Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
File: SU14c0FlEKL7I0bvNCKAFVUicTs.mft (raw, json)
Hash identifier: FNHDCr0IvfAOx9dqVhnuiUgm/lUq61kL8MNdInQrG7o=
Subject key identifier: BB:BA:4C:45:53:C7:5F:53:88:B4:4E:66:85:AE:07:1D:0B:AF:F4:31
Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
Certificate issuer: /CN=494d7873416510a2fb2346ef342280155522713b
Certificate serial: 019D27726E4BCB074EDAB115849B7ABA2C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
Manifest number: 159F
Signing time: Thu 26 Mar 2026 00:01:43 +0000
Manifest this update: Thu 26 Mar 2026 00:01:43 +0000
Manifest next update: Fri 27 Mar 2026 00:01:43 +0000
Files and hashes: 1: 32Nopwa7iDrMzQvWR2AiGUXyxqI.roa (hash: UhsqgA9BDo8hjf2FELCXlR0HFZ2+BdgenG+by3xwFz8=)
2: LjPmzvpwanEzWC7YwFcmuEsNkws.roa (hash: MIJ/J6I5pbMxfY/A5H3VycZbhKC12p0Tut4YaO1yZlQ=)
3: SU14c0FlEKL7I0bvNCKAFVUicTs.crl (hash: NU+qD97qUVwEKAg+LyhRzjmazJPHs/hS6ui8UO/c+tQ=)
4: U032uAEUZ0b4mkUs5GY7tAVTTzU.roa (hash: DED8ognEIVQikRQX7YkZQcK+eDMVkhFnX19M3oaeQrw=)
5: UKW6ggBaCeq2EWzJWVDTUUG5C5M.roa (hash: RrnGAk5DcSVwnr4K/OnsZ4KSQkqSg7XT17ThtWs4Qzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:6e:4b:cb:07:4e:da:b1:15:84:9b:7a:ba:2c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d7873416510a2fb2346ef342280155522713b
Validity
Not Before: Mar 26 00:01:43 2026 GMT
Not After : Mar 27 00:01:43 2026 GMT
Subject: CN=bbba4c4553c75f5388b44e6685ae071d0baff431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c7:5a:5a:a0:58:30:d3:5e:2a:5e:a3:91:43:
07:0f:4c:f8:ab:4e:2e:47:95:41:2a:33:d9:46:b9:
da:9c:59:17:da:0f:33:fc:0b:e3:42:c3:ad:d7:89:
85:e0:15:8e:d0:56:19:57:28:21:22:73:77:61:2d:
8e:80:5b:28:c3:32:6d:34:30:cf:9c:e2:5f:ef:24:
74:e1:7f:53:13:4f:85:c1:05:58:4f:5c:15:08:2d:
b0:0e:74:a9:5c:d7:f6:e3:54:01:3c:25:55:9d:be:
ca:6c:fb:30:07:ce:8a:bd:df:e7:05:0e:ac:dd:7e:
af:5f:ed:4f:6a:e9:71:28:9d:c8:b4:28:65:69:04:
2e:65:68:31:28:fd:02:e9:07:86:ac:78:95:7d:c4:
58:6e:f1:8b:7e:ee:d4:b5:85:e1:12:17:80:53:00:
85:f2:3e:2b:51:8e:03:df:79:fb:0d:6c:51:3f:af:
dd:79:e1:1f:68:f2:0e:9a:24:2c:28:a0:b2:7e:df:
6b:4b:7e:50:0d:1a:07:61:70:bd:8f:5f:68:96:cd:
23:76:71:a7:3d:c8:5a:4c:0a:0a:8f:9a:8e:1f:80:
66:b6:6f:39:c4:56:e1:a0:4e:a7:0c:84:ae:1c:89:
06:05:13:32:d4:df:8c:74:db:57:3c:72:7d:14:03:
4d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BA:4C:45:53:C7:5F:53:88:B4:4E:66:85:AE:07:1D:0B:AF:F4:31
X509v3 Authority Key Identifier:
keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e8:df:30:25:05:ba:bb:50:ad:3e:88:da:d8:af:0d:a7:6f:
c3:03:a9:0a:48:bd:85:cb:d0:31:10:20:46:de:e1:11:6e:d1:
35:68:3f:0c:dd:62:4c:59:80:00:8e:c2:6a:5d:a0:9b:86:94:
3d:a7:69:30:a5:2f:6c:e7:4e:7d:d6:37:c7:4e:07:d9:68:7e:
40:41:86:fb:cf:d2:17:00:e0:38:bd:13:83:c3:ae:c6:5e:ff:
29:8e:1e:0a:27:19:1c:0b:e9:d3:38:75:ac:b7:c3:a8:21:5f:
26:e5:26:a5:ce:a3:34:02:c7:6b:02:92:12:00:8d:f9:76:03:
22:0d:23:e6:da:f0:e9:d1:ba:d4:49:50:bf:06:69:4f:e2:d2:
79:59:23:82:e6:cc:b1:9b:c7:bf:14:f6:90:9f:c2:66:16:3d:
d8:fc:9d:1f:c9:3d:3e:18:29:7b:58:ac:76:7a:11:1b:54:71:
56:7e:af:ce:e7:63:2d:83:71:b4:ec:90:30:00:74:f7:ac:39:
1b:22:5d:5f:55:93:95:2f:41:5d:cd:35:60:8b:9d:a0:9a:55:
21:09:26:6f:f8:3a:af:f5:cb:ac:d8:d8:24:2d:94:8c:50:00:
cd:73:8f:a1:bf:0a:b2:51:00:aa:17:83:ac:02:91:06:cc:be:
ed:3e:11:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:53 2026 by rpki-client