Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
File: suRItKCPDkxYooPYBzWoqAPhDU4.mft (raw, json)
Hash identifier: 83QeNexBkhihQMwOCPcVBHhJmfvH+FZgks1H0aW4dBE=
Subject key identifier: 3D:E1:E6:28:3F:14:4F:72:24:3A:6B:92:B8:21:46:D9:6B:81:F1:24
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 01A1803D6612D01C020F896BC4A4D4D318A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
Manifest number: 1AD0
Signing time: Wed 28 Oct 2026 02:01:09 +0000
Manifest this update: Wed 28 Oct 2026 02:01:09 +0000
Manifest next update: Thu 29 Oct 2026 02:01:09 +0000
Files and hashes: 1: 6gi0D2d3F-6yRjXm-eX58bSWUUA.roa (hash: NKrlT1w6l/oPfwmwNC99xSyujc091Feg3snRea0OXPM=)
2: BFse6czCzhUX4BFCXNbQpH61aUc.roa (hash: lrRMx6suq3q2UqEU3Xlh4+QvJ0ImVI5zT7U/+FSxmC4=)
3: Ky8jp1Zp3SE33IK4OJ5ro_Au50s.roa (hash: 3YeTlhlPLg4f3wbYqV7xvH/ZVjip5tcjie4ghX8ZC2U=)
4: Qdkm6PKgiBsT4JZ1n8rJEzIQYHs.roa (hash: u+F0D46TeogunUYjDLBQ/aHLUk0cfPyyk8VSCqcft9w=)
5: SGh_0_StZ-bip9gscWJB5whR3RM.roa (hash: 6hZbIPbSJWU4puEyHHUPbKbE4av5+/Ai8H+XhwiWL6Q=)
6: _55ywDLnzvOKWe2unaSpuNQ0t3c.roa (hash: XA1Xcl34gTTJa1QUQQ662CXBI++I6u11CFStYV9ej58=)
7: slsZ68MPftYXN9pQnzxYluXDbhA.roa (hash: jrP6prWJ1ru05dcj4SCoZCFUzqKdj7enUCqjPJl+Z1U=)
8: snWlJ9KWiKllVlOYxcTSSk2w5Qc.roa (hash: ZxgfjmsocDadOVUIv+6VPgxBAaxcQnvX/Wg+wlyzBz8=)
9: suRItKCPDkxYooPYBzWoqAPhDU4.crl (hash: dfcF0ClToemJCrgguGll9EysA0LpXNbeSV0gHHNzLOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:66:12:d0:1c:02:0f:89:6b:c4:a4:d4:d3:18:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: Oct 28 02:01:09 2026 GMT
Not After : Oct 29 02:01:09 2026 GMT
Subject: CN=3de1e6283f144f72243a6b92b82146d96b81f124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:4c:6b:a1:41:4a:3f:c2:67:a3:64:5d:ea:
49:ea:05:0c:08:9c:41:1b:d3:72:01:99:af:b1:6d:
34:f8:8d:0e:65:91:8a:fc:89:3f:16:cf:0a:ed:38:
e5:a6:45:a3:a7:c9:8d:9d:d0:4e:f1:45:f1:6f:97:
71:48:db:2a:42:32:ef:7f:6d:32:db:f4:09:aa:a3:
85:fd:92:7d:ea:d7:40:91:5f:4b:c9:0b:6e:65:ee:
09:19:35:2e:db:19:d5:19:4c:7b:7e:b9:07:89:27:
87:96:17:e7:ed:65:4f:0c:d7:85:74:75:2e:3c:67:
ca:b9:60:34:52:22:16:6b:49:f9:4a:56:dc:61:75:
d2:5d:b9:b4:ea:f3:23:8b:1b:f2:1b:1e:12:d6:5b:
c3:5c:37:d8:79:7b:86:49:9f:14:92:95:9c:76:2a:
88:af:4d:03:76:bd:c9:aa:56:a0:f2:a0:fa:e1:38:
51:f7:22:88:6e:84:be:d0:39:a5:38:d4:1a:a5:02:
e1:9a:c7:aa:ae:0f:60:b0:dc:86:8c:27:b2:1d:ce:
d2:22:76:b3:82:c3:c3:bd:1d:6f:81:1f:b3:35:e0:
2c:fd:ba:df:4d:db:8e:29:5e:b1:85:d9:59:a4:69:
92:2e:d9:37:9c:7d:d3:a9:ec:a8:0d:c6:ef:15:25:
41:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E1:E6:28:3F:14:4F:72:24:3A:6B:92:B8:21:46:D9:6B:81:F1:24
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:76:35:4c:09:51:9b:3e:65:26:24:6d:ce:d8:40:3e:ed:1c:
1e:e6:90:24:ab:72:94:c9:83:81:e8:91:a4:29:cb:22:03:09:
ab:1b:7e:db:9e:42:3a:0a:e9:cd:e8:1a:1b:16:79:21:f5:ea:
70:56:15:39:d3:08:9a:3c:b6:c4:71:46:9d:19:97:10:0e:c9:
cd:46:35:d4:71:77:2e:cc:d8:f3:df:97:f5:01:41:d0:1e:7f:
3b:84:ea:ee:5e:e5:02:3e:9b:fa:39:07:dc:a3:d0:d2:34:10:
c9:c0:5f:d4:13:45:31:5f:7a:bf:75:e0:0a:9b:8a:17:e1:b8:
51:06:67:9e:0a:64:7c:02:56:8d:40:20:cd:74:12:ba:0c:50:
e1:4e:d7:68:77:89:29:17:71:3a:48:ec:e4:c2:e9:c0:39:16:
54:90:27:c1:e7:0b:e4:b1:b2:87:7b:a9:9d:fc:39:61:7d:19:
53:ac:e8:cc:0e:3c:97:67:cd:7b:bd:b7:b8:c8:da:98:2b:c6:
38:19:c2:fa:68:4d:20:93:4f:aa:d7:d1:af:47:1e:59:e1:48:
c1:19:aa:87:b9:f6:cd:19:f3:95:ab:33:bb:97:ca:72:45:1e:
4a:7e:22:24:06:87:20:f8:4f:3a:e4:67:e9:1d:b3:82:a1:81:
7e:0c:37:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:40:37 2026 by rpki-client