Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
File: SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft (raw, json)
Hash identifier: VBrax5KlqeZjj/PXyvi/v+Kv2NEWIhSilvlrXdG77zk=
Subject key identifier: 1E:B9:5F:43:2D:BE:84:19:CF:5E:BD:A1:AF:09:E5:AE:92:2B:F6:3F
Authority key identifier: 4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
Certificate issuer: /CN=4aebd4543df29da64e4232ef3791f534573c12f1
Certificate serial: 01A1795F4A8211FD8831530EFC5820FEC780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
Manifest number: 0EC7
Signing time: Mon 26 Oct 2026 18:00:50 +0000
Manifest this update: Mon 26 Oct 2026 18:00:50 +0000
Manifest next update: Tue 27 Oct 2026 18:00:50 +0000
Files and hashes: 1: SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl (hash: 6VtVSpr8KmjqKrYC/cdrTHAA5vyMxShBsc94uAZ6SCU=)
2: kypMcuIm-WpR0ZjTrQvN18lgASs.roa (hash: rpyCcsQ2xUEDWY8mMlJ3ItAHPdOq2MVR8TSSQ09U5AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:5f:4a:82:11:fd:88:31:53:0e:fc:58:20:fe:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aebd4543df29da64e4232ef3791f534573c12f1
Validity
Not Before: Oct 26 18:00:50 2026 GMT
Not After : Oct 27 18:00:50 2026 GMT
Subject: CN=1eb95f432dbe8419cf5ebda1af09e5ae922bf63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:99:f5:f3:c1:c6:c8:53:94:9a:e1:46:af:
59:14:f6:d2:25:3f:6d:eb:41:82:32:5c:47:42:4a:
02:a5:b4:ac:fd:ed:f9:e4:72:d0:5a:c7:54:d2:8d:
82:04:6a:72:5b:86:0c:58:b3:38:27:e2:bf:ad:86:
6f:86:6b:4a:98:31:99:09:21:65:f6:90:fb:93:19:
09:3e:c2:6c:48:b4:16:fa:d0:1d:f2:bc:ee:ca:fb:
fb:b6:ff:15:da:25:dc:07:24:9d:f1:f7:c0:b6:68:
75:37:66:a7:a8:81:3c:e3:bf:d3:e0:49:bd:df:6a:
3b:30:6c:60:e1:4e:90:36:d6:b1:c7:11:3f:06:09:
78:4d:cb:a9:38:9b:57:bf:f1:cb:72:d5:29:bb:15:
7d:d2:5b:00:9a:a9:17:07:fc:06:09:90:65:2c:a1:
f2:f5:0a:ce:7a:32:38:4f:98:dc:1d:95:c3:33:eb:
ec:63:b8:af:48:12:97:fc:f7:e4:d9:ff:ca:84:9c:
34:98:7f:8a:63:13:15:84:7c:89:34:73:db:f3:90:
d8:93:84:02:f3:de:07:b7:12:69:d8:b9:5a:1a:b6:
c1:26:f1:55:dd:c9:95:a7:85:df:e0:a1:60:5b:58:
f7:23:91:b6:bb:23:fd:df:9f:de:3f:84:f5:15:db:
fc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B9:5F:43:2D:BE:84:19:CF:5E:BD:A1:AF:09:E5:AE:92:2B:F6:3F
X509v3 Authority Key Identifier:
keyid:4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6b:63:f1:04:0a:b3:40:ac:38:bc:15:12:3b:4c:e8:2c:d5:
c2:d7:11:16:8b:57:d2:18:fe:4e:f0:c6:0d:e3:2f:d8:dd:1c:
3b:bc:f8:63:05:72:07:5c:94:e9:4b:09:7f:87:15:28:0d:a4:
4b:c1:78:3b:ba:67:e2:97:d7:d0:c4:3c:5a:66:99:84:7f:50:
33:7a:a3:b5:e5:52:56:c5:83:6d:de:ad:86:95:b0:5a:1a:52:
3e:c8:44:f1:1f:83:58:57:8a:17:07:5c:b6:4c:c2:05:38:ea:
67:ec:fb:24:d2:ec:e4:c5:35:85:9e:aa:92:d8:2f:9a:d0:3e:
5c:1b:8f:9b:e4:4c:d6:73:45:bc:22:87:a5:8f:c8:9d:2e:9d:
c7:5a:7b:dc:cd:94:03:6e:f5:c6:a7:d3:47:8c:2c:7e:2f:74:
f3:43:52:74:39:51:db:fe:30:db:97:41:50:e8:40:7e:d3:b3:
bf:06:0a:4e:6c:25:de:18:70:1c:f8:af:70:da:e2:d4:0a:c4:
bc:54:c7:08:f6:e5:d7:18:25:cf:8c:f2:f6:82:70:a1:a8:81:
70:a5:08:1e:8f:8a:5b:c1:ab:43:1a:fb:18:3c:ec:d5:0a:7a:
19:2a:a2:ed:44:73:da:11:dd:0c:69:19:42:61:1d:50:cb:19:
5a:cd:53:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:59:07 2026 by rpki-client