Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
File: sUP6cD--4Eu9kc5joyFIs2uOVao.mft (raw, json)
Hash identifier: FLjhsqbNHzU5RkU6eBXhXD9/hI1BeXXGnFjug4M82l4=
Subject key identifier: D7:24:60:71:FC:4D:85:C5:EA:5D:C2:14:E6:C3:36:97:70:C9:52:CA
Authority key identifier: B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
Certificate issuer: /CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Certificate serial: 019D371B21E445B17337162B517566A8DA86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 01:00:18 +0000
Manifest this update: Sun 29 Mar 2026 01:00:18 +0000
Manifest next update: Mon 30 Mar 2026 01:00:18 +0000
Files and hashes: 1: AI5iPwrPeQM75vgCBirIJ7ULXR8.roa (hash: 6BPizRCmHI1yenYS4NwhiHl3z1wmNCdGTc9GKZg1Dkg=)
2: n5pV2dNWRA_f9PGG9onX31tv0X4.roa (hash: D07pEt8gK/cdGWqE9Zyt/+iA5IXUOBq9V7PLS+yh6/A=)
3: sEzlM5R6zA-ZnYv0970VvpCyW2s.roa (hash: QcSUN0qNT/RW84mhkqVzl01FcB1TS7ALX77ko6AurMc=)
4: sUP6cD--4Eu9kc5joyFIs2uOVao.crl (hash: RYBWDkL0/faja/YZizdho6NGyuYD74ch/9eUKSxMkA8=)
5: u3Sm5CQkYvsGuCc2LmoCaugkKjw.roa (hash: QovOPnDsIRjc0fHKUk+YUhtZOJkATZJ4vmW0nQyk6FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:21:e4:45:b1:73:37:16:2b:51:75:66:a8:da:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Validity
Not Before: Mar 29 01:00:18 2026 GMT
Not After : Mar 30 01:00:18 2026 GMT
Subject: CN=d7246071fc4d85c5ea5dc214e6c3369770c952ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a2:93:81:2f:b9:b0:7f:aa:5d:fc:cf:9f:45:
1a:0b:08:c4:0e:07:c7:b6:19:f7:9b:93:4a:6f:01:
d0:22:97:63:dd:15:6f:e0:39:52:02:0d:de:59:5d:
d1:66:9f:07:b1:55:3e:c5:a2:da:5e:39:71:85:a4:
6a:6b:2e:87:24:1a:a6:ad:1e:7c:57:69:0f:d4:21:
2f:3e:64:0b:c4:a8:b6:a3:66:a6:a0:65:c5:29:fa:
83:2e:5c:19:77:da:cb:fb:fc:4e:9b:fa:92:f0:60:
42:d0:0d:8a:68:86:42:14:97:41:ca:fe:5e:25:a9:
35:9e:e9:14:1a:7b:ec:ef:da:5c:2c:6f:f4:78:cd:
d5:48:4d:59:c0:e3:f7:f3:21:5a:59:49:ce:e4:c1:
bc:1f:a2:cf:ae:9e:c0:2d:85:d1:ad:49:53:37:72:
38:f0:dd:d9:19:ae:39:9a:3d:b4:dd:5e:d1:53:32:
ec:9e:75:01:86:99:2c:9f:66:14:0d:26:ec:57:0e:
52:3a:88:2c:03:aa:4d:a6:4d:69:89:22:fb:d0:aa:
ed:c0:f1:f2:f5:e7:d0:f5:62:a3:24:00:5c:c1:37:
ad:5f:fe:8e:02:24:57:34:98:ed:58:14:42:a6:a5:
c5:f0:96:97:de:31:ef:a3:ab:b9:7d:7a:53:a9:12:
43:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:24:60:71:FC:4D:85:C5:EA:5D:C2:14:E6:C3:36:97:70:C9:52:CA
X509v3 Authority Key Identifier:
keyid:B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ae:d4:28:c7:e8:88:6d:e0:97:1b:c4:60:bc:f4:43:df:c0:
3a:0d:b1:6a:99:e9:31:6f:a7:90:6a:a4:05:a5:da:b6:42:cf:
f9:a5:70:68:a9:74:87:fd:f4:74:79:f7:97:e9:90:ca:83:1b:
f0:22:6b:27:af:a4:d7:00:f7:6a:28:92:ea:23:6f:5e:79:47:
ca:e3:bc:c3:1d:39:d6:35:53:c5:34:60:77:26:9a:0d:87:68:
f6:e9:52:2b:ff:a6:60:43:58:14:2d:01:3e:ac:d6:3e:10:d6:
42:2a:f6:28:a1:4d:e1:bd:09:da:45:ff:70:63:99:9d:32:fd:
8e:4e:00:7b:d2:a4:2c:50:0e:3f:20:8c:5c:be:35:ac:4c:04:
63:53:af:14:99:0a:a0:c6:f2:be:ed:ea:88:27:0a:f0:a0:ec:
3b:82:ca:86:78:78:85:4a:3c:1a:cc:f8:94:10:20:0c:b2:16:
9f:fb:4d:10:58:e7:a4:28:a5:7b:f8:07:0a:19:ca:79:02:6c:
ec:ac:cf:43:65:aa:d0:54:c6:a5:b2:3e:bf:fd:99:40:2d:f6:
af:c9:57:d5:78:ac:9d:92:82:58:04:58:86:52:d2:b8:ca:2c:
90:d7:97:8e:d6:b1:29:4f:4c:ba:79:75:25:49:bb:a4:af:8f:
d1:ef:61:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:58 2026 by rpki-client