Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
File: SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft (raw, json)
Hash identifier: 32gFnXG3qqwWu8ga4vbLV5MJi4sT3rKkGf+/VkGXWlw=
Subject key identifier: A9:B2:D8:82:D1:19:67:D6:F7:5B:BD:F8:8E:8F:54:22:FA:2E:D1:7B
Authority key identifier: 49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
Certificate issuer: /CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Certificate serial: 01A0897A43FF73FEEEC9E21E4CC54E5D8079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
Manifest number: 13FA
Signing time: Thu 10 Sep 2026 04:01:26 +0000
Manifest this update: Thu 10 Sep 2026 04:01:26 +0000
Manifest next update: Fri 11 Sep 2026 04:01:26 +0000
Files and hashes: 1: G2qFSj-zHSZn_cR0UfWs4GFJbTA.roa (hash: LmGaxovGZ/u+AYW4AE5opwjlV2xNZIKAOEsB5GmrX1g=)
2: SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl (hash: Rhglcc8WsQCoZLuIc77Xz1XLJWLI3Rwecnp4KggIFs4=)
3: T1xFBI_FXFj5vusDJo-pUeK0x0I.roa (hash: +8wuXinY8Xk3FyPY/iHD7k7tBAC8V4xrKKtAxVLmilA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:7a:43:ff:73:fe:ee:c9:e2:1e:4c:c5:4e:5d:80:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Validity
Not Before: Sep 10 04:01:26 2026 GMT
Not After : Sep 11 04:01:26 2026 GMT
Subject: CN=a9b2d882d11967d6f75bbdf88e8f5422fa2ed17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5e:0e:3c:70:f8:27:e6:67:1d:a8:0b:16:30:
62:56:19:78:ac:be:d8:e3:a7:bd:bb:54:87:50:b1:
06:79:cd:da:b1:bf:ef:7a:4c:ed:53:2a:84:88:aa:
83:1e:9e:79:fa:b4:f9:02:32:ac:c5:0f:c1:36:e7:
a9:53:4e:60:ed:a5:07:6f:7b:f1:ef:5c:85:85:5c:
ac:33:24:90:e9:a8:9e:38:af:52:6d:0a:ec:d0:7c:
e2:3f:f2:d0:64:37:51:9e:ba:34:ac:9f:21:27:57:
02:3d:5f:f6:67:7c:a4:ba:2d:1a:4d:b7:0f:bc:86:
1c:5a:52:2c:c6:f5:38:c7:79:dd:f9:10:ad:70:4e:
88:4e:ea:0f:a2:b5:41:58:37:43:b0:77:14:60:59:
57:e5:8f:1d:88:29:5c:f5:a3:c5:35:96:fc:25:c1:
ac:84:72:a2:58:45:c0:ab:4c:b3:42:ea:57:2a:68:
48:b9:34:6c:89:82:8e:99:a3:43:4b:55:da:b5:11:
d7:f7:b0:e3:98:ac:09:e6:61:8c:85:8b:a4:62:2e:
c5:3c:a8:bf:14:7d:aa:b9:2e:c5:d7:f9:df:c0:97:
7f:5a:a5:c9:f1:aa:dc:59:f8:3d:6b:53:b2:a0:fb:
bb:47:8d:c5:8f:d7:c9:cd:b8:3a:6e:64:51:2a:50:
60:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B2:D8:82:D1:19:67:D6:F7:5B:BD:F8:8E:8F:54:22:FA:2E:D1:7B
X509v3 Authority Key Identifier:
keyid:49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:83:d1:34:1c:ed:79:c0:f7:38:00:f7:98:61:62:01:02:cc:
a8:c4:f5:6b:b5:6f:f8:8d:b4:0b:ab:ca:73:23:f9:bc:5a:b8:
75:db:54:d0:22:18:33:df:a8:65:e3:3b:35:34:d5:c9:0e:40:
69:aa:4e:96:bc:b8:8e:db:11:76:a7:d7:30:bd:49:b8:a8:df:
2a:33:d6:e2:35:6c:48:7e:cc:d5:c6:69:28:a1:2c:f1:0e:5d:
e0:5d:da:c6:76:fa:2a:14:fd:84:ef:0f:37:e5:45:f0:2c:5f:
71:d0:30:71:c1:89:84:33:37:f0:50:c7:54:ec:1f:a6:2f:f2:
9f:32:fd:89:b7:42:96:52:ad:b7:71:a8:28:a7:a9:d3:fa:39:
82:5c:91:8d:f9:1b:3a:43:fc:ff:48:f9:f3:2d:c3:47:c3:b0:
87:72:1c:d5:16:28:42:ab:27:77:0f:9f:fa:08:87:4e:db:cb:
d0:6c:f6:8f:de:ba:20:ca:1c:c1:c5:fa:28:8c:87:96:10:ba:
fd:37:0c:cb:70:5d:d5:81:2d:3b:82:6e:73:e5:17:83:39:b1:
91:af:19:89:75:f1:f3:46:d6:18:6b:ed:fe:86:f7:c6:5d:9c:
14:7b:1b:14:2f:8d:fa:37:5e:39:fd:63:8a:99:ec:c3:8f:0c:
8f:fd:e1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:03:23 2026 by rpki-client