Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
File: su0dYGb05GVO9fPMcKXZBamvgpA.mft (raw, json)
Hash identifier: aG4B+Q7XHDzv7wM6Yk7LWkuM0anKhxB4P9XViPrL8Wc=
Subject key identifier: 3D:FE:7C:2A:25:77:8F:4F:0F:36:1F:C0:E9:81:27:A2:C1:9B:23:66
Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
Certificate issuer: /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Certificate serial: 019D3977F87A0D3AE12C9EFCCECC0632D7AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 12:00:56 +0000
Manifest this update: Sun 29 Mar 2026 12:00:56 +0000
Manifest next update: Mon 30 Mar 2026 12:00:56 +0000
Files and hashes: 1: 600lLjQN8NaUtu9vwfIFMpqTNQc.roa (hash: MUp+FLIccBAFPNwMS4Gw63hQ+b8ZEvvsOZeWkDj1pdQ=)
2: UFBqlqbDbCJdY4yyGZXAZPEHhZ0.roa (hash: NYR75LT8EcYVp5wWj3tYR34PO47ZPDQS52OiuEfA/iM=)
3: mh-GYVdTRd_42s-4vmsQOV1tY40.roa (hash: pgFeIkHEDR3yEGlYLLu69s0r5w/mu9jqvo+vTtixs6s=)
4: ndFKEl0wI8WgAsJHTynnR8s626U.roa (hash: iToJm74Xq6g6h01i3TJnsDzizJuEXJ+pOugGZB7SEMU=)
5: su0dYGb05GVO9fPMcKXZBamvgpA.crl (hash: aBDiAt7S2L2UEGfRrY7uKS0f1Diat45SSY+tX25Jdw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:f8:7a:0d:3a:e1:2c:9e:fc:ce:cc:06:32:d7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Validity
Not Before: Mar 29 12:00:56 2026 GMT
Not After : Mar 30 12:00:56 2026 GMT
Subject: CN=3dfe7c2a25778f4f0f361fc0e98127a2c19b2366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9a:9a:ff:44:ed:a4:d3:4f:6a:78:24:39:11:
0b:21:1e:0c:8d:c7:f0:49:54:22:23:d0:f6:81:dd:
c6:1d:b7:c5:0e:c3:cc:67:d9:46:f3:13:63:0a:fe:
b3:5e:10:79:46:13:4f:ca:65:d4:5e:ef:c1:4b:78:
63:36:e8:a0:b2:c8:55:a6:af:6d:ae:ad:a4:ec:7d:
0a:4a:0f:49:7b:3a:ed:2b:12:89:2a:f6:0f:5a:6d:
d3:6c:d3:0c:3d:7e:06:9e:d3:e5:19:89:ad:d4:1c:
e7:9b:26:50:ec:0c:ce:39:ca:a1:b5:ef:36:34:dc:
a2:38:50:20:9e:a1:55:c7:31:8a:fd:74:7a:a4:a4:
53:fc:f6:ac:a8:08:2a:23:b9:5d:83:a2:3a:f8:9b:
48:62:23:41:0e:b3:37:2a:a3:cb:65:38:28:f5:0e:
b7:48:2f:5f:ba:75:95:fa:e3:7e:df:ac:8f:11:22:
29:15:15:1c:e7:32:d9:25:32:d6:1f:5b:ba:ec:c9:
52:64:11:72:5c:ce:bc:69:1f:76:60:b4:05:ed:25:
f5:3f:ef:8d:bb:49:cb:ba:90:19:b5:d3:8e:69:7e:
16:9a:0c:2a:0a:25:d2:98:2e:20:4e:25:32:03:3b:
ee:57:8c:42:1f:a9:cb:94:d2:be:8c:ab:13:8d:9d:
cc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FE:7C:2A:25:77:8F:4F:0F:36:1F:C0:E9:81:27:A2:C1:9B:23:66
X509v3 Authority Key Identifier:
keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:26:61:38:a6:b1:54:b1:3e:71:f3:44:3b:a5:11:5f:b8:fb:
24:0a:b0:dd:0e:8b:3d:d6:d5:c6:d9:95:e2:2f:6d:58:96:28:
99:9f:bb:ef:c0:17:0b:12:b2:93:c4:ba:61:f1:55:72:2d:9f:
ed:02:18:c4:be:70:90:64:21:de:0f:65:b0:9a:74:09:1a:8b:
ba:f2:c7:32:2f:0f:a7:eb:93:d0:a8:97:7d:ed:36:26:47:25:
5b:43:24:ab:ab:83:2f:fc:ce:a2:b7:aa:a6:c3:f3:9b:6c:a0:
55:64:f1:99:f2:56:1e:eb:05:db:1f:86:5e:4b:7d:c1:e9:5a:
80:f4:53:c8:d7:6e:54:78:96:f1:5c:17:3f:ca:a8:f5:02:d8:
02:44:f4:28:5b:8c:09:cc:a2:a7:0c:e8:53:00:28:84:77:9b:
86:98:b8:14:52:30:71:89:4c:91:02:89:69:85:a4:3c:8a:9a:
2f:ff:19:e6:61:28:11:a3:a5:06:70:0a:44:e6:e2:3b:18:2c:
fc:0d:65:ab:d2:26:2a:3f:5b:b3:10:a7:7a:9c:a5:4a:43:42:
b0:32:c3:ea:76:0c:b2:59:0f:be:e4:99:b2:b8:6c:8c:0a:0c:
0a:7a:1a:c4:e0:2b:4e:bb:e5:9f:7f:d8:8b:84:27:8d:71:5a:
77:97:03:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:43 2026 by rpki-client