Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
File: sUiB-j51o4Uc9wQZE1q91SnS9oI.mft (raw, json)
Hash identifier: znNmEIFIpuEzM98Vl7HfOVqzoejKUzk2+2ZoljKY6gU=
Subject key identifier: D5:46:E9:A9:8C:CF:2F:27:B8:DD:07:DB:85:89:AE:E6:AC:A5:71:3E
Authority key identifier: B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82
Certificate issuer: /CN=b14881fa3e75a3851cf70419135abdd529d2f682
Certificate serial: 01A0EB8A89BC5211DBC05CB65B650F383354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
Manifest number: 1A7D
Signing time: Tue 29 Sep 2026 05:01:59 +0000
Manifest this update: Tue 29 Sep 2026 05:01:59 +0000
Manifest next update: Wed 30 Sep 2026 05:01:59 +0000
Files and hashes: 1: UPKKwW9VJYZFBiA_WvIaqWPdF7s.roa (hash: K2pc24cJyQQfvnYYt5miofrs9P0Hxb8DyAeGlZ+9xFY=)
2: sUiB-j51o4Uc9wQZE1q91SnS9oI.crl (hash: VG8fAOKI7+LDpRaDw7pjV2OMOPkT3iW3KKJFWgZjKVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:8a:89:bc:52:11:db:c0:5c:b6:5b:65:0f:38:33:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14881fa3e75a3851cf70419135abdd529d2f682
Validity
Not Before: Sep 29 05:01:59 2026 GMT
Not After : Sep 30 05:01:59 2026 GMT
Subject: CN=d546e9a98ccf2f27b8dd07db8589aee6aca5713e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:90:87:c4:af:2c:e2:8b:6d:07:7b:70:18:c2:
ea:2a:6f:58:41:52:cf:f8:7b:6c:6a:6b:b2:06:05:
19:2b:5e:b9:9b:04:60:c5:83:a5:30:ff:fe:34:dd:
38:93:89:2f:fd:a7:c1:28:4a:1f:38:61:5c:c2:d3:
ec:73:2d:f5:d9:f1:5b:fd:17:c9:00:df:d7:9a:f9:
73:fb:a8:a9:9f:e0:72:b3:6f:de:6b:7f:dc:27:04:
59:e3:dc:e5:63:54:ff:b9:fc:52:e2:4d:cc:1e:9b:
a4:2c:86:d6:c3:79:1b:55:4a:7a:c3:14:c6:63:c3:
41:31:1e:62:d9:52:d3:f0:06:85:76:da:09:19:e2:
45:e4:2f:6f:68:43:47:6c:04:96:aa:68:47:d4:cc:
77:e5:1f:95:ab:28:52:f3:24:96:5b:2c:eb:05:a3:
32:e3:39:d5:09:76:1f:c1:7f:65:7e:83:e1:4f:fa:
4c:83:76:02:7f:e1:69:cf:31:0e:66:b9:d7:33:b8:
70:0d:a4:cb:b7:1f:3e:9a:6a:e8:c4:7c:4b:fd:90:
29:aa:7e:26:37:8d:a1:31:07:de:9b:79:7e:2c:ce:
7e:f0:79:41:c4:48:18:48:1c:f4:92:ac:14:95:ff:
ae:22:01:1f:64:09:66:c8:83:0e:b2:20:a9:be:08:
04:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:46:E9:A9:8C:CF:2F:27:B8:DD:07:DB:85:89:AE:E6:AC:A5:71:3E
X509v3 Authority Key Identifier:
keyid:B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c6:ae:8b:76:e1:c5:e7:90:44:42:61:b7:1b:af:6e:42:92:
8b:66:23:d0:c3:a9:58:40:2c:b0:77:ed:72:26:2d:4e:0e:b1:
1b:f8:f1:0e:a8:cf:05:b7:c7:43:59:8d:4b:f3:86:f3:ca:0a:
85:90:d3:a2:11:92:0b:33:8d:5a:f2:b2:ae:ff:5b:12:57:65:
21:1e:48:da:c8:37:7f:4e:2c:f8:1d:b4:8d:db:59:9d:06:70:
30:61:e8:2d:d5:d6:f2:03:18:02:89:68:35:5b:4c:45:b5:fc:
6e:74:a8:56:0c:2a:4a:d0:d5:30:f6:5f:87:75:c2:cd:f1:39:
78:6d:79:07:f3:2b:7b:e1:b8:38:23:41:00:f3:e4:8c:7b:28:
0d:d4:a7:3d:77:2c:a6:b5:e5:b9:c3:40:a4:e7:0c:31:b4:36:
f2:bb:48:66:54:72:bd:24:6d:2b:37:32:9a:eb:7d:01:01:cf:
1b:72:70:54:a8:1c:e8:ad:4a:3b:e8:05:3c:80:38:20:e2:ff:
07:1e:a6:75:fd:42:30:82:35:a1:5f:73:1c:03:75:9b:c4:40:
3b:ae:78:66:d1:e5:45:65:fd:06:c6:9b:fc:1c:58:9c:5a:23:
d6:95:72:01:ce:ce:56:7a:1a:76:4e:8c:f3:c5:c3:29:08:9b:
f5:ee:ae:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:43:50 2026 by rpki-client