Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
File: suORFp8MnyGqjy6J5zdccuxnT-s.mft (raw, json)
Hash identifier: gh1txkyg2va+SBhrcS1i0W9+EAqY8dnWIo1lPhk6RJI=
Subject key identifier: 54:36:8C:56:E3:B8:72:CF:76:3E:40:50:7D:D5:C2:27:0A:CD:C6:EB
Authority key identifier: B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
Certificate issuer: /CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Certificate serial: 01A1070168C736D27CFCD8C79EEB50A6F3B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
Manifest number: 1A1B
Signing time: Sun 04 Oct 2026 13:01:35 +0000
Manifest this update: Sun 04 Oct 2026 13:01:35 +0000
Manifest next update: Mon 05 Oct 2026 13:01:35 +0000
Files and hashes: 1: PaUq1i1qchD33WEhkgfziRXOQqo.roa (hash: 4jZTQPexjQrBRUzBh0uva4unQWrx3Cy+0TA6XIINReI=)
2: suORFp8MnyGqjy6J5zdccuxnT-s.crl (hash: 9DhETxPxnXV7YstiCurodPgQCLg5LcM8CG/+al5zJ6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:01:68:c7:36:d2:7c:fc:d8:c7:9e:eb:50:a6:f3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Validity
Not Before: Oct 4 13:01:35 2026 GMT
Not After : Oct 5 13:01:35 2026 GMT
Subject: CN=54368c56e3b872cf763e40507dd5c2270acdc6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:21:e4:46:94:3e:31:45:38:ef:cd:94:90:f2:
6a:9c:a7:f8:af:6a:44:89:13:55:3d:25:2d:28:a8:
26:b5:2c:9d:44:25:c3:28:2b:dd:e6:e9:c8:a2:01:
a0:b6:10:cc:8f:97:dd:1d:57:dd:53:4b:d3:2d:36:
5a:ca:1c:42:22:d5:ec:e2:20:01:03:c9:89:b0:31:
25:aa:c3:8d:39:82:c8:0f:17:d4:a9:67:8f:d6:78:
09:b2:12:3e:60:99:f7:7a:68:f1:48:aa:8c:13:0e:
00:dd:d7:cc:f0:70:0a:96:a0:d9:bb:07:5a:35:95:
3b:ed:59:b9:54:db:2b:50:07:c3:43:81:17:45:14:
1d:3d:d3:5b:9b:75:e6:6c:e6:f9:36:10:90:d0:dd:
bb:bf:28:5c:40:1e:7e:99:8d:3d:71:cb:b8:df:02:
63:c0:06:2b:36:63:57:11:a8:03:2a:11:8d:ce:8f:
38:5d:6f:64:50:dd:ca:bf:c3:8c:9b:28:ab:a1:54:
46:78:d3:73:8b:c1:de:77:72:b7:f4:0b:f3:6f:5f:
f3:37:eb:76:70:01:31:86:14:a5:0d:98:db:15:25:
18:5f:a1:dd:0e:84:79:8a:22:55:3a:59:9b:27:19:
48:1c:45:54:00:d0:11:1d:02:b3:d9:cc:55:25:68:
32:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:36:8C:56:E3:B8:72:CF:76:3E:40:50:7D:D5:C2:27:0A:CD:C6:EB
X509v3 Authority Key Identifier:
keyid:B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:22:7c:52:79:42:fb:4f:7e:07:86:db:7e:eb:1c:a8:6c:99:
e3:df:25:3a:8a:64:79:83:72:55:02:fb:a5:b2:33:52:51:69:
8a:23:81:d6:10:a9:23:e2:c2:db:b8:a4:bd:55:8f:45:d7:3d:
01:ac:13:d7:c6:84:fb:8a:1f:10:df:74:84:7d:86:d0:37:10:
8d:36:51:1f:64:3d:84:bd:8b:e2:a9:65:49:c1:78:c9:78:21:
f3:17:60:a3:ab:6c:d5:a0:f0:13:73:58:89:47:98:87:e2:f4:
5b:32:88:ae:50:cd:80:c5:57:5c:a1:b9:e4:09:ae:1a:30:3b:
8a:bb:83:de:2e:7d:c3:f0:b5:69:e2:2a:cf:2b:63:8c:5f:29:
b5:8a:6e:4f:61:b8:f0:5e:68:19:af:97:d9:1c:99:10:48:87:
d7:b2:8c:91:97:5d:c8:3b:0b:65:8e:ea:4d:6d:6e:fb:41:60:
6b:e7:65:16:d6:90:30:b4:07:d7:c2:c5:ae:eb:a9:43:63:4d:
15:23:06:04:27:3c:52:ef:d5:7d:eb:73:a1:c8:05:27:58:8f:
f1:24:7a:18:8a:d0:17:1d:95:db:6d:e9:59:a4:98:a1:d2:6f:
1f:b5:63:da:3e:77:24:f1:61:09:b0:3f:b8:16:5a:be:f5:9b:
e8:6d:84:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 16:05:58 2026 by rpki-client