Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
File: suORFp8MnyGqjy6J5zdccuxnT-s.mft (raw, json)
Hash identifier: tWGqhgIoYxuOwZomzeQKgBFByUIYsUrtE6TVmM+sgGQ=
Subject key identifier: 3A:EB:C0:9B:B0:25:3C:F4:D2:BD:27:93:19:A9:A9:0F:B3:8C:AB:BA
Authority key identifier: B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
Certificate issuer: /CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Certificate serial: 019D37C018376C513D8EC194EBD577708261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 04:00:29 +0000
Manifest this update: Sun 29 Mar 2026 04:00:29 +0000
Manifest next update: Mon 30 Mar 2026 04:00:29 +0000
Files and hashes: 1: PaUq1i1qchD33WEhkgfziRXOQqo.roa (hash: 4jZTQPexjQrBRUzBh0uva4unQWrx3Cy+0TA6XIINReI=)
2: suORFp8MnyGqjy6J5zdccuxnT-s.crl (hash: IlT+5Tz8SAMra+wq7tC1zD8J6x/wIDVDhSoKhIBusyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:18:37:6c:51:3d:8e:c1:94:eb:d5:77:70:82:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Validity
Not Before: Mar 29 04:00:29 2026 GMT
Not After : Mar 30 04:00:29 2026 GMT
Subject: CN=3aebc09bb0253cf4d2bd279319a9a90fb38cabba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:c8:c5:95:01:fb:53:8a:77:61:70:11:11:
6d:a9:8e:07:69:5a:5d:7c:92:84:c7:e7:77:05:e9:
6f:d3:4b:12:8a:b6:2b:e2:87:26:1f:08:85:97:30:
69:a3:8c:02:fa:4f:a9:96:7d:bb:62:6f:76:ff:39:
2e:d2:be:6f:26:d7:6e:75:3b:56:9e:44:e0:b6:43:
e5:7d:eb:b7:49:08:87:a3:50:f3:63:96:6e:59:b8:
1c:5e:6a:06:ea:0e:9d:a6:e0:2a:91:01:54:6b:30:
37:de:d1:7f:b6:fb:7b:bd:58:ad:0c:46:07:5d:db:
e6:13:e7:aa:a4:c2:f8:d7:95:86:be:93:23:69:75:
51:29:c8:27:de:e9:0b:09:9d:91:f8:e5:d5:84:22:
4f:d1:ee:f2:0a:56:d5:58:3f:2a:a2:17:ad:db:ef:
07:1a:54:23:8b:60:35:37:21:a5:88:0e:89:81:3d:
13:7d:26:2c:9a:d9:a3:37:99:a2:44:35:b1:02:1f:
25:73:16:dd:14:41:b6:7f:2a:e9:ae:83:e4:52:e8:
07:ab:a1:a4:5e:b0:62:5f:e9:33:43:6d:ab:7d:7c:
bd:84:35:63:4f:dd:94:ae:38:e5:1b:67:47:00:61:
2c:22:70:c6:e7:e1:da:a2:bc:ec:76:04:a1:88:12:
12:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EB:C0:9B:B0:25:3C:F4:D2:BD:27:93:19:A9:A9:0F:B3:8C:AB:BA
X509v3 Authority Key Identifier:
keyid:B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:bd:a4:36:a9:e3:ad:ed:72:4e:30:17:04:3f:5d:fd:c9:e4:
46:12:84:f0:2b:12:d3:b6:2d:e2:d7:b9:a8:01:f6:20:48:c5:
19:3e:49:b8:53:7a:3b:b5:00:46:55:fe:20:e1:3f:a1:e0:91:
52:f2:be:4a:70:1a:5d:d5:d7:80:fe:4c:22:fb:1a:a3:37:3b:
11:b8:e0:25:c5:41:0a:40:22:5e:cb:83:30:ed:3c:18:38:4a:
b0:8d:1e:11:0e:78:43:95:ab:0e:70:33:d8:0d:d1:a1:d2:28:
3f:d5:fd:12:26:51:04:d1:c0:35:4f:56:55:4f:36:04:50:d6:
1a:22:60:c7:44:27:4b:0d:2d:92:58:42:e4:54:28:e5:40:d2:
37:3a:36:6d:81:12:c1:53:90:e6:0e:1a:c9:9c:e0:c6:b6:77:
cb:b5:6c:d9:46:be:d1:ad:f7:87:c7:8e:52:34:ea:ff:b3:14:
8c:f2:95:e0:81:73:a5:f1:92:54:97:29:70:ed:af:33:6a:fa:
89:35:31:da:d4:cf:ce:91:18:44:70:2f:5e:1b:ad:db:6f:d2:
ad:08:93:af:c9:94:66:e9:42:ec:e0:a0:02:08:aa:f3:57:6b:
0d:f7:44:c8:ac:22:7f:51:d6:3a:8a:ba:7a:d5:0c:20:b2:be:
94:48:7c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:37 2026 by rpki-client