Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/suXpDY0mf9L71iJboruzDZ3bVyo.mft
File: suXpDY0mf9L71iJboruzDZ3bVyo.mft (raw, json)
Hash identifier: reCKSqy/hWlfDKtM4EDsyG5XS6LlNRARFwK+M60v6Kg=
Subject key identifier: E0:11:DF:F3:B8:35:63:A2:2E:1A:C3:92:43:68:61:19:8E:83:9C:26
Authority key identifier: B2:E5:E9:0D:8D:26:7F:D2:FB:D6:22:5B:A2:BB:B3:0D:9D:DB:57:2A
Certificate issuer: /CN=b2e5e90d8d267fd2fbd6225ba2bbb30d9ddb572a
Certificate serial: 019EFD600EAF03987644ED3D2F495BAC01AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suXpDY0mf9L71iJboruzDZ3bVyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/suXpDY0mf9L71iJboruzDZ3bVyo.mft
Manifest number: 04
Signing time: Thu 25 Jun 2026 06:03:11 +0000
Manifest this update: Thu 25 Jun 2026 06:03:11 +0000
Manifest next update: Fri 26 Jun 2026 06:03:11 +0000
Files and hashes: 1: MA2eUiec6lzn7G3y4eaX1yAN448.asa (hash: Ysea5davk1qLvtEcYl28yJFlaRzv3Oa26wKYrZRLCfU=)
2: suXpDY0mf9L71iJboruzDZ3bVyo.crl (hash: dxxxLthuVqSrIy7Dzx6UQX+Y2DKcFBL0RRN8QFRx7Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/suXpDY0mf9L71iJboruzDZ3bVyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/suXpDY0mf9L71iJboruzDZ3bVyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/suXpDY0mf9L71iJboruzDZ3bVyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:60:0e:af:03:98:76:44:ed:3d:2f:49:5b:ac:01:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e5e90d8d267fd2fbd6225ba2bbb30d9ddb572a
Validity
Not Before: Jun 25 06:03:11 2026 GMT
Not After : Jun 26 06:03:11 2026 GMT
Subject: CN=e011dff3b83563a22e1ac392436861198e839c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cf:a8:ee:ad:dc:7b:06:68:24:fc:ec:a3:4c:
06:3e:81:5c:8a:31:e9:80:7c:8c:c7:da:92:fa:96:
14:ef:0c:17:77:4a:74:63:12:8c:74:bb:e5:5a:af:
01:59:ad:90:89:3d:3f:64:67:77:7f:40:71:ba:33:
a2:70:7a:5c:7d:41:70:c2:8e:60:a6:aa:5c:90:e1:
27:42:90:17:3d:21:ab:db:bb:d2:bf:c8:67:4a:bb:
19:f1:ac:1a:0c:86:99:2e:6d:d6:9c:06:a6:53:b5:
0b:e3:94:51:55:af:40:89:bc:0a:da:b1:b8:eb:1f:
79:05:60:64:b2:5e:e4:c4:4a:5d:41:f3:44:a5:19:
a7:32:f6:0b:97:c7:da:21:99:9d:b9:5b:d3:4a:db:
b6:d8:50:60:b1:ad:99:37:78:8f:9e:6b:59:6d:ea:
08:34:cc:d0:90:e5:0d:71:f1:e5:6f:70:f1:28:ce:
f1:90:fe:32:c7:66:95:4f:73:99:57:b5:a4:04:ad:
8c:85:97:2b:70:4a:5e:84:d7:80:25:05:18:74:8a:
47:08:fd:c4:df:2b:e1:20:9a:12:7a:44:63:5a:05:
ad:30:fe:89:18:cd:16:f1:73:d4:6d:36:20:40:a7:
4c:02:a2:40:6d:c5:15:bd:21:06:88:12:92:e8:86:
eb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:11:DF:F3:B8:35:63:A2:2E:1A:C3:92:43:68:61:19:8E:83:9C:26
X509v3 Authority Key Identifier:
keyid:B2:E5:E9:0D:8D:26:7F:D2:FB:D6:22:5B:A2:BB:B3:0D:9D:DB:57:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suXpDY0mf9L71iJboruzDZ3bVyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/suXpDY0mf9L71iJboruzDZ3bVyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/suXpDY0mf9L71iJboruzDZ3bVyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:92:41:cb:1c:b4:a6:d9:38:76:f5:6d:85:9a:e9:d1:56:94:
8c:e5:fd:ff:4b:1c:64:80:01:38:16:be:e3:c0:a4:ae:84:57:
5c:f0:dc:c9:2c:1e:49:12:60:61:2b:17:bf:bb:29:2e:7c:d8:
9e:45:32:8e:cd:fd:23:57:6c:b3:4c:07:1d:28:35:3c:4b:1e:
67:1f:82:d0:35:45:51:0f:b9:c4:8f:ca:69:3a:2c:65:ee:34:
4b:c3:fc:01:5a:b0:af:a3:b5:02:05:97:31:ce:33:ca:52:d5:
c9:95:bd:7d:9e:ef:d4:df:cb:67:55:cf:13:08:eb:fb:6b:28:
84:31:cc:80:0e:15:43:11:b9:b5:2c:1f:41:66:b4:d4:eb:f8:
ba:e8:74:4e:b2:bc:f1:ff:6f:fd:2b:20:31:9a:a6:c0:f2:70:
b6:17:1a:4c:e7:d3:4e:47:99:80:98:22:f7:9f:7b:3d:17:a7:
bd:bf:69:3c:4a:fa:1f:c2:4d:8e:9a:ba:0b:7a:ee:91:e7:6f:
91:52:7b:ad:c8:25:46:7b:e7:6d:c7:8a:eb:00:77:fa:6b:89:
94:1f:bf:e3:b1:61:7f:27:eb:a3:0b:5b:80:1a:49:42:90:0c:
3e:0c:42:6b:d0:c4:44:bd:d1:c3:49:ab:57:63:d0:d2:75:73:
22:51:07:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:59:34 2026 by rpki-client