Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
File: SujQiQnRha9B0KDDvl6ijDUvAiY.mft (raw, json)
Hash identifier: cN1JwEZXZpMbn85OppU07M6LzM8LVLFoZbZlk91wqxI=
Subject key identifier: 65:D5:1C:09:CE:6B:CF:42:5E:7C:0E:12:2A:B4:88:E8:1C:11:58:A0
Authority key identifier: 4A:E8:D0:89:09:D1:85:AF:41:D0:A0:C3:BE:5E:A2:8C:35:2F:02:26
Certificate issuer: /CN=4ae8d08909d185af41d0a0c3be5ea28c352f0226
Certificate serial: 019D382DF6BEA8C7805E5695EBB60E1A4AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
Manifest number: 170E
Signing time: Sun 29 Mar 2026 06:00:29 +0000
Manifest this update: Sun 29 Mar 2026 06:00:29 +0000
Manifest next update: Mon 30 Mar 2026 06:00:29 +0000
Files and hashes: 1: SujQiQnRha9B0KDDvl6ijDUvAiY.crl (hash: lF+0paQVdgWH9rYCS1yFEDVzSrLFkyZNttXSGm36iKc=)
2: _kIyn54Kwl02SBVsVFIcVuZztFA.roa (hash: 72qRo50GT69ynWH6rCDwF6eh8ixb9QAqQtQqlDICbx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:f6:be:a8:c7:80:5e:56:95:eb:b6:0e:1a:4a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ae8d08909d185af41d0a0c3be5ea28c352f0226
Validity
Not Before: Mar 29 06:00:29 2026 GMT
Not After : Mar 30 06:00:29 2026 GMT
Subject: CN=65d51c09ce6bcf425e7c0e122ab488e81c1158a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:99:49:56:ed:03:68:4a:f9:be:da:15:11:
a2:a8:e7:83:23:b3:5b:3b:8d:3b:1c:d6:4b:09:09:
49:33:19:10:aa:d5:36:9f:c9:d2:31:d3:dc:e8:91:
98:0e:50:f8:fd:c6:7e:fb:e7:b4:21:3b:02:91:ef:
df:fc:1a:bf:be:78:f9:c3:0e:a0:b8:1d:36:e4:cf:
5d:11:85:f7:f2:39:e3:54:d4:0a:7e:19:bf:5e:63:
5f:f5:dc:a4:f0:ee:e1:bf:a9:79:84:73:0a:dc:2c:
5f:7f:62:ec:94:56:3d:36:f7:d5:e2:7a:fe:2b:f8:
c8:1f:93:06:8f:55:a6:cc:bd:3a:94:08:66:99:dc:
fa:eb:02:bd:98:29:38:36:79:a8:20:23:7b:3b:aa:
ef:7f:5c:3b:90:7c:e1:62:bf:96:4c:48:a1:77:22:
e0:6e:93:c6:3e:1d:29:f1:27:b9:2e:a3:a8:0f:8b:
55:79:3c:bf:af:87:33:f1:c9:54:35:a5:32:5c:65:
e2:f5:84:96:35:f7:56:bb:c9:d3:bb:a3:a9:c3:bf:
08:9a:b3:f2:51:8e:18:3f:42:27:fe:b3:43:74:c5:
95:fd:40:de:e1:5b:bb:94:1c:23:a7:88:9b:a6:07:
71:00:f8:f1:5d:8c:11:f3:e2:c8:36:8b:99:b1:21:
28:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D5:1C:09:CE:6B:CF:42:5E:7C:0E:12:2A:B4:88:E8:1C:11:58:A0
X509v3 Authority Key Identifier:
keyid:4A:E8:D0:89:09:D1:85:AF:41:D0:A0:C3:BE:5E:A2:8C:35:2F:02:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:96:f1:32:92:18:50:35:02:d8:21:83:d8:16:c0:79:3d:8a:
36:78:f0:7d:c9:e8:ab:83:d9:76:b3:06:f0:bc:0a:60:e7:01:
77:d1:bf:da:24:a4:3c:d2:9e:7c:b2:0e:3f:6b:9e:a2:28:e3:
ea:09:35:24:a8:3c:f2:78:78:4a:95:97:54:9a:a3:ff:17:4e:
fe:84:95:87:c3:4c:89:a5:59:30:8c:e2:3d:0e:eb:36:51:17:
4d:c7:6c:7c:6e:1e:b8:66:04:6d:b1:b2:d3:8d:52:44:51:59:
60:a7:8b:e1:7f:b3:3f:89:30:ef:52:4e:f7:7f:9c:65:20:1a:
6d:a8:fe:1e:e6:2f:91:c0:52:c2:05:e2:44:ff:7b:31:04:cd:
7b:dd:e0:79:5e:fd:40:44:bf:f3:fe:c2:76:a5:56:d3:65:f7:
56:fb:b5:84:99:37:51:47:7f:7d:97:83:3d:6c:dc:cf:8d:03:
2f:a1:c3:07:1a:66:b9:d1:44:4c:a4:f0:88:26:3b:7c:dc:6e:
38:45:dc:31:0b:91:4e:95:4f:1d:e0:a5:35:86:fc:c1:74:c7:
0c:d0:82:f0:b4:98:f7:f1:c8:c1:54:9d:d9:b0:3a:54:62:16:
92:f4:bd:42:fb:4e:ba:3c:20:c3:a9:9b:a9:19:b1:c1:94:f7:
90:10:32:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:32 2026 by rpki-client