Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
File: SUKa2sRAwGNzIEXa68w9kVLjXLs.mft (raw, json)
Hash identifier: PCIrDZMMvvhglTfWemGU4cgp4N9/sl/Xip0k2iZiUuI=
Subject key identifier: F9:B6:5E:BD:B4:A5:0B:C3:B4:79:C8:89:14:21:77:36:ED:72:15:0F
Authority key identifier: 49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
Certificate issuer: /CN=49429adac440c063732045daebcc3d9152e35cbb
Certificate serial: 01A0024AE76339491ECF36545EF4BA0BA76F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
Manifest number: 09AB
Signing time: Fri 14 Aug 2026 22:00:58 +0000
Manifest this update: Fri 14 Aug 2026 22:00:58 +0000
Manifest next update: Sat 15 Aug 2026 22:00:58 +0000
Files and hashes: 1: SUKa2sRAwGNzIEXa68w9kVLjXLs.crl (hash: mFFHJNudrOVZCrU0j8UQe89bl2N3OCxCLmooW36P5RE=)
2: y3bvy_33tu5eNo5dntWwgBiVOKM.roa (hash: 0jBLusOYMXpJ9g0mg0/UmdwotUwhOWWhPW6bnD34ATs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:e7:63:39:49:1e:cf:36:54:5e:f4:ba:0b:a7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49429adac440c063732045daebcc3d9152e35cbb
Validity
Not Before: Aug 14 22:00:58 2026 GMT
Not After : Aug 15 22:00:58 2026 GMT
Subject: CN=f9b65ebdb4a50bc3b479c88914217736ed72150f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:ef:c6:46:e4:b4:79:86:14:84:40:09:d5:
0d:4e:0e:67:f3:35:e5:8c:c8:f2:d0:9c:7a:9b:ce:
f2:74:6b:b1:94:07:f1:c4:12:82:67:db:7a:13:cb:
fd:19:8b:bf:cc:1b:c5:bf:ba:d1:7d:6b:bb:40:c9:
55:b6:34:03:0f:c3:13:48:92:c4:52:b5:94:75:10:
57:c8:e2:23:43:1e:5e:02:db:44:a5:76:da:30:6c:
ee:24:c6:15:04:5a:92:ec:4e:b2:9c:ed:cd:00:6c:
d7:37:48:d7:41:97:69:53:e5:d7:8f:18:f4:e9:93:
5c:a0:c9:b2:ff:a2:86:cd:9d:3a:2c:85:57:8f:cc:
a0:bc:2e:ef:15:3f:7d:f8:ae:7a:f4:cb:0d:14:3d:
7d:71:15:09:43:89:6a:b4:ae:10:80:1e:6b:b2:40:
c3:8a:96:c5:c0:7d:21:2d:27:99:38:61:96:f6:62:
bf:9d:02:e7:b3:3b:bf:2a:55:e5:cb:7b:1c:84:e2:
41:8c:1c:26:a3:7f:53:46:f2:cf:d9:44:68:05:aa:
20:57:43:36:e3:3c:8d:bc:16:47:98:09:49:bc:55:
49:34:53:07:75:e1:5a:b5:f8:64:7b:7b:b3:92:d6:
27:58:53:99:1c:e5:c5:89:e0:3e:ae:25:93:2f:7f:
a1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B6:5E:BD:B4:A5:0B:C3:B4:79:C8:89:14:21:77:36:ED:72:15:0F
X509v3 Authority Key Identifier:
keyid:49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4d:a5:8c:c0:0e:b2:48:88:ca:13:22:57:03:21:2a:32:a3:
32:b1:7c:8f:f9:f0:fe:0a:3b:0a:83:46:ca:0f:63:19:f9:49:
8a:47:86:e5:f0:32:7b:83:f1:00:fa:9b:94:06:8d:03:a8:72:
f8:36:56:a1:cf:82:c6:e9:a6:2c:c0:1f:e8:2e:17:e0:f2:aa:
04:b7:df:53:0f:ab:7d:bb:c3:73:2c:41:14:6f:bf:d0:ea:a6:
44:be:5a:6d:3a:49:fb:8a:d6:ab:3f:51:f1:df:de:56:b9:8c:
ae:a1:51:ba:16:f4:3f:a7:8b:ca:fe:0c:f9:78:c1:a0:2c:43:
8e:31:ca:3d:5d:70:cb:b4:76:df:9a:ce:a7:43:70:71:a6:81:
8d:61:aa:dc:ba:af:02:29:4b:95:2e:95:9c:9e:02:0f:38:ca:
18:7b:a4:1a:93:63:4f:40:91:0f:0e:ff:f6:cb:81:5f:0f:56:
98:c8:98:0f:22:53:73:f6:27:bc:62:0e:f9:e0:72:ae:d4:5f:
cb:64:d8:21:22:cc:8b:26:51:25:fe:23:22:e2:a2:d0:4d:6f:
28:4b:ba:24:7b:60:ec:cb:f9:81:f5:f5:fb:96:3f:07:88:2f:
4a:a5:b9:d0:87:43:cb:c7:42:f8:d7:94:f6:34:4f:d8:88:e7:
90:1c:cf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:04:23 2026 by rpki-client