
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
File: SU14c0FlEKL7I0bvNCKAFVUicTs.mft (raw, json)
Hash identifier: vjTWFGPjPWtx4yTiaG7Q+4kzpzleK7TEAYb6N6JDYb4=
Subject key identifier: 25:DF:09:F0:72:34:8F:2E:D4:66:30:82:83:FE:59:02:DF:07:68:20
Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
Certificate issuer: /CN=494d7873416510a2fb2346ef342280155522713b
Certificate serial: 01A1DA9413E7B9FCEF1AA8954D1D88BB6C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
Manifest number: 180E
Signing time: Sat 14 Nov 2026 15:01:39 +0000
Manifest this update: Sat 14 Nov 2026 15:01:39 +0000
Manifest next update: Sun 15 Nov 2026 15:01:39 +0000
Files and hashes: 1: 32Nopwa7iDrMzQvWR2AiGUXyxqI.roa (hash: UhsqgA9BDo8hjf2FELCXlR0HFZ2+BdgenG+by3xwFz8=)
2: LjPmzvpwanEzWC7YwFcmuEsNkws.roa (hash: MIJ/J6I5pbMxfY/A5H3VycZbhKC12p0Tut4YaO1yZlQ=)
3: SU14c0FlEKL7I0bvNCKAFVUicTs.crl (hash: ujsGhtU7dIjXfaw5Z2X18zE7B57qKQBRVCFjVSJZaqo=)
4: U032uAEUZ0b4mkUs5GY7tAVTTzU.roa (hash: DED8ognEIVQikRQX7YkZQcK+eDMVkhFnX19M3oaeQrw=)
5: UKW6ggBaCeq2EWzJWVDTUUG5C5M.roa (hash: RrnGAk5DcSVwnr4K/OnsZ4KSQkqSg7XT17ThtWs4Qzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:94:13:e7:b9:fc:ef:1a:a8:95:4d:1d:88:bb:6c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d7873416510a2fb2346ef342280155522713b
Validity
Not Before: Nov 14 15:01:39 2026 GMT
Not After : Nov 15 15:01:39 2026 GMT
Subject: CN=25df09f072348f2ed466308283fe5902df076820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:06:15:b3:fa:a4:94:19:a3:fb:af:7c:99:72:
67:cf:f8:79:4b:55:85:8d:4e:d2:bd:f3:89:b0:6f:
e1:7e:02:51:61:36:08:26:eb:d3:de:fd:09:9d:86:
84:85:3d:5f:b2:57:1e:62:21:0c:c3:93:5c:4d:81:
3f:9e:5d:7a:b4:8f:0d:da:40:43:8c:24:5d:b2:c6:
31:af:d9:0f:5d:f8:71:d9:b4:63:c5:69:d5:56:29:
15:de:e6:56:6b:be:67:9f:2b:93:9d:79:f7:2d:26:
bf:cd:f3:94:1c:de:55:b6:d3:e0:95:02:f0:d5:9a:
12:4b:6c:99:01:e9:e7:da:86:d6:e3:88:55:10:90:
80:17:19:c6:36:e6:6b:aa:e4:6d:29:14:67:a8:b1:
21:99:b3:19:ea:09:54:63:20:89:0a:a2:da:45:e2:
03:6a:62:dc:93:f8:50:52:5b:ca:dd:25:15:82:b9:
94:7f:d6:6f:6a:8b:0a:2c:d3:3b:3b:64:ed:4f:9b:
5f:2f:3a:ef:f4:e6:b5:b7:66:b9:f0:38:39:ed:2d:
ba:dd:e6:80:57:74:e7:56:38:af:46:e3:fe:d2:ec:
39:41:3b:43:15:cc:3d:78:dd:4e:e2:5d:fe:cd:39:
f4:16:7e:30:64:d8:94:95:fd:58:a5:9c:b2:b8:0f:
e0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DF:09:F0:72:34:8F:2E:D4:66:30:82:83:FE:59:02:DF:07:68:20
X509v3 Authority Key Identifier:
keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4f:a0:45:a9:bc:0c:d9:54:da:a7:53:4d:6a:6a:34:67:68:
6b:f9:6b:46:3d:43:f0:e5:86:a0:b3:1a:cd:ed:f7:fe:93:35:
29:c2:d7:5b:5c:c3:6f:91:ed:04:ce:53:c8:30:07:b6:86:86:
fd:68:5f:c9:8a:dd:90:3d:7b:38:83:65:fc:9a:86:50:d3:c7:
89:a8:c1:0c:86:f5:4d:46:29:4a:d6:4e:80:1b:6b:ed:2c:f8:
58:7d:f7:dd:7c:1b:b6:71:9a:bd:85:24:f7:1e:f6:b0:4d:3c:
98:77:cc:9b:b6:d9:a9:6f:a0:cd:44:b3:4f:d7:27:ab:e3:a4:
60:63:8a:47:52:61:8b:0e:c7:a5:b5:ae:7b:e5:66:c5:2a:e5:
af:f9:35:4b:76:e1:89:2f:c4:0c:8e:30:d0:4a:e7:11:41:e0:
75:c3:b8:0e:18:d1:df:07:34:ab:ec:00:16:36:85:e5:ab:5d:
f6:73:2a:2c:0d:7e:20:77:86:bd:0a:6a:21:4a:08:8f:86:e3:
21:7b:0e:8f:45:e8:9c:54:53:dc:1a:de:4f:95:f7:d5:fd:68:
5f:03:98:18:da:6a:97:19:9f:9a:27:12:2c:9e:44:e6:7b:f8:
d7:29:b8:14:ef:d9:3a:68:64:f0:15:e2:77:7a:fd:ea:b6:e2:
d2:05:9f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:33:48 2026 by rpki-client