Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
File: suRItKCPDkxYooPYBzWoqAPhDU4.mft (raw, json)
Hash identifier: qjfTtamBPrt7KsWRIkv7MeeSZ3JoHgQVbc+rZWmEhOE=
Subject key identifier: 33:F2:1C:94:D9:58:48:E0:DA:F4:CE:0C:97:78:A4:9E:D6:EF:14:44
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 019EB98F48D3FE7021CFF3CDF5F91B7578C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
Manifest number: 1960
Signing time: Fri 12 Jun 2026 02:00:35 +0000
Manifest this update: Fri 12 Jun 2026 02:00:35 +0000
Manifest next update: Sat 13 Jun 2026 02:00:35 +0000
Files and hashes: 1: 6gi0D2d3F-6yRjXm-eX58bSWUUA.roa (hash: NKrlT1w6l/oPfwmwNC99xSyujc091Feg3snRea0OXPM=)
2: BFse6czCzhUX4BFCXNbQpH61aUc.roa (hash: lrRMx6suq3q2UqEU3Xlh4+QvJ0ImVI5zT7U/+FSxmC4=)
3: Ky8jp1Zp3SE33IK4OJ5ro_Au50s.roa (hash: 3YeTlhlPLg4f3wbYqV7xvH/ZVjip5tcjie4ghX8ZC2U=)
4: Qdkm6PKgiBsT4JZ1n8rJEzIQYHs.roa (hash: u+F0D46TeogunUYjDLBQ/aHLUk0cfPyyk8VSCqcft9w=)
5: SGh_0_StZ-bip9gscWJB5whR3RM.roa (hash: 6hZbIPbSJWU4puEyHHUPbKbE4av5+/Ai8H+XhwiWL6Q=)
6: _55ywDLnzvOKWe2unaSpuNQ0t3c.roa (hash: XA1Xcl34gTTJa1QUQQ662CXBI++I6u11CFStYV9ej58=)
7: slsZ68MPftYXN9pQnzxYluXDbhA.roa (hash: jrP6prWJ1ru05dcj4SCoZCFUzqKdj7enUCqjPJl+Z1U=)
8: snWlJ9KWiKllVlOYxcTSSk2w5Qc.roa (hash: ZxgfjmsocDadOVUIv+6VPgxBAaxcQnvX/Wg+wlyzBz8=)
9: suRItKCPDkxYooPYBzWoqAPhDU4.crl (hash: qAJfNGW9G4HRPG9IfRTvI6aWZqSaqnLPYML0Z0T58ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:48:d3:fe:70:21:cf:f3:cd:f5:f9:1b:75:78:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: Jun 12 02:00:35 2026 GMT
Not After : Jun 13 02:00:35 2026 GMT
Subject: CN=33f21c94d95848e0daf4ce0c9778a49ed6ef1444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:32:4d:26:4d:3d:14:67:33:fe:f4:95:77:56:
80:a2:57:85:62:af:3d:c9:c9:55:5c:b7:fd:81:28:
e7:93:2f:ff:ca:5f:d8:a0:d8:4a:ea:af:a8:26:37:
e7:86:6f:cf:d9:66:1b:0f:0b:c2:fb:c1:57:0c:1b:
f2:18:c8:3f:21:54:58:f1:08:a3:cb:2e:e6:c6:19:
e3:d0:23:4a:93:11:18:bb:e8:93:3c:f2:e9:c8:43:
bf:fd:15:ea:63:be:a5:5f:05:c9:2e:3f:f9:2f:33:
c0:d6:e2:92:7f:6c:44:e3:66:aa:f0:26:7e:9a:66:
0b:cd:be:2e:80:fc:49:9b:04:04:df:0b:c0:52:45:
3c:22:51:63:85:04:44:19:9c:b3:31:e7:39:37:dc:
5e:b8:ce:31:8a:b7:ae:3c:26:15:64:72:05:d4:6b:
7e:bd:58:06:31:41:ab:ea:a8:3d:c0:4b:57:dc:37:
d4:b7:c6:88:d2:e9:a0:a3:6e:6a:ed:de:8f:3d:57:
03:89:9f:7d:18:8e:2f:8b:d3:db:85:ca:73:18:69:
38:0d:82:09:6a:90:26:b2:11:23:ec:6c:cc:cb:db:
c4:c9:89:df:72:e2:c5:46:13:2b:93:3d:3c:70:66:
36:69:bc:ed:84:03:dc:8c:e8:b1:5a:38:c7:c7:a5:
2f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F2:1C:94:D9:58:48:E0:DA:F4:CE:0C:97:78:A4:9E:D6:EF:14:44
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d4:e1:8c:84:a9:12:9c:e0:0a:fa:70:8d:b7:c1:43:8b:12:
8a:c3:da:99:9c:17:52:8d:69:ee:30:22:16:84:20:07:11:92:
f7:73:ab:3d:3d:17:69:9f:e8:90:d3:26:aa:3c:a1:f6:c9:5a:
d3:29:29:09:1f:f7:f7:f5:cf:cf:3d:d0:48:ee:b1:25:a0:a9:
10:c7:27:e0:11:96:24:50:48:51:f1:55:81:df:41:4d:36:95:
50:29:9b:a5:6d:48:52:2d:91:7a:f5:c1:54:3e:0f:7b:2b:a1:
38:05:4d:6a:38:01:a6:9a:51:ca:7a:aa:01:33:32:50:86:34:
97:0f:d3:d4:8f:18:4d:b6:8d:40:d6:6e:80:2c:73:e5:58:b9:
82:9f:e4:d4:20:ef:fa:f6:14:27:60:3f:bd:f1:4a:b9:1c:d5:
24:1c:ea:d9:53:71:f5:34:8a:1e:cf:38:44:83:c1:79:9f:08:
d5:9c:83:84:4f:63:46:d6:fc:c9:20:b7:a7:83:a5:bf:7f:17:
38:7f:72:45:55:78:72:32:e3:1b:52:c6:2f:07:ce:68:0e:6c:
ce:a0:20:43:bd:0a:78:5e:65:40:e5:01:07:d7:8b:31:09:86:
43:6a:27:66:0c:22:9d:27:1b:7a:62:c8:76:ff:b9:6c:40:36:
cc:23:c1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:36:13 2026 by rpki-client