Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/950a20-599a-4e78-998c-a769db907bf4/1/suXMb3FVOXdgDMQRu-uYjRZjHnU.mft
File: suXMb3FVOXdgDMQRu-uYjRZjHnU.mft (raw, json)
Hash identifier: tdm71kWTyDxJcfd/ZUBnM+sk+V9UjQVnBXeeLAlpFg4=
Subject key identifier: 4B:03:40:FD:E4:83:5C:F7:FC:1C:6D:53:11:19:AD:73:9E:71:0F:76
Authority key identifier: B2:E5:CC:6F:71:55:39:77:60:0C:C4:11:BB:EB:98:8D:16:63:1E:75
Certificate issuer: /CN=b2e5cc6f71553977600cc411bbeb988d16631e75
Certificate serial: 01A1035B2BC086B35A680A92DE34C6B0C010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suXMb3FVOXdgDMQRu-uYjRZjHnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/950a20-599a-4e78-998c-a769db907bf4/1/suXMb3FVOXdgDMQRu-uYjRZjHnU.mft
Manifest number: 58
Signing time: Sat 03 Oct 2026 20:01:08 +0000
Manifest this update: Sat 03 Oct 2026 20:01:08 +0000
Manifest next update: Sun 04 Oct 2026 20:01:08 +0000
Files and hashes: 1: suXMb3FVOXdgDMQRu-uYjRZjHnU.crl (hash: jjfHteJBN1iFqYt8bDmEktmYBmqwXaETzaVDTsRjgz8=)
2: x4cPD1EJXBWEbFTeeGp8lHvzP6s.roa (hash: 1c7bHKSm2FryEiD26IsKwnBSp5MMVBFvGXNakIgfTYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/950a20-599a-4e78-998c-a769db907bf4/1/suXMb3FVOXdgDMQRu-uYjRZjHnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/950a20-599a-4e78-998c-a769db907bf4/1/suXMb3FVOXdgDMQRu-uYjRZjHnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/suXMb3FVOXdgDMQRu-uYjRZjHnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:5b:2b:c0:86:b3:5a:68:0a:92:de:34:c6:b0:c0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e5cc6f71553977600cc411bbeb988d16631e75
Validity
Not Before: Oct 3 20:01:08 2026 GMT
Not After : Oct 4 20:01:08 2026 GMT
Subject: CN=4b0340fde4835cf7fc1c6d531119ad739e710f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:18:76:fe:6b:72:d3:ac:77:16:eb:33:b7:
e9:bc:90:e8:b3:bd:a2:86:61:12:e5:31:63:45:c8:
bb:4c:32:88:19:0c:c6:e9:2f:79:29:03:33:52:36:
06:d8:5c:39:19:8f:5d:a9:9e:77:f1:1b:ce:0a:60:
3b:a1:db:c9:34:e2:89:39:e7:0f:28:98:3a:23:d8:
c2:66:3a:9e:49:0e:a9:39:8e:ef:1f:9b:e6:b3:8b:
17:4d:83:47:46:6e:c2:7a:10:23:99:af:a6:0a:03:
f0:9c:33:f5:d8:23:45:73:ea:94:37:a1:b5:f5:7a:
f4:6d:93:ea:6b:f2:e6:80:0a:77:99:61:39:47:1b:
da:9c:10:56:4b:bc:77:4c:de:90:86:67:b6:ae:08:
34:09:60:91:d6:c9:a9:d6:bd:6c:9e:19:29:f2:16:
b2:63:3c:20:80:b4:3f:1b:72:b4:16:fa:d9:8e:9d:
da:9b:48:c0:b9:33:3e:36:63:d9:4a:7d:eb:7d:d8:
30:ce:c0:8f:a7:10:d9:b5:e1:35:68:74:e2:df:8a:
b2:10:d3:82:c0:19:3b:a0:74:96:dc:a6:ce:6c:4b:
8c:33:69:8c:b7:07:38:65:d1:90:5a:b5:6f:bc:06:
bd:f8:4a:80:48:5e:9e:86:b9:a2:1a:2e:f8:56:21:
1d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:03:40:FD:E4:83:5C:F7:FC:1C:6D:53:11:19:AD:73:9E:71:0F:76
X509v3 Authority Key Identifier:
keyid:B2:E5:CC:6F:71:55:39:77:60:0C:C4:11:BB:EB:98:8D:16:63:1E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suXMb3FVOXdgDMQRu-uYjRZjHnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/950a20-599a-4e78-998c-a769db907bf4/1/suXMb3FVOXdgDMQRu-uYjRZjHnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/950a20-599a-4e78-998c-a769db907bf4/1/suXMb3FVOXdgDMQRu-uYjRZjHnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:fe:8c:b3:40:a4:5f:d6:b6:68:05:8b:b5:76:1d:e1:08:c6:
27:b5:d5:e1:df:78:37:74:0b:02:a6:9b:07:09:5f:09:88:6b:
7f:e4:04:e1:4c:28:b2:e1:b4:08:29:f2:c9:61:9b:fb:73:a4:
2b:f4:f4:2b:5d:37:c3:78:29:95:69:2a:0b:e4:28:28:f7:74:
b2:6a:91:9c:19:9a:bb:56:63:8e:ed:7c:6e:e9:6a:4e:3c:0e:
b1:5b:d8:fd:dc:f8:0f:cb:f3:f0:30:f6:5d:f6:39:6a:89:e4:
d2:8f:bf:45:35:ca:7f:20:15:b3:de:81:21:48:dd:b3:9f:8e:
af:33:ab:7f:2d:69:98:48:54:16:13:63:39:2a:69:53:1a:50:
c2:3f:02:f2:b9:78:9d:22:df:df:26:45:e6:72:1c:4d:4d:c1:
78:07:d7:f3:77:b8:a2:3f:f5:0d:e7:30:6e:ea:21:d4:fb:80:
c2:f9:5e:42:1b:7c:63:39:7f:16:f3:ec:ea:db:6e:88:38:5c:
23:91:0e:62:c9:08:28:df:a1:00:a5:14:2b:cf:22:1b:86:93:
63:c2:c4:5d:87:47:e4:b4:36:be:93:e4:5b:0d:97:49:ae:95:
1f:8d:5f:f4:7e:e3:ff:0e:e0:95:3a:e8:e7:7d:d9:8b:24:d2:
e8:b2:a8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:41:01 2026 by rpki-client