Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
File: Su_P7VH_FY--aMzWC3s5vl8-riA.mft (raw, json)
Hash identifier: yRtklFt/FHzTch8IiL4i/AxBngt90+cnK2NlHtYyAsw=
Subject key identifier: 5C:42:0B:AC:68:CD:C8:90:17:70:63:A4:20:32:6B:6E:47:3A:94:45
Authority key identifier: 4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
Certificate issuer: /CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Certificate serial: 019D37C067B91F62374AB0189309DA3B0F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:00:49 +0000
Manifest this update: Sun 29 Mar 2026 04:00:49 +0000
Manifest next update: Mon 30 Mar 2026 04:00:49 +0000
Files and hashes: 1: KUDAYGIsT3CXoWuYxHO7vusuZwM.roa (hash: 04pcVXnvwMaNPBLFWogLi25UblwMiRGuELwew3PlXfA=)
2: Su_P7VH_FY--aMzWC3s5vl8-riA.crl (hash: +lW9+GHWSEC4nyyGZa7Hwre/A66FkfFvUrQ/r1eaPws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:67:b9:1f:62:37:4a:b0:18:93:09:da:3b:0f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Validity
Not Before: Mar 29 04:00:49 2026 GMT
Not After : Mar 30 04:00:49 2026 GMT
Subject: CN=5c420bac68cdc890177063a420326b6e473a9445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5c:f8:b6:7e:69:f5:68:31:bd:3b:d8:89:74:
cc:42:9f:35:ba:e0:e9:0a:fa:b0:60:9f:b3:01:6f:
b5:f7:84:61:b9:5a:1c:4b:bc:87:7d:c4:4b:c2:fa:
6a:c8:0e:89:83:a8:57:47:25:68:fb:de:45:2c:dc:
17:5a:e1:82:10:e5:1d:12:3b:97:77:f5:4e:f9:e0:
b0:10:7f:aa:34:fd:28:ca:e7:0c:3c:0a:1a:7f:85:
1b:52:cd:39:d9:cd:b3:95:41:55:5e:af:16:25:07:
c9:c1:56:ea:87:92:ce:17:03:46:0f:40:89:f4:9b:
6d:49:59:cc:e5:c9:c0:ad:01:9f:05:9f:72:fc:30:
b2:c1:83:9a:dd:7f:41:25:3b:88:68:24:6d:42:52:
ba:31:ab:b0:ae:93:72:44:68:4b:5d:e8:15:2e:83:
a2:95:5b:2c:b2:74:e8:00:7c:a6:ae:e0:d0:29:43:
4c:6f:fa:44:b4:13:23:1f:4a:3c:9f:cd:f8:46:2c:
72:ff:1e:0c:f0:35:1d:b9:0e:64:f3:8a:2f:ea:4a:
7d:fa:f1:42:64:a4:f2:a3:b2:59:ea:a1:77:53:56:
27:8f:77:d5:7a:41:1d:71:39:b9:b1:74:31:ef:7e:
fb:91:4d:3a:f6:99:e3:74:b1:ea:a6:ea:25:3c:9b:
07:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:42:0B:AC:68:CD:C8:90:17:70:63:A4:20:32:6B:6E:47:3A:94:45
X509v3 Authority Key Identifier:
keyid:4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:33:27:d8:2d:1f:e2:c1:3f:6e:c5:6d:2e:03:79:e0:48:eb:
34:b7:5e:b4:c2:72:90:2e:aa:c5:4c:62:c7:05:d5:42:82:4a:
d0:33:74:b2:de:04:78:1e:fc:37:e5:23:a3:b2:cf:54:8d:57:
98:d8:fa:5c:2b:2a:9d:94:f7:8f:c5:7c:c2:30:b1:84:f0:46:
74:41:84:a5:b7:24:8d:07:a6:9a:2e:f8:28:09:e4:c4:41:75:
f3:1c:d6:ef:b7:bd:6d:77:9c:6b:63:0c:d5:2e:d1:a4:99:51:
ce:5c:82:a2:de:2a:04:0b:22:1d:03:0b:26:fd:a6:76:b8:03:
0b:55:11:0c:4d:80:43:8c:9c:4f:96:09:1b:d7:be:98:0e:bc:
70:aa:c9:97:6b:7b:aa:a8:2b:9a:bd:72:91:39:9f:77:03:c6:
53:28:21:d7:d9:c3:52:8b:ab:35:44:5c:39:99:08:60:e2:ba:
58:89:83:e9:9d:bb:8e:b7:47:52:7d:ab:11:c5:89:72:8a:ba:
cc:04:d3:36:9b:02:04:3a:64:ce:df:b5:d5:e6:86:aa:cb:68:
c3:37:a4:a8:1f:e5:02:25:dc:6b:eb:55:4f:7f:cf:1e:dd:44:
ff:d2:11:02:23:84:da:8f:93:08:4c:86:0f:f1:f4:d6:63:22:
cf:4f:2a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:33 2026 by rpki-client