Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
File: sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft (raw, json)
Hash identifier: fmS+SKaybDlx2/Hl71k6c0n/7E0jd0MySsTf/nfZ8jY=
Subject key identifier: A7:5A:BC:16:5D:CF:41:57:16:05:EC:96:04:99:75:AD:88:61:07:00
Authority key identifier: B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05
Certificate issuer: /CN=b14658fcab37032dfea96ef0ae68dc9deff6d705
Certificate serial: 019D390A61B488752B28C13DEAED9F024C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
Manifest number: 1810
Signing time: Sun 29 Mar 2026 10:01:14 +0000
Manifest this update: Sun 29 Mar 2026 10:01:14 +0000
Manifest next update: Mon 30 Mar 2026 10:01:14 +0000
Files and hashes: 1: QBlYbj346qzHUv19Z-I6ndDq6qo.roa (hash: VEZ9eyiW7HYhsOu44s2MXlQaK3GSzzboX5o0voLYcrI=)
2: sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl (hash: Y6koFZcO5SB0PWfpf7poRgD5U5NPOLzAooLNI5fOcKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:61:b4:88:75:2b:28:c1:3d:ea:ed:9f:02:4c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14658fcab37032dfea96ef0ae68dc9deff6d705
Validity
Not Before: Mar 29 10:01:14 2026 GMT
Not After : Mar 30 10:01:14 2026 GMT
Subject: CN=a75abc165dcf41571605ec96049975ad88610700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:41:78:14:1c:bc:91:b2:fd:68:25:31:10:ce:
63:bb:16:89:65:1b:99:a2:0c:87:4e:9a:a6:13:30:
9d:43:fe:77:d6:f1:fb:04:e1:9d:b5:5d:b2:15:06:
15:32:03:74:4d:42:bd:f6:7e:11:3b:dd:9d:f6:f2:
5c:61:2e:7d:ca:67:fd:2e:9b:35:4d:fa:14:99:47:
03:34:10:06:af:5e:ba:ee:37:06:e0:31:ce:15:a6:
6f:cf:1c:1b:03:d6:37:5a:7d:76:9c:9b:74:3e:c0:
bb:44:b8:07:c5:0e:f5:61:a4:dc:a2:8e:d6:ac:57:
ef:82:3d:b4:8f:24:71:ca:a5:23:eb:f8:8a:13:d5:
55:b9:3d:9c:76:a7:07:60:e1:8a:30:42:c7:96:9b:
dd:00:7d:b4:7b:de:a2:85:98:cb:2b:32:ce:a9:8e:
63:35:36:c8:6d:7a:cb:67:69:22:27:ae:2a:15:0a:
aa:f8:25:c7:85:5b:4a:f7:6e:08:14:ba:ba:8b:0a:
15:fb:e5:c9:08:ae:45:55:37:8e:b5:5a:9c:7e:34:
cb:12:c7:d1:5f:26:66:2f:22:08:41:89:3d:b7:48:
20:c3:47:8d:97:1f:1a:60:66:86:27:1c:c4:9c:a7:
35:cf:92:fc:a4:8a:80:f3:79:00:88:8a:02:12:4b:
f6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5A:BC:16:5D:CF:41:57:16:05:EC:96:04:99:75:AD:88:61:07:00
X509v3 Authority Key Identifier:
keyid:B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a2:0d:6d:0b:59:a8:9a:6c:bc:0a:5c:6a:9a:62:1f:39:3e:
1e:af:b4:0e:84:cf:84:55:97:f6:93:8e:3c:7d:9a:7c:82:3a:
ca:2c:08:c9:81:e5:ff:e0:5d:4e:ce:27:d7:ce:bb:2b:6d:cc:
2f:a1:5e:ca:5f:b0:98:c7:40:c3:a6:61:8a:cd:a2:87:8c:99:
52:d9:78:97:57:e9:13:e8:45:b5:27:59:08:18:3f:58:32:35:
c7:d2:29:49:b7:e9:79:36:e8:ed:cf:23:2a:e0:3a:f5:6e:32:
3a:87:d5:b0:3f:42:42:0e:03:c0:88:87:b1:31:19:ba:72:11:
69:9e:ae:59:fd:bc:9c:2e:86:8c:b4:56:75:88:d8:ff:7c:be:
54:df:df:a9:b7:81:b2:60:79:ae:1c:18:e7:bb:8d:55:d6:b6:
ba:89:e2:27:0f:3b:91:b3:34:ac:31:e7:23:49:4c:f4:77:13:
b4:47:49:77:13:bd:b4:89:1e:fc:ae:c5:7f:fa:12:58:c5:49:
38:01:9a:05:f0:bb:20:1e:5e:1d:d4:6b:10:44:0f:3c:a1:24:
51:dd:d5:a4:68:b1:54:f7:da:ed:4e:34:13:28:1d:8e:19:99:
23:71:3f:57:37:dc:df:c0:34:b8:d0:62:99:1c:7a:5e:e1:20:
e6:cb:11:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:13:22 2026 by rpki-client