Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
File: SUKa2sRAwGNzIEXa68w9kVLjXLs.mft (raw, json)
Hash identifier: 58d/hHquD4FqbZcMYb1LAYJ2HOMYiLtskoTom1FhTP8=
Subject key identifier: AA:F9:45:9C:8C:83:75:E2:5A:72:45:31:55:9E:10:CC:F9:28:93:8C
Authority key identifier: 49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
Certificate issuer: /CN=49429adac440c063732045daebcc3d9152e35cbb
Certificate serial: 019E32CE88600691202754505DF4E1A4781E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
Manifest number: 08BB
Signing time: Sat 16 May 2026 22:00:56 +0000
Manifest this update: Sat 16 May 2026 22:00:56 +0000
Manifest next update: Sun 17 May 2026 22:00:56 +0000
Files and hashes: 1: SUKa2sRAwGNzIEXa68w9kVLjXLs.crl (hash: tnalFJM1kGpwBG48kqmoGrC7XrsIfNd4adSxglyP+Ps=)
2: y3bvy_33tu5eNo5dntWwgBiVOKM.roa (hash: 0jBLusOYMXpJ9g0mg0/UmdwotUwhOWWhPW6bnD34ATs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:ce:88:60:06:91:20:27:54:50:5d:f4:e1:a4:78:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49429adac440c063732045daebcc3d9152e35cbb
Validity
Not Before: May 16 22:00:56 2026 GMT
Not After : May 17 22:00:56 2026 GMT
Subject: CN=aaf9459c8c8375e25a724531559e10ccf928938c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:25:f4:be:4f:37:23:c3:58:03:9e:a3:0d:
df:fb:48:40:59:27:fc:6f:97:45:d3:09:7f:2b:ca:
f7:42:51:06:83:94:45:44:5c:bb:cc:00:0a:0b:7d:
42:14:40:9f:ee:5e:ba:b4:7f:c9:e4:45:85:22:d1:
8d:9f:89:5e:63:e5:42:6b:75:39:e8:7b:7d:e8:c6:
0b:1c:a7:74:c8:31:0d:47:d9:cc:6e:eb:fa:c9:3e:
d1:e7:42:8c:b0:0d:83:c7:dd:f8:94:a2:a0:4d:44:
58:61:c9:78:27:10:73:db:34:b9:5f:d4:5b:92:d1:
ef:c3:f9:69:7d:07:fd:fc:bd:6a:bc:f9:71:23:ec:
7b:29:02:86:dc:57:e8:e4:b6:3b:75:f1:58:0e:6d:
c4:d5:6f:cf:b6:0b:b4:eb:e1:f6:92:58:69:06:9c:
c6:db:b8:68:7a:72:7a:92:bd:8a:33:95:d0:45:eb:
ff:33:e2:57:d3:77:0b:46:c0:8f:8f:c5:22:8f:72:
9a:2d:60:42:a4:52:62:e6:99:38:3e:1e:d1:d5:04:
be:4d:8d:a7:46:b6:55:b3:9c:83:70:f5:24:6c:0a:
79:e2:49:e0:7d:f6:fc:60:29:0b:14:d2:52:7e:1b:
56:25:59:a6:4a:9c:c8:da:db:9b:78:2a:89:ca:1d:
c2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F9:45:9C:8C:83:75:E2:5A:72:45:31:55:9E:10:CC:F9:28:93:8C
X509v3 Authority Key Identifier:
keyid:49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:29:16:b4:af:48:bf:2d:0c:b8:75:3d:1e:cc:f1:3f:44:23:
41:da:5e:52:90:2d:76:21:46:d5:9d:89:4d:43:87:dd:8b:27:
