Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
File: SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft (raw, json)
Hash identifier: tMuCDYLxRGsGXomIZvU2G1h0KhVHLZErGuKC69zvoXI=
Subject key identifier: 49:F7:D5:B9:69:0F:53:DF:4F:64:42:49:41:4B:87:56:95:63:B0:E6
Authority key identifier: 49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
Certificate issuer: /CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Certificate serial: 01A18676EE20147A05CA2D5F573749370C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
Manifest number: 147D
Signing time: Thu 29 Oct 2026 07:01:43 +0000
Manifest this update: Thu 29 Oct 2026 07:01:43 +0000
Manifest next update: Fri 30 Oct 2026 07:01:43 +0000
Files and hashes: 1: G2qFSj-zHSZn_cR0UfWs4GFJbTA.roa (hash: LmGaxovGZ/u+AYW4AE5opwjlV2xNZIKAOEsB5GmrX1g=)
2: SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl (hash: 6D67e//SNV8wK/Ar6PiGMChcJexixRxLBY3F0HN4vHE=)
3: T1xFBI_FXFj5vusDJo-pUeK0x0I.roa (hash: +8wuXinY8Xk3FyPY/iHD7k7tBAC8V4xrKKtAxVLmilA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:76:ee:20:14:7a:05:ca:2d:5f:57:37:49:37:0c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Validity
Not Before: Oct 29 07:01:43 2026 GMT
Not After : Oct 30 07:01:43 2026 GMT
Subject: CN=49f7d5b9690f53df4f644249414b87569563b0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:2e:ae:68:5a:e2:9d:8c:1b:37:c3:17:e2:
c4:87:bb:7f:c3:f3:cf:ca:1f:4a:b7:79:17:4c:a5:
c9:53:4f:5b:4b:57:e8:63:e8:fc:36:1b:f4:4a:0a:
95:6a:92:4f:5f:9b:22:6a:35:59:14:99:bb:8f:f5:
30:37:f4:ca:22:8e:6d:2f:ad:37:d6:e8:dd:cd:05:
8e:46:a7:b6:9f:d5:da:c8:73:d0:53:85:5f:42:27:
0f:a4:35:9d:a7:a8:6b:95:3a:4a:bf:34:cf:4a:5e:
56:a2:bd:be:a5:22:d9:c5:ca:e8:35:fe:b5:c2:a3:
18:81:9b:c2:24:9c:41:3f:6a:da:b4:52:d8:b8:b9:
9e:83:a3:4d:d7:5a:37:11:65:66:36:08:bc:0d:2f:
30:e7:f4:e6:a6:25:52:56:8c:0d:c3:c5:07:e5:f5:
48:db:fe:6e:0a:f2:7e:ed:79:a9:22:27:3a:1e:fe:
2b:3b:c5:16:6f:65:2e:7e:f2:3d:87:eb:fc:6c:e0:
5d:a1:1c:07:44:1f:59:f9:da:78:0d:db:f7:c8:ce:
fd:55:ac:8c:81:d4:9a:12:4f:ca:28:94:68:c0:6f:
30:d0:44:bd:9e:36:81:5f:21:7e:1a:39:13:ac:55:
a1:37:09:1d:00:89:95:00:b0:87:e0:4c:5a:9c:c9:
bf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F7:D5:B9:69:0F:53:DF:4F:64:42:49:41:4B:87:56:95:63:B0:E6
X509v3 Authority Key Identifier:
keyid:49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9a:5d:bd:e8:56:74:e1:4b:ac:5a:20:85:cc:f4:a1:5d:d0:
4c:f8:25:c2:44:fd:2b:44:fc:33:1d:06:b4:6a:31:6d:f1:07:
08:ab:de:c9:d8:8b:7c:31:9e:84:72:d9:a7:10:d2:86:5d:88:
ab:68:98:ec:b9:55:ab:0b:e5:0e:82:6a:4b:b9:fe:37:0e:60:
38:0e:ed:22:38:c9:87:7a:58:7b:77:29:a0:7c:ee:b6:a3:96:
a8:a5:8f:e8:b1:a4:89:c0:b5:f5:ce:50:98:2c:97:f6:5c:c2:
a1:fd:fd:29:30:2b:25:ea:63:69:24:8d:9c:20:9d:fe:2b:c2:
a3:c0:79:5c:a4:49:86:59:7f:3f:41:ec:e1:06:bc:e4:0c:fd:
84:ce:68:33:aa:a0:bd:14:05:7f:5d:b0:ec:ca:1e:cf:f4:4b:
23:d0:65:57:de:b5:87:a9:f0:d9:a4:98:51:bb:55:64:90:5c:
22:0d:42:71:d6:c9:ef:a6:35:4f:75:91:0d:28:0c:07:e2:ed:
37:d3:f8:6d:8d:f9:1d:37:b3:22:37:75:bb:96:8c:87:ac:7b:
d2:b5:c4:af:0b:91:70:2f:4e:1d:88:64:e1:51:5b:45:b2:38:
b5:6d:70:34:9c:d8:24:50:e6:16:a4:2b:45:55:d4:6c:e9:84:
52:5d:d9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:03:58 2026 by rpki-client