Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
File: su0dYGb05GVO9fPMcKXZBamvgpA.mft (raw, json)
Hash identifier: YHIuhaeMG79rpIBk+m8vIebeEE/o3Wyap1j3S7MYPCY=
Subject key identifier: 99:D9:D1:B5:CF:9B:7B:CD:35:C2:6F:55:FE:87:7A:6B:F4:66:D4:05
Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
Certificate issuer: /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Certificate serial: 01A0CCD9CFFAE8591EA15958E7D49C974C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 06:00:21 +0000
Manifest this update: Wed 23 Sep 2026 06:00:21 +0000
Manifest next update: Thu 24 Sep 2026 06:00:21 +0000
Files and hashes: 1: 600lLjQN8NaUtu9vwfIFMpqTNQc.roa (hash: MUp+FLIccBAFPNwMS4Gw63hQ+b8ZEvvsOZeWkDj1pdQ=)
2: UFBqlqbDbCJdY4yyGZXAZPEHhZ0.roa (hash: NYR75LT8EcYVp5wWj3tYR34PO47ZPDQS52OiuEfA/iM=)
3: mh-GYVdTRd_42s-4vmsQOV1tY40.roa (hash: pgFeIkHEDR3yEGlYLLu69s0r5w/mu9jqvo+vTtixs6s=)
4: ndFKEl0wI8WgAsJHTynnR8s626U.roa (hash: iToJm74Xq6g6h01i3TJnsDzizJuEXJ+pOugGZB7SEMU=)
5: su0dYGb05GVO9fPMcKXZBamvgpA.crl (hash: Cms6QW8G+gtBnVVEdTHCGUx9PoyXI4bq654QX1sRw54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:d9:cf:fa:e8:59:1e:a1:59:58:e7:d4:9c:97:4c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Validity
Not Before: Sep 23 06:00:21 2026 GMT
Not After : Sep 24 06:00:21 2026 GMT
Subject: CN=99d9d1b5cf9b7bcd35c26f55fe877a6bf466d405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:3c:c3:34:4d:42:d8:e5:20:bc:73:07:c9:
bc:e2:eb:ba:d1:c6:f5:64:79:9c:85:58:da:62:16:
07:5e:1d:11:f0:65:a0:1b:5e:bb:54:c9:33:e8:b8:
8f:70:8e:14:74:6d:07:9d:38:40:70:87:cf:5d:36:
19:70:23:b6:f5:bc:74:1b:7d:84:af:aa:e9:28:9b:
81:19:ef:35:e0:d7:09:0f:92:cd:0c:21:a4:04:f7:
9e:32:22:03:16:72:55:99:b1:10:d0:3b:3f:df:e7:
1a:ad:da:fc:cf:3d:93:b4:c8:bc:2b:9b:ed:a8:de:
bc:85:75:30:5f:fa:31:a0:4d:bf:e3:09:ca:09:01:
c7:d4:2d:5e:df:04:d6:19:7d:10:3f:5a:7a:6e:89:
ab:dd:f2:66:22:1b:3c:61:c4:a4:52:5e:8d:23:c9:
c0:94:68:ca:d8:76:c3:e5:8f:8d:8a:1c:01:3c:ed:
04:3b:8c:86:37:f5:21:56:65:48:9b:cb:f0:f9:3a:
97:25:fb:31:c8:d3:ec:84:3b:14:84:f9:74:64:7c:
d5:47:ea:07:67:7a:d3:ae:fc:38:48:88:58:f9:f7:
c7:20:42:60:37:b3:be:dd:c6:9b:6d:2a:11:8e:0d:
dd:b5:86:ee:22:3e:a9:7d:4b:61:75:5a:24:c7:1a:
43:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D9:D1:B5:CF:9B:7B:CD:35:C2:6F:55:FE:87:7A:6B:F4:66:D4:05
X509v3 Authority Key Identifier:
keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:97:9a:4d:f3:07:3d:21:b5:1d:c1:5c:d2:de:af:15:e2:80:
2f:3d:7d:8d:8b:65:0f:4d:81:17:76:ef:e2:37:df:ac:32:b9:
f8:a7:f9:3c:e8:c1:ad:53:1f:62:ce:86:3a:20:b0:1a:af:c6:
11:60:24:1e:bf:3c:2a:4b:f3:04:0e:7a:d3:34:a7:4b:82:71:
99:e3:c7:a6:59:fd:52:d7:f5:ea:fe:72:0c:a2:3a:d0:79:74:
16:8c:52:11:90:a8:f7:41:92:c1:d8:b4:8b:b9:e5:05:3b:f3:
cf:8b:fd:57:29:d4:a6:90:b4:e4:27:02:be:0a:34:a8:0b:22:
2f:18:f4:52:af:62:b5:15:d6:95:13:60:c4:27:4b:cd:b2:ef:
c8:6b:f6:0e:80:4d:39:f5:5a:d6:f8:e7:e8:e1:68:69:c1:92:
ad:a6:f7:1d:cf:1b:a5:6d:04:c7:c9:48:2b:9f:a8:df:2a:17:
95:1e:d8:4d:d9:a2:61:01:f8:ae:e1:e7:cc:b9:7b:99:34:0b:
e0:6d:5a:56:43:79:a0:9b:c1:90:4a:83:ee:6f:13:4e:06:14:
75:63:0c:5c:f6:5d:7a:8a:a6:97:cb:bf:f1:ec:74:c0:47:43:
08:64:ad:56:b5:97:50:a4:0b:d3:71:aa:7e:aa:97:fa:fc:30:
57:f8:a6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:50:42 2026 by rpki-client