Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
File: su0dYGb05GVO9fPMcKXZBamvgpA.mft (raw, json)
Hash identifier: Oi2Deg8us3VtnXl7nTb6xclfTT6UxPuEvz376gc3OCE=
Subject key identifier: 25:99:73:CD:72:9C:BA:45:ED:19:2B:B8:51:52:C6:16:09:64:7D:0A
Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
Certificate issuer: /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Certificate serial: 01A1DF15972E59C46C2E3AF3EE0040125540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
Manifest number: 1AFB
Signing time: Sun 15 Nov 2026 12:01:36 +0000
Manifest this update: Sun 15 Nov 2026 12:01:36 +0000
Manifest next update: Mon 16 Nov 2026 12:01:36 +0000
Files and hashes: 1: 600lLjQN8NaUtu9vwfIFMpqTNQc.roa (hash: MUp+FLIccBAFPNwMS4Gw63hQ+b8ZEvvsOZeWkDj1pdQ=)
2: UFBqlqbDbCJdY4yyGZXAZPEHhZ0.roa (hash: NYR75LT8EcYVp5wWj3tYR34PO47ZPDQS52OiuEfA/iM=)
3: mh-GYVdTRd_42s-4vmsQOV1tY40.roa (hash: pgFeIkHEDR3yEGlYLLu69s0r5w/mu9jqvo+vTtixs6s=)
4: ndFKEl0wI8WgAsJHTynnR8s626U.roa (hash: iToJm74Xq6g6h01i3TJnsDzizJuEXJ+pOugGZB7SEMU=)
5: su0dYGb05GVO9fPMcKXZBamvgpA.crl (hash: Rt9KTxTzaOCpukcwHCFF7/9u/Vw4xjsmilcN6Qy/ItQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:97:2e:59:c4:6c:2e:3a:f3:ee:00:40:12:55:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Validity
Not Before: Nov 15 12:01:36 2026 GMT
Not After : Nov 16 12:01:36 2026 GMT
Subject: CN=259973cd729cba45ed192bb85152c61609647d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:dd:31:33:97:68:90:a1:68:bd:96:ca:e4:
d1:07:6a:ed:36:31:59:3f:5e:60:2d:5d:c3:a8:e3:
2b:b4:87:2a:9e:3d:5b:ff:d7:de:d9:d7:7b:2e:c1:
2e:db:97:03:56:51:84:d0:38:b7:61:84:67:b9:e9:
17:a2:67:36:66:f6:0d:25:42:f2:59:f9:d2:e8:f0:
66:a9:91:70:d3:92:c4:e7:c2:fb:81:cd:2c:03:38:
d6:07:4c:dc:b3:06:51:5d:07:87:61:b6:42:c4:ff:
8a:ab:02:2f:0c:ec:86:fc:89:ea:d3:6d:ea:0f:3d:
6c:b6:4e:aa:0d:f2:ce:b4:fe:7d:9d:dc:53:24:fe:
e6:5e:1a:52:6f:88:c3:cd:22:5b:85:ef:3f:05:69:
68:fe:ec:9a:e1:d0:96:16:d1:a3:4d:b3:39:57:93:
c6:00:2a:f5:41:c1:85:67:07:20:64:fc:3d:d0:63:
f7:67:91:c5:3b:f8:b6:51:30:dd:f2:8a:1d:5b:f7:
a0:73:cb:fa:76:7e:8e:3c:a7:61:60:48:c9:71:64:
7b:9e:8d:56:f5:ff:6a:b1:3a:fe:44:03:f4:89:e2:
36:92:c1:32:80:4a:67:42:d9:81:5a:dd:98:d5:dc:
69:41:02:22:fa:5a:a6:ea:89:74:76:b9:f7:f3:d7:
32:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:99:73:CD:72:9C:BA:45:ED:19:2B:B8:51:52:C6:16:09:64:7D:0A
X509v3 Authority Key Identifier:
keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:08:f2:78:5f:43:a1:6c:d1:ce:f3:ce:4e:90:e5:0c:ec:7b:
1d:8c:2f:26:b8:5b:81:03:13:72:76:24:f8:2a:17:99:fb:07:
cc:15:52:c3:1a:d0:6e:b1:e0:8c:e3:92:1c:1f:03:78:18:d9:
70:70:4e:d2:b9:70:de:65:f9:cc:ff:ef:15:5b:22:df:3b:0f:
99:3d:a9:c9:b1:e6:7a:f4:1e:6a:10:24:f4:97:b7:04:39:00:
f2:18:0a:0b:cd:67:43:de:a5:c8:6d:be:f1:a7:11:45:7b:a7:
52:da:d2:ca:5a:2e:52:9d:c7:97:ac:30:b6:74:26:d2:e8:69:
64:47:72:2b:ab:a1:58:ce:75:13:a6:30:96:0a:14:46:bf:30:
74:41:49:ac:6d:0c:b2:6e:5a:a4:17:9d:64:a2:c4:29:7e:41:
8b:a6:f6:6d:2f:65:24:0f:c4:13:6a:b4:03:59:47:6f:53:bc:
6f:99:16:bb:3d:70:66:1b:07:aa:3a:67:00:67:17:0b:0b:7b:
ca:62:03:72:4d:76:bc:78:5e:c5:03:6c:63:97:16:9a:ad:3a:
9c:56:fb:53:59:4f:7f:a2:45:58:81:3e:86:0e:c9:d3:f6:14:
3f:49:9c:cc:57:50:90:79:59:39:84:44:b1:83:45:69:91:67:
9a:08:3a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:53:09 2026 by rpki-client