Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
File: SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft (raw, json)
Hash identifier: sdRUhF5rg3m+oIPX5iBIep0Szq+CC5LaYMH+s2UAXOc=
Subject key identifier: 1F:DF:E3:A0:BD:16:19:8D:91:99:6B:94:4F:77:DA:56:B3:11:F5:7B
Authority key identifier: 4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
Certificate issuer: /CN=4aebd4543df29da64e4232ef3791f534573c12f1
Certificate serial: 019CE33572632706BD0D292A867CA2FB4CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
Manifest number: 0C67
Signing time: Thu 12 Mar 2026 18:00:56 +0000
Manifest this update: Thu 12 Mar 2026 18:00:56 +0000
Manifest next update: Fri 13 Mar 2026 18:00:56 +0000
Files and hashes: 1: SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl (hash: ssxo8x3kjr03zZY/HfHj4R5K0ErIp15VgEVzsU0yc9M=)
2: kypMcuIm-WpR0ZjTrQvN18lgASs.roa (hash: rpyCcsQ2xUEDWY8mMlJ3ItAHPdOq2MVR8TSSQ09U5AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:35:72:63:27:06:bd:0d:29:2a:86:7c:a2:fb:4c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aebd4543df29da64e4232ef3791f534573c12f1
Validity
Not Before: Mar 12 18:00:56 2026 GMT
Not After : Mar 13 18:00:56 2026 GMT
Subject: CN=1fdfe3a0bd16198d91996b944f77da56b311f57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:82:26:cd:2c:6e:e0:99:f5:02:e5:3c:bf:c4:
8b:89:64:d9:64:b3:65:03:e1:74:98:db:db:c4:7c:
2f:83:10:4b:d0:9d:98:a1:12:6c:53:15:98:cd:ef:
97:46:80:b7:87:26:ca:f8:a8:48:45:ad:66:61:9e:
48:0a:5c:0b:43:1b:5d:7a:cf:2e:84:87:6c:49:ae:
bf:95:12:86:81:aa:d3:e2:5c:ac:56:2c:10:12:82:
04:02:cc:60:c9:8c:24:25:be:01:9d:0a:f6:c9:b5:
17:ca:8d:06:88:fa:38:9b:53:5d:5e:3b:b7:11:a7:
08:f9:8e:67:ed:75:2e:d2:c6:8e:70:c7:00:1f:0e:
8c:12:d6:67:92:98:37:fb:69:c6:b3:12:95:7c:d2:
64:e1:80:fc:32:38:5b:d6:14:b0:4d:0b:9b:a1:38:
90:24:70:2f:79:45:7c:cb:03:83:79:76:87:80:23:
c0:fd:a2:13:5e:ec:8f:14:cc:c5:37:08:06:ea:0b:
c6:86:95:a5:f2:86:66:7b:8e:8c:1e:b9:6a:9d:ea:
3b:e9:b5:1c:0d:60:2e:e0:74:62:47:f2:98:0f:e5:
cc:0b:62:e6:41:ee:9a:9d:22:5e:f8:65:c7:2f:ae:
b1:82:df:4e:f5:ff:53:e7:67:05:57:77:43:de:80:
c3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DF:E3:A0:BD:16:19:8D:91:99:6B:94:4F:77:DA:56:B3:11:F5:7B
X509v3 Authority Key Identifier:
keyid:4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:05:19:6d:f8:0d:f0:d8:67:30:f9:91:61:fc:38:18:34:13:
1d:71:18:dc:98:3d:28:cf:3e:a4:ec:c7:c8:86:ea:39:73:51:
e6:de:2c:87:3a:6e:71:6e:db:0b:75:32:08:cf:6f:e5:10:51:
e7:d5:94:32:26:3c:8d:ac:db:20:e2:83:69:09:8c:98:27:6d:
96:06:d6:37:db:62:5f:95:f7:a1:a4:88:ff:5e:20:f1:21:cc:
97:33:7e:77:56:b7:7b:d3:4e:59:e5:5c:f7:86:1a:59:e0:d0:
28:d2:4f:77:28:26:21:6f:76:c0:7a:47:cf:03:b1:51:b4:b5:
da:3e:04:38:a9:16:74:41:04:f7:4d:ae:54:bc:a8:92:f1:75:
0f:3c:cb:48:e1:83:12:2d:f1:bf:7a:51:af:bc:9a:b6:59:23:
4f:44:7a:46:67:3e:29:d8:5c:8c:ef:47:1e:cd:05:df:ff:44:
95:4f:22:da:c0:7c:cd:f3:41:be:d7:41:28:39:39:7a:50:ea:
62:45:a6:2f:16:ae:08:45:77:4a:d2:be:90:2c:aa:d6:7a:20:
e0:44:40:10:fc:78:15:d5:62:19:25:11:fd:69:7e:2d:1f:1d:
ed:00:00:54:f6:6c:8f:26:c7:80:03:0b:e7:bc:91:66:4d:0a:
66:1c:f4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:14:33 2026 by rpki-client