Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
File: SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft (raw, json)
Hash identifier: RVuRzMATMiYTsZXVeM5HmEjln0jXtU4G3Th4WVeeCgE=
Subject key identifier: FE:0E:05:53:1F:0C:8E:79:09:AF:00:A5:4C:B6:14:8F:60:29:DB:87
Authority key identifier: 49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
Certificate issuer: /CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Certificate serial: 019DCC740A5862465BA5A6F9123536586C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
Manifest number: 128F
Signing time: Mon 27 Apr 2026 01:00:49 +0000
Manifest this update: Mon 27 Apr 2026 01:00:49 +0000
Manifest next update: Tue 28 Apr 2026 01:00:49 +0000
Files and hashes: 1: G2qFSj-zHSZn_cR0UfWs4GFJbTA.roa (hash: LmGaxovGZ/u+AYW4AE5opwjlV2xNZIKAOEsB5GmrX1g=)
2: SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl (hash: J/oaRpdlj/i0hmQnGdfudI2jXHPVNNi4rSO+2BGsp+k=)
3: T1xFBI_FXFj5vusDJo-pUeK0x0I.roa (hash: +8wuXinY8Xk3FyPY/iHD7k7tBAC8V4xrKKtAxVLmilA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:74:0a:58:62:46:5b:a5:a6:f9:12:35:36:58:6c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Validity
Not Before: Apr 27 01:00:49 2026 GMT
Not After : Apr 28 01:00:49 2026 GMT
Subject: CN=fe0e05531f0c8e7909af00a54cb6148f6029db87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:41:76:d0:93:6e:50:35:a2:23:76:63:5c:16:
d0:ba:be:ae:f8:26:c1:a5:8a:6e:26:16:bd:a4:e6:
9d:e6:37:83:02:2e:c3:5e:42:49:22:64:c3:e3:23:
85:09:b4:86:c5:6d:9a:8c:93:e3:ed:e9:64:e2:a4:
e1:6f:08:0d:6a:51:e1:13:22:c0:08:7a:52:11:e2:
71:50:a2:79:58:c7:01:ae:7e:39:16:af:ec:c3:32:
1b:17:3c:20:45:aa:38:2f:ee:c5:c4:79:43:eb:9a:
d7:f2:d3:6e:23:11:cc:3e:ef:94:bc:7b:5b:61:76:
2b:c5:f7:a5:4a:3d:59:5c:79:84:aa:3c:c7:bf:3f:
c8:60:17:32:0e:6d:9a:52:5c:2e:34:fd:8b:5a:0d:
69:a5:72:e7:d0:6d:2a:61:dd:a1:a1:b1:a2:91:a3:
f8:64:eb:12:7c:46:b7:2f:07:f9:75:6f:bd:76:53:
25:1a:b7:2a:3a:65:ea:a2:89:fd:20:98:cc:8b:20:
72:63:c8:6d:17:69:d0:fd:47:6d:96:34:07:56:9b:
d1:37:32:db:dc:72:92:81:e8:c3:9b:10:5d:2b:fd:
c1:a6:92:9b:58:21:c9:f2:8b:e4:47:10:70:c4:d3:
5d:c4:04:ae:db:ab:cf:27:45:e5:6e:8f:a0:dc:31:
98:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0E:05:53:1F:0C:8E:79:09:AF:00:A5:4C:B6:14:8F:60:29:DB:87
X509v3 Authority Key Identifier:
keyid:49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:45:af:0d:aa:34:69:77:6c:62:f8:95:70:35:71:51:bd:51:
d5:e5:95:20:51:a0:29:33:02:20:ad:cf:40:19:34:16:a8:05:
24:d9:c2:d8:34:16:6b:5a:dd:ab:c9:d3:aa:66:d9:65:07:02:
4b:ac:e5:5c:64:6d:ac:fc:33:29:b1:10:ab:8f:af:4b:d5:0f:
59:18:b0:1b:3f:a6:99:c5:c7:e8:20:e9:bf:16:69:c5:97:62:
db:f6:13:14:1e:10:45:88:cd:04:1e:a0:b1:63:bd:fd:42:2d:
45:d0:42:26:b9:75:69:9e:c8:78:1f:a0:26:d9:fd:ba:45:f2:
15:74:39:ba:70:cb:b0:fc:24:d1:6b:7f:5e:a5:b7:e0:6d:8f:
14:68:3f:c9:5b:60:71:7c:c8:13:20:77:9d:51:3e:dc:95:7f:
17:9d:6b:2f:28:db:2b:1e:64:2f:1c:33:d8:3e:c5:41:6d:b8:
d7:4d:87:37:1b:56:6a:eb:9c:cf:d5:f9:ba:0e:04:03:b4:0e:
5d:43:e8:29:4a:26:dd:cd:4c:bf:ce:32:10:40:50:c0:10:2e:
79:9c:df:d7:c1:19:12:9e:8a:98:a8:fa:97:1d:21:49:5f:a0:
3d:59:c8:d1:8f:f3:0e:f7:01:49:7f:fc:e6:ed:c9:d6:9d:86:
9a:26:f0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:44:58 2026 by rpki-client