Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
File: suRItKCPDkxYooPYBzWoqAPhDU4.mft (raw, json)
Hash identifier: 1zeJIVfCEYLjg1jtAKIP/aMXqxysUXyHuU772XP/vos=
Subject key identifier: E1:57:F5:D7:58:0F:F9:16:29:87:EB:C7:CF:EF:20:33:3E:EA:0A:91
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 019D3940CD1FA3B3F4DBA7A134151BCF5865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
Manifest number: 1899
Signing time: Sun 29 Mar 2026 11:00:41 +0000
Manifest this update: Sun 29 Mar 2026 11:00:41 +0000
Manifest next update: Mon 30 Mar 2026 11:00:41 +0000
Files and hashes: 1: 6gi0D2d3F-6yRjXm-eX58bSWUUA.roa (hash: NKrlT1w6l/oPfwmwNC99xSyujc091Feg3snRea0OXPM=)
2: BFse6czCzhUX4BFCXNbQpH61aUc.roa (hash: lrRMx6suq3q2UqEU3Xlh4+QvJ0ImVI5zT7U/+FSxmC4=)
3: Ky8jp1Zp3SE33IK4OJ5ro_Au50s.roa (hash: 3YeTlhlPLg4f3wbYqV7xvH/ZVjip5tcjie4ghX8ZC2U=)
4: Qdkm6PKgiBsT4JZ1n8rJEzIQYHs.roa (hash: u+F0D46TeogunUYjDLBQ/aHLUk0cfPyyk8VSCqcft9w=)
5: SGh_0_StZ-bip9gscWJB5whR3RM.roa (hash: 6hZbIPbSJWU4puEyHHUPbKbE4av5+/Ai8H+XhwiWL6Q=)
6: _55ywDLnzvOKWe2unaSpuNQ0t3c.roa (hash: XA1Xcl34gTTJa1QUQQ662CXBI++I6u11CFStYV9ej58=)
7: slsZ68MPftYXN9pQnzxYluXDbhA.roa (hash: jrP6prWJ1ru05dcj4SCoZCFUzqKdj7enUCqjPJl+Z1U=)
8: snWlJ9KWiKllVlOYxcTSSk2w5Qc.roa (hash: ZxgfjmsocDadOVUIv+6VPgxBAaxcQnvX/Wg+wlyzBz8=)
9: suRItKCPDkxYooPYBzWoqAPhDU4.crl (hash: iHOjnRPkqtk+VYuKiADv2whuX9FuNwCskKsooXhluhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:cd:1f:a3:b3:f4:db:a7:a1:34:15:1b:cf:58:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: Mar 29 11:00:41 2026 GMT
Not After : Mar 30 11:00:41 2026 GMT
Subject: CN=e157f5d7580ff9162987ebc7cfef20333eea0a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b1:15:73:5c:dd:2f:d5:bc:59:2a:b6:e2:fd:
0f:d7:f6:5d:48:ac:3e:7e:56:71:ff:ff:06:e4:54:
2b:25:17:2e:a9:9b:a4:e9:ca:74:24:7a:7f:91:9a:
f7:82:05:fc:32:1e:41:0d:70:4b:0b:ae:ee:be:b2:
e5:96:5c:70:ac:4e:9b:3b:1a:2a:7b:bb:bf:0d:81:
87:21:22:9f:a5:b6:97:01:3e:13:89:16:60:45:c7:
d5:38:3f:fc:18:2f:9f:33:2d:7b:3f:7a:cf:77:73:
9c:8c:b1:c3:d2:f8:b0:34:b8:c5:f2:f7:6d:d6:72:
6c:64:79:b0:3e:0a:c1:6c:48:23:fb:51:fd:ec:f3:
2e:40:6b:2d:2a:28:27:5d:0a:22:58:00:89:2c:aa:
f7:90:c7:6e:6e:f0:12:f1:76:36:06:6d:29:d2:e4:
79:bb:0d:20:f9:55:e5:3b:65:9c:ef:83:95:7f:83:
13:37:6f:0c:b1:63:59:51:50:63:a4:7d:a6:55:d7:
8f:8d:5e:5f:2a:f5:e8:a4:45:e5:e9:4f:bd:ac:f6:
03:53:1f:be:f0:82:a6:a1:bc:c7:10:48:7f:5c:60:
d9:26:ee:38:e7:93:aa:f2:90:c7:0e:c3:3a:76:9d:
54:25:d7:67:70:e9:3a:e8:44:e4:39:e9:de:9b:06:
db:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:57:F5:D7:58:0F:F9:16:29:87:EB:C7:CF:EF:20:33:3E:EA:0A:91
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2b:cd:8d:ff:58:e0:24:26:e7:d5:1b:82:bf:f7:15:f6:b3:
2a:aa:a3:dd:f2:a4:57:48:8a:8a:9c:02:5e:21:fc:d8:59:2c:
6b:80:7b:7b:8d:7c:5f:4f:89:47:86:2d:37:9f:5f:a2:be:7c:
4e:d7:dc:33:2c:c8:de:a5:2d:d5:d1:40:8d:cc:6d:61:ae:41:
b8:b3:15:1e:8c:0f:b6:8e:59:e1:31:a7:58:19:74:7b:a6:ca:
94:3e:4e:3a:48:d9:e9:f2:a7:e7:8e:f4:37:5a:fa:0e:e3:b3:
71:f9:be:71:75:c0:29:de:b3:9f:b4:2f:50:3d:43:23:3c:30:
ef:d4:c5:e7:16:be:eb:51:12:0a:b5:7b:e6:6b:ea:88:67:29:
28:b1:4f:14:91:36:3d:6c:61:8a:d5:51:25:a0:db:42:9d:00:
df:d4:96:e0:73:4c:73:5e:8b:54:5c:88:96:c9:48:ac:d9:4d:
d8:02:bb:7f:bd:3b:c3:ab:14:5d:00:37:5f:6c:1e:2a:01:34:
ff:53:ca:62:a9:19:af:c1:6d:81:be:d2:73:27:c5:75:71:48:
e6:2f:68:8f:c9:3b:37:b3:fd:c9:f0:e0:d0:6e:42:e5:f9:76:
2b:9d:8d:1f:35:22:55:c2:69:ef:ea:c4:fe:1a:7b:1c:9e:da:
eb:65:de:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:04 2026 by rpki-client