Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
File: suwbpoVLv1vD7VVP9_7zul_ky1E.mft (raw, json)
Hash identifier: 0EgqoonBrOId8I1Q2WbigSLK7c9y3LKua4Fhf4vTwT8=
Subject key identifier: FF:66:0D:40:DD:7A:C8:FE:36:BC:D8:76:8B:2D:42:00:78:07:31:CD
Authority key identifier: B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
Certificate issuer: /CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Certificate serial: 01A184F605725E66AA361CE92504921DB50B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
Manifest number: 14E4
Signing time: Thu 29 Oct 2026 00:01:18 +0000
Manifest this update: Thu 29 Oct 2026 00:01:18 +0000
Manifest next update: Fri 30 Oct 2026 00:01:18 +0000
Files and hashes: 1: UU7xm8N0gLKzystvr7K0vFPPnwM.roa (hash: AIlX5yaREYq7YP0aVDh7YsVcoDln+tEm7zV1uCXEZfo=)
2: suwbpoVLv1vD7VVP9_7zul_ky1E.crl (hash: sUkFVlyn5K5GRg5it6s/XdTExsnQjbiCpbK9e7RjDfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:f6:05:72:5e:66:aa:36:1c:e9:25:04:92:1d:b5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Validity
Not Before: Oct 29 00:01:18 2026 GMT
Not After : Oct 30 00:01:18 2026 GMT
Subject: CN=ff660d40dd7ac8fe36bcd8768b2d4200780731cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:36:9c:4b:68:24:0d:88:4c:8e:b6:39:39:
e3:47:d7:c9:94:dd:e8:dd:14:2c:16:6e:e0:4c:3e:
bc:f5:b8:0f:9b:7d:29:ff:84:c4:48:0a:d6:48:e9:
7e:69:af:ad:29:77:a0:c4:90:db:c2:bf:6d:f9:56:
09:d1:54:de:33:f3:bb:3f:c3:8a:80:16:bc:40:fa:
f7:a3:ae:e9:55:3c:89:75:b6:3d:42:67:93:8c:87:
b2:b4:ee:e0:3c:6b:04:5c:ea:02:e6:06:08:f9:bf:
21:e4:69:42:39:e2:e6:55:6b:2a:8e:da:f9:df:50:
f8:fe:6a:fb:2b:89:aa:f3:e5:a2:f4:f7:40:fc:04:
87:f2:77:97:f7:8e:83:59:46:76:19:2f:fe:af:04:
fe:86:f4:53:ff:a1:d4:b4:2e:03:97:3e:27:4c:ee:
04:9e:11:f5:dc:07:31:93:b8:fd:b5:7a:88:38:f4:
b9:6c:df:a6:56:86:73:41:a9:9c:e3:fe:04:9c:16:
c8:11:3e:ef:ff:31:6b:22:c3:39:16:31:10:19:68:
e7:bd:80:80:4a:b6:22:a7:d7:aa:a5:dc:01:1b:52:
54:f7:5f:86:c6:3e:43:14:df:2a:46:21:83:3c:18:
62:d5:4f:4a:e6:a8:24:1b:21:17:6e:14:a2:e5:e5:
c6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:66:0D:40:DD:7A:C8:FE:36:BC:D8:76:8B:2D:42:00:78:07:31:CD
X509v3 Authority Key Identifier:
keyid:B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:5d:17:f0:74:f8:1d:da:5a:52:72:a0:2e:2d:20:a1:f7:48:
df:5a:05:e6:1f:6c:ee:64:5d:90:da:78:26:d0:5d:2a:bd:b8:
e5:12:ca:1d:3b:eb:12:85:7c:36:c8:8f:71:37:9d:20:f0:31:
63:6c:22:b0:34:42:f9:35:b0:a8:24:2c:54:0a:9e:6e:e8:3c:
59:ba:e7:37:39:df:9a:49:30:02:77:7b:e7:9e:2a:95:dc:32:
93:cc:0d:d9:57:1b:bd:fd:5a:6e:55:55:a2:6d:02:b1:52:52:
cb:5d:f4:f5:d5:ed:97:80:e0:8c:69:30:74:cd:01:41:18:27:
ca:0a:7e:f9:64:32:72:78:49:40:ae:6f:c4:4f:d7:1d:e3:cc:
48:99:5c:78:f3:16:c7:df:e8:8a:60:ca:78:a8:62:c2:ba:8e:
14:26:3f:68:d7:49:d1:d2:b8:f8:40:f5:88:89:29:3d:83:e9:
3d:39:4d:82:87:c8:b3:a5:17:87:7c:e8:2c:08:25:d8:fc:c0:
be:ae:df:2e:f0:e5:bb:1a:94:d7:c8:e9:a7:b0:19:b4:21:eb:
29:c9:9b:6a:c7:23:70:59:06:87:67:cb:24:af:5d:63:32:17:
cc:67:45:af:ad:54:60:d9:b0:8b:0e:27:e0:44:7e:a1:1c:60:
95:39:1f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:50:35 2026 by rpki-client