Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
File: suwbpoVLv1vD7VVP9_7zul_ky1E.mft (raw, json)
Hash identifier: 09AhK8SwBYh6gWHEoNotzmNY00B3k1o0aKzgovXdW78=
Subject key identifier: D1:70:31:F4:E0:E7:0B:0A:30:4F:28:FA:C9:F8:2B:E4:D8:52:8A:1D
Authority key identifier: B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
Certificate issuer: /CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Certificate serial: 019D26CD3099434EA1BA86FBA50ADC96052D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
Manifest number: 12A1
Signing time: Wed 25 Mar 2026 21:01:14 +0000
Manifest this update: Wed 25 Mar 2026 21:01:14 +0000
Manifest next update: Thu 26 Mar 2026 21:01:14 +0000
Files and hashes: 1: UU7xm8N0gLKzystvr7K0vFPPnwM.roa (hash: AIlX5yaREYq7YP0aVDh7YsVcoDln+tEm7zV1uCXEZfo=)
2: suwbpoVLv1vD7VVP9_7zul_ky1E.crl (hash: h6OOBh00ot9Wo9JxqdZdJeegevWD8ZGZGBdd0gne4UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:30:99:43:4e:a1:ba:86:fb:a5:0a:dc:96:05:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Validity
Not Before: Mar 25 21:01:14 2026 GMT
Not After : Mar 26 21:01:14 2026 GMT
Subject: CN=d17031f4e0e70b0a304f28fac9f82be4d8528a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a5:c5:24:d0:80:6f:24:94:72:92:8d:7e:45:
9d:cb:27:68:e1:5e:9d:b0:5c:9d:9b:d8:f2:67:08:
11:85:40:e6:3a:c0:7d:a7:b2:78:8c:9d:94:34:81:
44:12:b0:c0:1c:df:5f:f2:0c:42:76:25:76:56:d8:
26:b1:8c:f2:61:8a:fc:d8:8e:d6:a2:38:d9:f0:59:
98:6d:27:81:ae:9a:9b:dd:8f:e9:34:0d:4d:7f:44:
94:b0:ce:5d:7c:06:48:ce:bc:1b:4d:63:f9:a1:cc:
b5:c0:c8:d0:1d:e7:c1:a5:22:d2:09:9e:83:3a:ce:
44:a7:3e:7e:03:ec:24:5f:17:c8:c1:75:df:85:07:
c5:b4:45:d4:f7:88:10:65:ac:26:7c:a3:98:7b:ad:
c8:ef:bb:6c:16:1a:2d:64:db:82:94:79:84:4e:71:
37:1c:77:b2:4d:a2:2b:8a:ec:01:ca:de:9c:d0:51:
86:7c:cd:07:4c:96:49:06:e2:7b:03:ac:f8:92:fa:
ac:c7:67:c7:b0:bb:7e:71:d3:f4:16:ac:88:77:da:
5e:6f:cb:70:10:5d:8a:5f:90:65:b5:62:7b:b5:bc:
2a:d6:93:96:db:a9:ac:dc:e7:3c:60:89:2e:1c:54:
64:45:04:82:cc:40:4f:3c:bc:ea:1d:de:43:39:e1:
fc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:70:31:F4:E0:E7:0B:0A:30:4F:28:FA:C9:F8:2B:E4:D8:52:8A:1D
X509v3 Authority Key Identifier:
keyid:B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:cd:03:c4:36:52:f5:5b:99:f3:69:1d:1f:14:ec:6b:4f:0c:
f5:83:2a:bc:e2:bb:47:78:d0:69:78:6b:cd:6f:91:3b:e7:ef:
71:7b:28:c8:ce:01:bd:37:b4:59:00:63:ca:71:25:91:71:21:
d1:92:aa:02:c9:dc:f1:41:42:7d:67:9a:20:30:58:9f:c2:bb:
1c:c6:84:1c:c3:ce:ea:c2:8c:8b:d1:2a:84:01:89:b6:19:ff:
64:6b:ff:38:dd:67:c1:04:2a:12:c6:ce:20:42:46:e3:41:26:
c4:c2:be:a8:7f:9b:e8:9d:5b:b1:c5:01:5b:72:82:87:90:8c:
78:1f:b8:71:bf:c7:46:64:2e:85:82:89:67:ca:10:07:0d:1f:
e9:95:52:9a:6d:70:41:cb:fd:f7:b1:4d:ba:e1:40:d9:96:48:
02:49:4e:29:9c:a3:91:5c:22:78:6b:7e:c1:e4:72:e1:1c:b1:
e0:62:30:6f:2f:d9:d7:8e:95:ec:80:f3:bf:a1:1d:e6:bc:2c:
3c:ea:be:9b:f9:4b:3f:aa:c5:9d:fe:27:db:14:fe:92:72:3c:
a6:9f:dd:a2:39:65:8a:10:fd:3b:ed:19:e7:17:a7:d6:1e:93:
46:58:e2:b0:48:bb:71:a1:42:97:62:49:e8:3a:08:2c:74:e7:
de:f6:9b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:29 2026 by rpki-client