Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
File: su7525PeEaAlPVqoxT7Mrg-cPTM.mft (raw, json)
Hash identifier: diuuUyPlwkGjlRUWTzWzkVqF0svDSKsc8KvexQkpHuA=
Subject key identifier: 90:84:42:54:C2:CC:2B:C8:C6:F6:7E:35:C1:47:2B:19:6A:CC:CA:29
Authority key identifier: B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33
Certificate issuer: /CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33
Certificate serial: 019D375222AB4A3A2A684B9EAFC750FC4F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
Manifest number: 0C01
Signing time: Sun 29 Mar 2026 02:00:22 +0000
Manifest this update: Sun 29 Mar 2026 02:00:22 +0000
Manifest next update: Mon 30 Mar 2026 02:00:22 +0000
Files and hashes: 1: su7525PeEaAlPVqoxT7Mrg-cPTM.crl (hash: 7e5DCtA8yfCsU7kigUivrKIbQb5reQ5TVWWr3fAVI2w=)
2: yF3cvECO3ZPhk5RL38Usnf_w7zQ.roa (hash: dQz6DpgzE93vbwSPAPy5s6ZmxUE3vTqFatyJPnJweWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:22:ab:4a:3a:2a:68:4b:9e:af:c7:50:fc:4f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33
Validity
Not Before: Mar 29 02:00:22 2026 GMT
Not After : Mar 30 02:00:22 2026 GMT
Subject: CN=90844254c2cc2bc8c6f67e35c1472b196accca29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5c:41:c8:00:ad:4a:8d:5e:75:ff:5c:b4:14:
ff:3c:53:6c:15:d8:90:1f:79:94:41:35:e2:ac:97:
42:9f:1a:5f:8e:20:12:bc:a2:ca:21:61:ee:24:88:
a8:90:8a:15:79:10:67:83:a8:a0:9c:ca:c3:62:04:
b4:70:6c:9a:7f:82:e9:74:ab:50:d9:5c:70:97:8b:
3f:24:9f:3f:4b:f3:1a:85:e0:75:1b:a7:ce:91:7c:
7d:06:d3:a9:02:14:b2:e0:ce:67:56:01:12:da:7f:
11:29:51:75:4d:a9:c9:1c:fb:67:46:c3:2d:2e:94:
ee:3e:ab:4e:4e:11:a7:e2:b2:a7:92:0a:b1:0e:67:
69:4d:1b:2c:57:3f:1b:63:e5:e4:c1:b6:20:65:76:
56:14:03:f0:25:2d:2e:e4:9c:a5:8d:7b:dd:eb:a8:
40:02:fe:b2:f9:17:23:2e:e1:ef:b9:0e:ba:4b:19:
d3:cc:cc:5a:2d:4f:99:89:d6:fc:41:fe:6b:29:7e:
d8:3b:ad:52:ac:60:f2:d2:2f:d7:b7:49:0e:4b:d3:
0f:ad:7e:25:ce:80:d2:c6:00:68:63:6c:49:1e:16:
0d:d1:b4:25:0c:0e:d7:1c:55:72:60:1c:8a:5f:b0:
8b:63:1b:e9:86:9c:04:14:1b:92:a6:ce:92:43:09:
0f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:84:42:54:C2:CC:2B:C8:C6:F6:7E:35:C1:47:2B:19:6A:CC:CA:29
X509v3 Authority Key Identifier:
keyid:B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:db:6d:98:ae:7f:4a:d2:ef:c5:ff:a8:8e:57:e6:66:a4:21:
1e:d6:1f:07:8f:9f:7e:e6:3c:31:ed:9f:87:5d:d3:d1:fb:01:
4b:2e:7b:8b:e1:c5:22:39:6b:65:ad:ea:ba:4f:7e:e0:5b:79:
45:5d:d6:35:fd:71:ae:fe:0a:ca:c2:16:b3:10:79:41:77:2d:
1a:54:8e:f0:07:c8:71:ce:4f:d3:62:7f:af:8a:52:2f:54:78:
22:77:f3:e5:df:15:a9:4f:14:02:0d:62:bc:19:e1:4c:4c:e1:
6d:4c:d9:a0:0d:71:72:db:38:11:f4:10:a6:20:32:a5:68:f9:
03:2f:bc:fd:bf:58:aa:1a:38:4f:96:26:94:c8:6a:b5:90:17:
ef:db:39:75:b5:46:e2:59:6c:40:35:3a:9f:da:c1:5b:39:1e:
ca:17:ab:9a:94:7d:92:f8:ce:83:2a:95:78:05:0a:43:7a:82:
c3:9f:f1:0f:d1:53:3a:88:fa:8f:a9:cb:c8:9e:f3:21:ab:7b:
fe:58:3e:68:82:4d:13:7d:7d:dd:28:5e:19:62:33:ad:bb:95:
65:4a:09:a6:32:77:69:cf:2e:dc:da:ed:55:ff:78:03:bc:85:
bb:87:bc:40:a4:c6:fa:52:8a:bb:f0:0d:61:6a:48:c0:88:2c:
0b:34:29:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:36 2026 by rpki-client