Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
File: SUKa2sRAwGNzIEXa68w9kVLjXLs.mft (raw, json)
Hash identifier: krPIVo2kBdjxoltFQRw1MFp0fydCQvVCWDuQ9zjtcu4=
Subject key identifier: 98:31:C7:70:E8:73:C8:D8:2F:E4:D1:0C:38:3E:AF:1A:F0:FB:44:36
Authority key identifier: 49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
Certificate issuer: /CN=49429adac440c063732045daebcc3d9152e35cbb
Certificate serial: 019D39AEEA0F9D457DEE7D95A4AF14837435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
Manifest number: 083A
Signing time: Sun 29 Mar 2026 13:00:57 +0000
Manifest this update: Sun 29 Mar 2026 13:00:57 +0000
Manifest next update: Mon 30 Mar 2026 13:00:57 +0000
Files and hashes: 1: SUKa2sRAwGNzIEXa68w9kVLjXLs.crl (hash: gHzdyMlK9OyPR4ird3HBorOxczf8+vGuoDS9z3ch5QM=)
2: y3bvy_33tu5eNo5dntWwgBiVOKM.roa (hash: 0jBLusOYMXpJ9g0mg0/UmdwotUwhOWWhPW6bnD34ATs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:ea:0f:9d:45:7d:ee:7d:95:a4:af:14:83:74:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49429adac440c063732045daebcc3d9152e35cbb
Validity
Not Before: Mar 29 13:00:57 2026 GMT
Not After : Mar 30 13:00:57 2026 GMT
Subject: CN=9831c770e873c8d82fe4d10c383eaf1af0fb4436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:66:ce:0a:b9:04:82:d0:8a:99:53:c7:83:fb:
30:e1:49:72:7f:cf:ee:f0:8e:84:84:02:cf:28:c6:
5f:67:6a:7f:2b:11:70:cf:1c:a5:20:fe:9d:81:cc:
53:73:b3:9d:56:67:85:03:d1:ac:c6:29:da:f8:ae:
63:af:59:0e:f0:07:ce:7c:34:bc:92:f3:8c:51:09:
96:59:92:8c:65:81:4d:7d:09:e7:6c:51:ad:d2:e8:
af:b5:bd:70:30:d3:eb:31:9f:0e:78:ea:1b:7a:66:
99:8c:02:16:1b:8a:eb:f3:58:ea:4f:1a:b1:67:4f:
19:5a:59:91:9e:24:11:3f:4b:27:a5:dd:2d:ac:4b:
c4:4f:38:80:07:3c:1d:e9:be:72:b5:2d:ac:25:7e:
6d:0c:08:f4:a3:d2:8a:1a:56:d6:98:e3:df:37:19:
54:fe:38:39:0c:5c:7d:38:aa:78:7b:40:30:dd:8a:
49:3a:07:ab:a2:f5:6b:51:bb:26:0a:98:4c:5c:7c:
90:44:61:4e:64:88:f3:e0:af:7c:bf:b7:a7:aa:4b:
1f:ea:dc:0c:cf:60:68:54:4f:34:cf:48:05:3d:7a:
33:ee:f1:5e:db:37:90:5f:ce:a3:d8:90:37:9f:4f:
02:0c:d6:78:e5:e9:67:f3:77:c7:2b:34:7a:04:ad:
65:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:31:C7:70:E8:73:C8:D8:2F:E4:D1:0C:38:3E:AF:1A:F0:FB:44:36
X509v3 Authority Key Identifier:
keyid:49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:56:05:08:90:bc:72:7a:77:ac:1c:07:10:a5:5e:a5:2d:de:
a2:be:f2:49:f1:69:fb:83:f0:8e:92:d0:52:de:b1:f0:cb:b0:
9a:60:28:eb:af:80:cf:9a:0a:11:58:9b:dc:7a:31:a2:e9:08:
65:df:02:07:9c:cb:8d:1a:f4:01:ee:ed:24:b3:70:ab:7d:bf:
57:4e:38:72:d5:81:ae:ae:b5:cb:46:e9:42:df:af:f7:58:63:
a9:1c:ab:5e:32:25:75:3f:d8:4f:ef:ea:01:d7:56:16:0d:e8:
46:29:0d:0c:b4:40:67:59:de:61:14:db:f0:6e:fb:ad:fa:40:
60:9d:77:5c:ad:4f:0b:dc:43:8d:55:4d:56:47:e0:cd:96:8f:
72:4a:0a:66:94:0b:49:fc:12:ef:50:40:f2:8e:9e:42:76:73:
ce:50:6c:a7:ed:d3:5e:c6:6a:e0:1d:1e:34:a4:00:c7:95:71:
14:bc:65:3b:c4:44:bd:36:ec:55:39:f9:3f:89:c0:21:fd:ec:
9d:40:8c:64:cc:84:19:ba:af:43:60:a6:9a:bb:41:ec:76:1f:
10:11:67:11:81:92:3a:b2:15:82:16:cf:d9:98:7f:6f:0a:5a:
a8:f7:11:d7:a5:67:aa:8d:5c:83:ca:cb:ff:62:be:82:98:24:
df:53:ec:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:17 2026 by rpki-client