Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
File: SUKa2sRAwGNzIEXa68w9kVLjXLs.mft (raw, json)
Hash identifier: t649XSl/emVNnAYtGUNiDRxCfc6uEr78v7uDSu+LKqM=
Subject key identifier: D8:0A:F2:94:38:CE:D4:D0:0B:3F:5B:28:C2:F5:DB:42:09:80:51:6A
Authority key identifier: 49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
Certificate issuer: /CN=49429adac440c063732045daebcc3d9152e35cbb
Certificate serial: 01A17514B932863D07CF55C24126DDD4778B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
Manifest number: 0A6B
Signing time: Sun 25 Oct 2026 22:00:54 +0000
Manifest this update: Sun 25 Oct 2026 22:00:54 +0000
Manifest next update: Mon 26 Oct 2026 22:00:54 +0000
Files and hashes: 1: SUKa2sRAwGNzIEXa68w9kVLjXLs.crl (hash: zpSaKouXIpWUsxH8lY0nOPl6XOjZDmx4AvEJsOV002A=)
2: y3bvy_33tu5eNo5dntWwgBiVOKM.roa (hash: 0jBLusOYMXpJ9g0mg0/UmdwotUwhOWWhPW6bnD34ATs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:14:b9:32:86:3d:07:cf:55:c2:41:26:dd:d4:77:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49429adac440c063732045daebcc3d9152e35cbb
Validity
Not Before: Oct 25 22:00:54 2026 GMT
Not After : Oct 26 22:00:54 2026 GMT
Subject: CN=d80af29438ced4d00b3f5b28c2f5db420980516a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6d:f4:79:b0:47:df:eb:fa:30:1c:41:1f:6b:
4b:10:c4:5a:d7:6e:7e:48:e5:18:46:ac:13:02:4b:
93:b0:67:d1:41:a8:16:d1:43:61:b8:a7:4d:05:d6:
79:5a:a6:f8:6f:dd:f9:c2:c3:dc:e7:f6:85:15:ac:
17:0d:9e:b3:de:56:ca:98:e0:45:62:aa:12:d6:1f:
ba:8a:e1:7c:9f:5c:2b:24:99:da:bf:b0:0e:57:c2:
df:64:da:b0:d4:71:0f:25:c3:f7:ec:ed:ad:93:6d:
02:32:75:4f:fc:b2:eb:d1:66:69:46:a8:75:62:dd:
5d:1b:92:0c:d0:23:54:47:fa:de:0c:69:72:35:c5:
fe:cf:98:eb:4e:e6:c4:ea:2d:6f:77:b7:a0:83:cd:
58:27:fa:55:5f:5a:e9:65:e6:55:1a:2a:e7:97:9e:
e1:69:fd:be:28:c2:0e:77:37:9c:01:3b:8c:d2:a1:
5f:bb:f2:c2:49:fb:2f:56:97:43:7c:85:7b:d7:b2:
65:01:ad:aa:68:0e:39:9c:21:34:24:ad:7c:8f:f5:
15:81:45:bb:55:17:df:61:22:62:70:f8:64:ad:76:
a8:9f:9e:37:3e:21:13:6f:5c:15:89:b0:92:3b:6f:
d1:27:c9:bd:33:1a:3d:4f:4e:1a:3f:52:43:e9:f5:
ed:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0A:F2:94:38:CE:D4:D0:0B:3F:5B:28:C2:F5:DB:42:09:80:51:6A
X509v3 Authority Key Identifier:
keyid:49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c9:ed:2c:c3:99:d8:54:ed:b1:c1:35:3f:ca:c6:e1:2b:5b:
66:98:eb:cd:bb:fc:47:4d:b4:36:aa:4d:32:33:d4:ec:4a:88:
93:04:fe:8e:38:4c:08:c3:2b:11:3e:77:3d:88:9a:1d:6f:b0:
bd:dd:aa:2b:d9:10:6f:0b:73:4d:ab:d1:eb:7b:55:cc:f5:97:
d5:fd:88:a3:53:7b:8e:e9:8b:32:63:64:b1:3f:99:fb:ce:2c:
89:fb:4e:30:62:70:93:91:52:af:23:28:0a:c3:77:a2:b9:49:
f8:49:96:f9:0a:13:ac:04:6c:48:49:46:b7:c0:45:ff:19:3d:
53:fb:cd:a1:ae:d3:30:e5:14:ef:ff:93:9b:d3:f6:fc:0b:70:
fe:55:ec:9e:da:81:cd:17:2f:99:2d:8c:32:96:3d:c9:c0:07:
fe:2e:03:9e:94:ec:ba:65:35:fb:a0:65:12:c7:3b:3d:e6:f3:
d4:cf:7e:77:a1:8c:4b:cc:18:6b:a0:af:cc:4e:71:2f:3a:e1:
7c:f1:a8:15:70:2f:90:6f:df:bb:fb:c0:19:60:e6:28:27:41:
85:04:ca:63:7d:29:78:14:9f:ff:cc:f7:52:13:6c:f7:cb:c7:
a2:76:c5:09:09:df:a7:36:cb:cc:7f:25:00:9e:d4:6f:95:ae:
9c:22:ef:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:52:15 2026 by rpki-client