Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
File: Su-5nSoG7pneqVZvFr8ibbPlbJI.mft (raw, json)
Hash identifier: IWJYNY8uPLXbSVdBYDbrcjjfHKICTJSE6iK/1tVbDmc=
Subject key identifier: A1:5E:8A:42:13:8B:4D:4B:82:78:F9:A8:2B:A1:58:1B:7A:B3:CA:DE
Authority key identifier: 4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
Certificate issuer: /CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Certificate serial: 019D3909A674625B0FBBB3D53ACA34BA2F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 10:00:26 +0000
Manifest this update: Sun 29 Mar 2026 10:00:26 +0000
Manifest next update: Mon 30 Mar 2026 10:00:26 +0000
Files and hashes: 1: 0qSgEj9RKFqvqN-inwjjWZFI1pg.roa (hash: k4mc0z9gAu2JzOR/GrWxi/A3ANg5O3FYVYf/5aBTRK4=)
2: Su-5nSoG7pneqVZvFr8ibbPlbJI.crl (hash: NjyAhaU61GVKpI4JNh9CIQtjJs88wz0dnmot8MEakX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:a6:74:62:5b:0f:bb:b3:d5:3a:ca:34:ba:2f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Validity
Not Before: Mar 29 10:00:26 2026 GMT
Not After : Mar 30 10:00:26 2026 GMT
Subject: CN=a15e8a42138b4d4b8278f9a82ba1581b7ab3cade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:0d:4d:af:1f:70:bd:2c:8f:14:b5:e5:b5:
fc:7a:24:69:76:34:50:e4:7e:63:fd:44:18:d1:e9:
a9:e7:32:1f:14:a2:f9:6b:8d:15:2b:b7:68:59:64:
d4:c3:9c:11:4e:58:c5:ca:b3:4d:3c:29:d6:88:16:
2b:2f:88:ef:89:c7:49:55:2c:9d:2b:1f:4d:00:8f:
a7:f9:1e:2e:09:e8:bf:66:2c:10:f6:37:b5:d6:78:
97:b6:fe:e3:4e:5b:27:ef:0a:cb:9b:ef:60:f2:25:
21:61:fa:06:e3:78:4c:77:1b:1a:6d:89:31:d9:7c:
27:a8:f7:d1:08:aa:e7:e2:30:37:4c:02:49:c3:d0:
f7:81:17:38:f0:83:6b:9d:7e:10:47:ef:de:f9:d0:
15:d7:16:84:7b:00:b8:7c:76:6c:a3:e4:ad:58:ab:
ec:78:23:20:ac:b4:4a:8d:ff:2a:74:c0:9c:ed:68:
25:38:3c:68:52:51:7f:fa:ff:0c:ed:08:c7:84:b2:
7b:4b:b8:49:9a:72:7a:85:25:19:98:07:f8:7f:7a:
a0:a7:3c:e4:48:40:cd:01:8b:f9:d2:75:20:5b:1a:
2e:23:e9:28:4c:7f:a1:b0:1d:90:f8:30:7d:56:4a:
92:92:bd:c5:8a:3c:4d:59:07:c5:0d:58:6c:73:bd:
77:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5E:8A:42:13:8B:4D:4B:82:78:F9:A8:2B:A1:58:1B:7A:B3:CA:DE
X509v3 Authority Key Identifier:
keyid:4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:88:cd:d0:a2:b9:0d:b8:bd:38:9b:f6:82:30:74:44:43:d7:
24:85:a4:34:70:1c:a8:31:16:fe:93:92:69:bd:b8:84:63:6c:
eb:b7:53:b0:7a:47:6e:cc:7d:8b:67:fd:ec:ec:18:c3:40:e3:
e5:36:c4:56:d4:0a:a8:76:02:0d:bd:3d:02:f3:1f:7d:50:a9:
5d:08:c7:3b:ca:f0:f4:60:03:94:19:14:c3:97:8e:67:11:a9:
0b:75:83:e5:53:cd:e0:26:06:37:1f:66:d7:a6:1c:cb:30:b5:
51:90:a6:ca:de:2a:55:af:a6:b4:cc:7d:b3:5b:07:44:0b:4b:
b8:52:49:d9:30:66:5f:ea:11:a2:76:04:93:89:84:be:0e:e6:
93:9b:9d:33:4d:e4:1f:7a:c7:12:e6:7b:91:bf:44:ad:5a:e7:
9a:28:96:b7:e0:5c:4b:77:48:2c:70:6c:c4:b0:ed:9e:ad:f8:
97:9a:78:fa:33:02:de:75:86:35:1d:10:24:e3:95:ef:9f:a0:
04:8d:46:0a:b4:73:6a:11:dc:8a:e0:2b:e4:7e:ce:8e:c5:e3:
be:90:cb:f1:85:7d:57:6a:73:8c:01:50:12:bb:04:78:2c:bf:
dc:ca:f7:d2:ad:bf:8b:05:56:76:56:a6:d2:6b:52:b5:5e:7b:
ee:79:96:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:23:58 2026 by rpki-client