06:aa:d2:cb:4a:a5:3b:14:5e:24:94:65:8c:4a:44:25:ef:6a:
78:11:57:fd:f1:94:c2:42:c1:9f:c7:7b:c8:c3:f9:9d:e3:9c:
68:a6:42:ba:6a:6b:03:f5:66:99:98:87:2d:a9:d1:4e:f0:cc:
88:4c:cb:d5:47:5c:d0:d5:e3:23:99:89:ae:72:13:4c:64:4e:
7a:cd:75:7b:d4:cd:03:8d:f8:4b:d2:ba:91:18:91:54:73:75:
4d:f7:6f:11:44:52:bd:c8:93:69:d3:d1:ec:45:70:57:ed:a9:
da:4c:a3:be:28:75:2b:06:e6:4c:25:d1:3d:82:15:a4:0c:86:
83:22:44:36:73:40:5d:18:0a:9e:57:de:58:ff:86:06:92:21:
db:4c:4c:6b:a3:c4:75:d9:17:3a:74:03:cc:c4:82:d2:4d:59:
09:7b:17:e1:c0:28:ef:0b:f7:87:16:48:bf:0f:16:81:22:92:
18:d6:42:ab:15:c3:77:30:78:dd:79:51:3b:55:50:0c:ea:ea:
94:f7:b7:1c:13:f9:b2:b6:2b:14:94:38:24:39:67:af:b2:06:
39:9d:ba:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4yzohgBpEgJ1RQXfThpHgeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NDI5YWRhYzQ0MGMwNjM3MzIwNDVkYWViY2MzZDkxNTJl
MzVjYmIwHhcNMjYwNTE2MjIwMDU2WhcNMjYwNTE3MjIwMDU2WjAzMTEwLwYDVQQD
EyhhYWY5NDU5YzhjODM3NWUyNWE3MjQ1MzE1NTllMTBjY2Y5Mjg5MzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvYl9L5PNyPDWAOeow3f+0hAWSf8
b5dF0wl/K8r3QlEGg5RFRFy7zAAKC31CFECf7l66tH/J5EWFItGNn4leY+VCa3U5
6Ht96MYLHKd0yDENR9nMbuv6yT7R50KMsA2Dx934lKKgTURYYcl4JxBz2zS5X9Rb
ktHvw/lpfQf9/L1qvPlxI+x7KQKG3Ffo5LY7dfFYDm3E1W/Ptgu06+H2klhpBpzG
27hoenJ6kr2KM5XQRev/M+JX03cLRsCPj8Uij3KaLWBCpFJi5pk4Ph7R1QS+TY2n
RrZVs5yDcPUkbAp54kngffb8YCkLFNJSfhtWJVmmSpzI2tubeCqJyh3CCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKr5RZyMg3XiWnJFMVWeEMz5KJOMMB8GA1UdIwQY
MBaAFElCmtrEQMBjcyBF2uvMPZFS41y7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1VLYTJzUkF3R056SUVYYTY4dzlrVkxqWExzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS80ODA4ZDctOGVmYi00MjE5LThmZTMt
ZWE5NDVkNjA0YjBlLzEvU1VLYTJzUkF3R056SUVYYTY4dzlrVkxqWExzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS80ODA4ZDctOGVmYi00MjE5LThmZTMtZWE5NDVkNjA0YjBl
LzEvU1VLYTJzUkF3R056SUVYYTY4dzlrVkxqWExzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCkWtK9I
vy0MuHU9HszxP0QjQdpeUpAtdiFG1Z2JTUOH3YsnBqrSy0qlOxReJJRljEpEJe9q
eBFX/fGUwkLBn8d7yMP5neOcaKZCumprA/VmmZiHLanRTvDMiEzL1Udc0NXjI5mJ
rnITTGROes11e9TNA434S9K6kRiRVHN1TfdvEURSvciTadPR7EVwV+2p2kyjvih1
KwbmTCXRPYIVpAyGgyJENnNAXRgKnlfeWP+GBpIh20xMa6PEddkXOnQDzMSC0k1Z
CXsX4cAo7wv3hxZIvw8WgSKSGNZCqxXDdzB43XlRO1VQDOrqlPe3HBP5srYrFJQ4
JDlnr7IGOZ26xQ==
-----END CERTIFICATE-----
Generated at Sat May 16 23:29:57 2026 by rpki-client