Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
File: su0dYGb05GVO9fPMcKXZBamvgpA.mft (raw, json)
Hash identifier: IHaNmBKSdzN0bkcZCVxKdCJ+WjlW0i1snxqrrzIRd2M=
Subject key identifier: 35:85:0D:36:E6:FB:2B:69:F5:84:A5:17:EB:D6:42:F7:AC:33:AA:A6
Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
Certificate issuer: /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Certificate serial: 019D262824240F6FF999740AFF531051BF24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 18:00:57 +0000
Manifest this update: Wed 25 Mar 2026 18:00:57 +0000
Manifest next update: Thu 26 Mar 2026 18:00:57 +0000
Files and hashes: 1: 600lLjQN8NaUtu9vwfIFMpqTNQc.roa (hash: MUp+FLIccBAFPNwMS4Gw63hQ+b8ZEvvsOZeWkDj1pdQ=)
2: UFBqlqbDbCJdY4yyGZXAZPEHhZ0.roa (hash: NYR75LT8EcYVp5wWj3tYR34PO47ZPDQS52OiuEfA/iM=)
3: mh-GYVdTRd_42s-4vmsQOV1tY40.roa (hash: pgFeIkHEDR3yEGlYLLu69s0r5w/mu9jqvo+vTtixs6s=)
4: ndFKEl0wI8WgAsJHTynnR8s626U.roa (hash: iToJm74Xq6g6h01i3TJnsDzizJuEXJ+pOugGZB7SEMU=)
5: su0dYGb05GVO9fPMcKXZBamvgpA.crl (hash: U9rSJusJg55iUmBO+/YxLU+kM5v/UHS99xKUnn0OzpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:24:24:0f:6f:f9:99:74:0a:ff:53:10:51:bf:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Validity
Not Before: Mar 25 18:00:57 2026 GMT
Not After : Mar 26 18:00:57 2026 GMT
Subject: CN=35850d36e6fb2b69f584a517ebd642f7ac33aaa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1d:21:c3:60:5a:1d:3c:3f:b2:d4:91:81:fc:
45:46:ee:d1:6e:08:e2:c8:b9:dd:71:63:1c:7d:c6:
e0:da:2f:28:4d:99:01:3f:db:bc:da:01:48:8b:49:
8b:f5:bf:ac:8a:1b:7e:67:c3:4c:54:9e:de:d1:01:
75:33:0e:46:ac:44:29:74:ca:a9:9d:17:e1:9f:69:
88:3e:9a:7c:1d:b3:84:4e:0e:27:47:7e:b6:f2:67:
35:0e:dc:82:2e:07:5b:cf:97:91:bd:b3:d0:f0:08:
e0:8a:ec:2e:68:0c:42:66:3a:27:e3:b8:67:75:c8:
34:f9:e9:de:49:be:72:34:90:e0:27:ef:79:9f:40:
a6:45:ff:d9:19:a0:01:4b:b3:35:79:b1:23:9d:09:
af:5c:e5:57:ba:e3:d1:38:28:fc:68:bf:57:a3:83:
60:32:c5:a9:7c:cb:86:1d:6e:ae:2e:18:28:20:88:
63:4c:82:16:c9:09:62:f0:9e:a6:87:0e:5d:68:03:
b3:13:3e:cb:76:f0:be:14:91:b2:a5:e7:eb:50:5d:
08:b7:cf:e2:6c:f1:eb:87:99:3c:b1:31:e2:bc:f0:
b8:0d:f0:c4:fd:90:55:ba:23:8c:15:37:e3:9f:fb:
05:da:66:6d:85:31:87:83:d8:5e:70:15:95:05:71:
f9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:85:0D:36:E6:FB:2B:69:F5:84:A5:17:EB:D6:42:F7:AC:33:AA:A6
X509v3 Authority Key Identifier:
keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:f2:60:71:5a:2e:72:e9:63:a2:d2:7e:72:af:ca:bf:dd:76:
