Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
File: SUqFZSdrSiUbpXPdbV9fh4I469I.mft (raw, json)
Hash identifier: Mf8u3lNq59wtg+i5twB4znA/MmJDOclWefZ1HQWxLcs=
Subject key identifier: AE:0D:4F:02:23:CC:F7:34:E2:C9:09:46:E4:F2:7F:91:8B:BE:09:85
Authority key identifier: 49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2
Certificate issuer: /CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
Certificate serial: 019D382E25F348428E66FBC1C517538B37C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
Manifest number: 140C
Signing time: Sun 29 Mar 2026 06:00:41 +0000
Manifest this update: Sun 29 Mar 2026 06:00:41 +0000
Manifest next update: Mon 30 Mar 2026 06:00:41 +0000
Files and hashes: 1: SUqFZSdrSiUbpXPdbV9fh4I469I.crl (hash: AlL800BTw0w+99TnUDLSQBtHaEE2zgk1gnT+AhTEjTo=)
2: aq077HDVuYpFz4tohOgQZVXtR0I.roa (hash: lmR3p1MzRx0IGSbTUTZO/Vwf3/td5VWtWsrVAx4InFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:25:f3:48:42:8e:66:fb:c1:c5:17:53:8b:37:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
Validity
Not Before: Mar 29 06:00:41 2026 GMT
Not After : Mar 30 06:00:41 2026 GMT
Subject: CN=ae0d4f0223ccf734e2c90946e4f27f918bbe0985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:38:85:cc:8c:1d:69:21:e6:53:2f:46:63:
d1:e0:a1:bc:bd:95:a6:55:f2:33:cc:cf:6b:21:ed:
a3:f4:c1:56:3f:e5:ce:55:58:80:76:65:2e:74:cf:
3d:33:da:ac:ce:4f:58:a3:c0:43:15:6d:41:68:20:
ff:94:3e:4d:51:2b:fe:e8:60:8c:40:ee:c2:df:91:
89:25:6b:26:4a:fe:51:76:8e:84:ca:53:41:01:df:
e8:58:4b:2d:8a:02:6f:96:a9:67:d2:64:7c:19:a6:
95:12:52:c3:2b:1e:1f:a3:a5:bf:f8:ff:e2:55:8d:
42:89:64:17:c4:cc:0d:85:7d:61:98:59:4e:9a:97:
60:ae:e2:d5:66:56:14:f5:60:40:2e:7f:56:88:cc:
0f:95:6e:87:50:86:e8:7d:b3:ee:52:3b:f7:7a:92:
32:7a:45:35:25:b0:fc:37:d0:02:12:98:2a:a8:c7:
a7:83:f0:df:57:1a:37:66:2b:62:70:f7:4d:6b:26:
a4:de:ba:20:9b:aa:c4:7c:a7:bc:99:2c:cb:fc:5f:
de:14:ad:e0:cd:35:2f:b5:4c:bb:41:b6:10:5c:1b:
68:3b:46:45:74:d6:05:1c:90:82:fe:90:53:cd:ae:
95:97:f0:78:ed:0c:51:89:e4:d3:72:2a:32:d8:42:
ee:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0D:4F:02:23:CC:F7:34:E2:C9:09:46:E4:F2:7F:91:8B:BE:09:85
X509v3 Authority Key Identifier:
keyid:49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:39:1d:79:e1:15:07:82:4a:4a:01:e0:02:3c:f5:e5:80:ca:
2f:b5:b7:6a:c9:5b:b8:c8:1b:ee:16:55:3d:76:e8:bb:04:10:
80:e3:f1:35:2f:96:ef:3d:4b:4b:6c:f8:a0:8c:b5:8f:33:0f:
5d:4e:20:b8:d4:6b:28:44:da:10:8f:38:26:d9:e6:ce:dd:9b:
4d:8a:c2:31:d9:2f:bf:ec:29:31:05:71:f9:5c:37:0c:fd:e6:
ae:be:36:9b:e9:5f:2f:fa:70:7e:99:62:39:bd:07:16:87:75:
cf:4e:16:e0:99:e6:43:67:8d:4f:fe:1a:c0:cb:48:c4:a0:f2:
e4:ff:70:f6:9d:cf:ba:8d:d8:0c:9f:16:0d:e6:60:5e:e0:51:
77:29:28:0e:12:0d:ed:8d:80:35:bc:37:8a:c5:2e:f3:15:51:
cf:db:21:a1:01:19:aa:6c:ff:ac:87:e3:1e:df:72:43:b1:4d:
14:cf:b8:54:f7:b1:2d:4e:43:a5:3e:dc:81:39:89:1d:8e:3c:
c8:de:13:eb:26:79:5a:71:bf:3b:84:58:d4:90:24:c7:26:15:
fe:20:48:c3:54:d6:3f:6d:a8:e6:ad:75:4d:ed:d1:bb:e7:43:
66:74:70:30:da:fa:89:74:90:e0:f3:ee:80:cc:ca:89:c5:c8:
ba:4b:da:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:03 2026 by rpki-client