Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
File: suORFp8MnyGqjy6J5zdccuxnT-s.mft (raw, json)
Hash identifier: Zj2pJPSUIICxD6TlaehbiAIcnbiFxVtA3zToff6rdaA=
Subject key identifier: 97:40:2C:57:B2:D5:FF:3D:0D:27:18:B4:5E:A0:CF:96:47:3B:6E:37
Authority key identifier: B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
Certificate issuer: /CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Certificate serial: 019EF7CA3606234CE103D2B2EEF0EC243BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
Manifest number: 190A
Signing time: Wed 24 Jun 2026 04:01:24 +0000
Manifest this update: Wed 24 Jun 2026 04:01:24 +0000
Manifest next update: Thu 25 Jun 2026 04:01:24 +0000
Files and hashes: 1: PaUq1i1qchD33WEhkgfziRXOQqo.roa (hash: 4jZTQPexjQrBRUzBh0uva4unQWrx3Cy+0TA6XIINReI=)
2: suORFp8MnyGqjy6J5zdccuxnT-s.crl (hash: Uku+6EvSP/3HaOjderx/cIjqtTTu2zs6Ob4gbC9wQzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f7:ca:36:06:23:4c:e1:03:d2:b2:ee:f0:ec:24:3b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Validity
Not Before: Jun 24 04:01:24 2026 GMT
Not After : Jun 25 04:01:24 2026 GMT
Subject: CN=97402c57b2d5ff3d0d2718b45ea0cf96473b6e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b9:d9:05:7a:ce:d8:31:02:b9:20:c6:13:be:
fc:c1:97:f5:9b:7a:11:57:ee:31:bc:72:3f:96:8a:
b1:5f:21:d9:80:72:82:f6:b0:e6:0d:da:db:6e:eb:
1e:b1:fd:8b:0c:1c:2f:63:d8:f3:5e:75:ae:c7:67:
83:d8:8e:1b:ff:ab:2f:4f:84:8d:94:12:21:c1:0d:
7d:29:f6:fc:08:b6:80:e4:28:3c:1e:71:ba:5b:c7:
6e:4a:61:c8:c2:49:db:ed:18:da:a3:25:b7:ac:f2:
76:91:77:d0:24:ab:f3:5b:9d:3e:e3:6b:f0:f9:a5:
fb:5c:c3:c6:c0:90:8c:96:3f:da:c0:bb:18:da:2b:
67:c9:1f:dc:d0:33:3e:33:81:f0:32:65:13:78:40:
26:ea:44:ba:82:e2:1d:11:3e:17:93:e2:27:f5:41:
be:8a:5b:65:7d:f5:ab:ad:27:f3:52:71:13:6e:dc:
24:51:31:dc:7f:a9:98:07:1f:dc:e7:9d:8a:88:75:
94:00:56:a7:56:7c:a2:20:a1:1e:00:bb:1a:79:a0:
87:41:89:54:c9:47:92:65:d5:6f:4a:77:16:b6:89:
02:c1:c0:07:25:2e:dc:92:43:06:6a:5d:a3:c2:21:
6b:9e:ff:65:74:4e:af:77:46:75:66:59:98:d4:1e:
b4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:40:2C:57:B2:D5:FF:3D:0D:27:18:B4:5E:A0:CF:96:47:3B:6E:37
X509v3 Authority Key Identifier:
keyid:B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:2a:0a:70:da:53:47:7d:a0:e8:de:a8:e6:f9:e0:c2:aa:45:
40:58:5f:71:6d:6a:23:6b:0f:fe:9c:bf:7f:31:2c:46:04:44:
ab:54:a7:20:fe:a3:98:05:56:19:dc:cc:ca:0d:d2:1a:ce:93:
f7:6c:be:c9:ad:99:f0:9b:80:bc:31:5e:43:eb:7a:0c:28:bb:
62:a8:eb:97:cc:94:89:1e:18:28:13:46:9a:45:c4:52:a8:1a:
1d:7f:90:dc:3b:3f:bd:e9:b2:08:28:b1:5a:8a:d9:41:e9:2d:
48:25:c6:0a:47:01:38:98:d2:06:5e:9f:18:66:a4:51:31:db:
5d:ec:66:65:de:05:f3:83:c8:b2:03:ff:9e:11:4f:2c:7c:6c:
88:f0:f7:99:67:0a:ff:e6:51:8a:a0:6f:29:96:f5:31:0d:97:
c7:3f:b6:ae:2a:fc:45:34:0e:fd:19:23:da:03:94:ea:0e:ac:
20:ff:8d:8d:6e:c9:8b:1a:ce:e5:81:96:44:12:39:b1:da:6f:
93:03:66:10:a9:30:02:d7:11:09:54:5b:d9:e6:96:18:3b:8d:
81:ee:a1:f5:aa:61:ba:21:40:9b:d5:9a:cf:e3:56:23:b4:cb:
08:20:ec:01:a4:e8:82:11:a1:85:3d:46:5c:b7:ea:98:d1:22:
32:63:13:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:24:03 2026 by rpki-client