0e:31:da:df:82:4b:5b:22:08:54:62:60:ac:10:6f:34:c1:ba:
26:3b:d3:55:1d:bc:7c:12:28:a9:dc:1f:66:5d:d9:be:44:99:
96:63:61:83:9c:7d:1c:47:54:c7:42:44:09:c1:e2:5d:22:15:
69:f3:33:25:02:15:21:08:08:50:f9:dd:77:2d:c3:e7:a2:75:
89:68:17:f1:bf:8b:69:99:e1:04:f6:e1:77:ef:f6:07:7e:53:
7f:84:3f:1c:24:99:15:ee:af:fd:92:b0:6b:d6:82:7a:d2:4c:
92:e5:f3:47:68:65:7a:bb:12:c2:49:02:6b:b3:db:45:9c:61:
e3:52:43:fd:cf:43:c2:e9:ea:44:02:48:bd:fe:5c:8f:05:57:
bf:af:62:5b:c4:a3:d3:23:3b:08:ec:6e:8c:e0:f5:ed:09:90:
bd:3b:b7:6f:85:c2:d6:e6:7c:82:8d:24:df:ef:a5:e2:6a:45:
14:15:a9:12:35:25:4b:98:63:aa:03:98:6e:92:e8:1b:70:ff:
1a:85:22:f0:f0:d8:03:5d:c0:80:aa:72:22:1f:6f:85:8c:cf:
28:9a:84:2f:8e:50:c1:e1:7e:32:d0:f4:68:fc:35:c1:03:d9:
8f:5b:42:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKCQkD2/5mXQK/1MQUb8kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZWQxZDYwNjZmNGU0NjU0ZWY1ZjNjYzcwYTVkOTA1YTlh
ZjgyOTAwHhcNMjYwMzI1MTgwMDU3WhcNMjYwMzI2MTgwMDU3WjAzMTEwLwYDVQQD
EygzNTg1MGQzNmU2ZmIyYjY5ZjU4NGE1MTdlYmQ2NDJmN2FjMzNhYWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh0hw2BaHTw/stSRgfxFRu7Rbgji
yLndcWMcfcbg2i8oTZkBP9u82gFIi0mL9b+siht+Z8NMVJ7e0QF1Mw5GrEQpdMqp
nRfhn2mIPpp8HbOETg4nR3628mc1DtyCLgdbz5eRvbPQ8AjgiuwuaAxCZjon47hn
dcg0+eneSb5yNJDgJ+95n0CmRf/ZGaABS7M1ebEjnQmvXOVXuuPROCj8aL9Xo4Ng
MsWpfMuGHW6uLhgoIIhjTIIWyQli8J6mhw5daAOzEz7LdvC+FJGypefrUF0It8/i
bPHrh5k8sTHivPC4DfDE/ZBVuiOMFTfjn/sF2mZthTGHg9hecBWVBXH51wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWFDTbm+ytp9YSlF+vWQvesM6qmMB8GA1UdIwQY
MBaAFLLtHWBm9ORlTvXzzHCl2QWpr4KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3UwZFlHYjA1R1ZPOWZQTWNLWFpCYW12Z3BBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xMTgyY2ItNWY5NS00Y2Q0LWI3MmYt
NDZiNDZmYzBlNDk2LzEvc3UwZFlHYjA1R1ZPOWZQTWNLWFpCYW12Z3BBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8xMTgyY2ItNWY5NS00Y2Q0LWI3MmYtNDZiNDZmYzBlNDk2
LzEvc3UwZFlHYjA1R1ZPOWZQTWNLWFpCYW12Z3BBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv/JgcVou
culjotJ+cq/Kv912DjHa34JLWyIIVGJgrBBvNMG6JjvTVR28fBIoqdwfZl3ZvkSZ
lmNhg5x9HEdUx0JECcHiXSIVafMzJQIVIQgIUPnddy3D56J1iWgX8b+LaZnhBPbh
d+/2B35Tf4Q/HCSZFe6v/ZKwa9aCetJMkuXzR2hlersSwkkCa7PbRZxh41JD/c9D
wunqRAJIvf5cjwVXv69iW8Sj0yM7COxujOD17QmQvTu3b4XC1uZ8go0k3++l4mpF
FBWpEjUlS5hjqgOYbpLoG3D/GoUi8PDYA13AgKpyIh9vhYzPKJqEL45QweF+MtD0
aPw1wQPZj1tCFQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:29 2026 by rpki-client