:bd:b8:8a:12:eb:90:
96:62:f6:62:b0:96:9a:cb:ef:b3:57:39:4e:c4:68:
39:71:34:be:f0:f5:90:84:aa:0d:26:53:1c:11:ff:
fc:a4:9c:e4:9f:1d:7a:c1:ae:b7:13:72:43:f9:0d:
21:48:53:dd:53:04:fb:da:15:aa:9d:75:e5:2e:d3:
8e:1a:72:4a:ab:b5:39:b7:ee:88:d3:0e:61:af:8d:
cd:c6:6c:ba:29:81:81:fa:e1:c5:0a:a9:f6:15:ac:
00:68:fe:30:b0:42:f2:4f:ad:05:27:6f:2e:13:ad:
25:2b:80:5c:69:c8:7a:ca:0e:11:e0:88:ac:84:a9:
c0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A8:68:C0:76:D9:A4:38:F4:98:43:48:37:35:E3:15:AD:3D:C8:38
X509v3 Authority Key Identifier:
keyid:B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:81:94:ce:d3:57:6b:49:5c:76:69:bc:5d:ae:5a:cd:24:83:
3b:1d:93:d6:76:c4:0e:2d:5d:44:34:fc:46:3c:ce:63:e0:63:
cf:57:d6:f6:ce:49:c9:6f:18:d3:10:f1:82:73:48:65:e0:a8:
82:43:6d:a2:19:e2:80:91:58:d3:e6:04:14:c4:82:35:4f:6f:
a3:81:a7:34:dc:ff:02:0c:83:19:14:fc:72:a8:50:c5:51:76:
41:49:15:ff:fd:8f:8a:dd:26:42:4b:2e:96:bd:3e:0b:27:cf:
6b:cf:d0:e9:07:84:1c:3e:82:a3:6f:22:f5:67:fa:97:47:ce:
d4:3c:3b:f6:5b:f6:38:a6:1b:0c:b4:a7:5c:62:e4:3c:9b:9d:
a6:a4:8c:75:13:73:d8:a3:b0:d4:17:be:13:47:3a:6f:ab:e5:
79:08:1c:cb:f4:7e:b9:e6:d5:8a:01:e5:2b:87:59:a8:e3:bf:
79:5f:10:8f:c0:b5:f8:0b:37:ac:f6:4b:b0:02:36:f7:c7:24:
69:63:23:9f:ad:06:cc:f4:7f:67:3c:1d:60:91:b4:e1:14:25:
10:95:53:13:93:00:9c:0f:82:ec:11:b9:9b:e1:38:7e:80:45:
16:3f:7c:a0:92:71:24:09:f2:64:e2:af:06:6f:9e:0f:69:a1:
fa:1f:a2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:54:14 2026 by rpki-client