Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
File: su7525PeEaAlPVqoxT7Mrg-cPTM.mft (raw, json)
Hash identifier: m7wYFBT60o8xJPl2d94XQuA93zreLITtfCko0qT4DOo=
Subject key identifier: C9:BF:77:9E:B6:94:99:22:9E:D0:4D:5F:04:40:14:82:69:FD:AE:C2
Authority key identifier: B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33
Certificate issuer: /CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33
Certificate serial: 019D27E008B2761A5820D3D4BBE5CF00A01B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
Manifest number: 0BF9
Signing time: Thu 26 Mar 2026 02:01:26 +0000
Manifest this update: Thu 26 Mar 2026 02:01:26 +0000
Manifest next update: Fri 27 Mar 2026 02:01:26 +0000
Files and hashes: 1: su7525PeEaAlPVqoxT7Mrg-cPTM.crl (hash: xY5MuFfeUZm6YwIiI+GRbYpDXKFd4wvnE6OK/ZXL/uI=)
2: yF3cvECO3ZPhk5RL38Usnf_w7zQ.roa (hash: dQz6DpgzE93vbwSPAPy5s6ZmxUE3vTqFatyJPnJweWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:08:b2:76:1a:58:20:d3:d4:bb:e5:cf:00:a0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33
Validity
Not Before: Mar 26 02:01:26 2026 GMT
Not After : Mar 27 02:01:26 2026 GMT
Subject: CN=c9bf779eb69499229ed04d5f0440148269fdaec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:68:2d:a2:a0:56:8c:68:16:bb:5f:e1:8c:7a:
05:5a:6f:8d:ce:16:25:43:3a:46:af:f1:5f:e5:9a:
0f:8e:de:d5:cc:15:18:c2:93:03:56:f3:51:f3:65:
8e:dd:8a:9f:ac:32:f7:7a:91:75:c1:d2:f6:93:df:
f3:f0:a1:cd:f4:cd:7b:d0:e4:26:d6:51:3c:12:8a:
07:a0:3d:d9:13:86:2b:b8:0a:34:3b:40:da:e4:48:
7f:1e:42:89:81:f8:9a:7a:0e:ab:fe:e0:0c:c5:cf:
1d:4a:86:0c:69:29:e4:0d:c8:b4:54:33:11:4c:7d:
80:7b:a3:d0:38:3b:01:d2:ac:7e:fd:2b:17:e1:06:
c9:d3:d5:25:4d:0a:e3:de:10:1d:83:ad:40:c7:c4:
69:22:c5:4d:e7:66:dd:c8:26:88:2c:44:1d:77:d7:
f5:08:89:5b:f0:df:73:fe:88:e0:61:77:98:c0:3a:
fd:36:0e:89:27:89:2c:2d:c6:29:93:fd:97:e8:4c:
5e:22:7f:54:e6:24:8d:9e:b2:a9:5f:34:9f:ad:9b:
ad:b3:53:8b:b8:dc:39:6a:5f:cb:f4:a0:95:df:68:
65:95:b5:ab:ae:34:70:2e:5c:fd:51:e4:57:98:7e:
57:ed:25:c6:4c:71:ce:4b:fe:26:1f:84:1e:a0:a3:
8d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BF:77:9E:B6:94:99:22:9E:D0:4D:5F:04:40:14:82:69:FD:AE:C2
X509v3 Authority Key Identifier:
keyid:B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:67:6d:9e:f6:87:dc:b1:6f:20:15:ec:dd:9b:8c:b2:cd:b4:
f7:a1:28:fc:9c:e3:5b:41:a1:bc:80:b1:18:13:7e:ac:05:5e:
0e:ca:74:46:ac:a0:01:16:36:76:1b:f1:2f:aa:73:c8:4c:60:
84:c1:38:73:5f:1a:5e:87:4f:99:18:c2:51:1b:02:b2:1e:ad:
1e:d7:6f:de:3a:ab:21:db:28:e8:cc:db:52:09:5b:53:ad:95:
b0:8f:8f:25:34:b6:bf:96:73:5e:83:da:1d:68:ab:c7:8d:a5:
42:da:b6:9b:3b:77:b4:73:5c:43:dd:d9:0b:b7:1b:93:c8:07:
62:c1:0e:d0:de:11:6c:b5:b0:f1:9d:5c:49:1a:af:db:42:a1:
05:8f:68:88:e2:c4:99:3d:2a:d1:d6:8a:a5:a3:cc:a2:e4:6d:
99:8f:90:4a:77:4c:8d:dc:0a:a2:ce:2b:d2:de:5b:74:a5:16:
65:85:93:99:df:40:e7:cb:6b:20:55:a7:7d:cf:42:a7:6e:7a:
56:4e:b3:20:7c:5d:21:90:0d:b9:a9:7b:93:e4:43:1d:56:74:
a3:76:a2:ba:aa:f9:6e:34:47:20:e8:ba:29:ab:70:5f:e8:8c:
cf:9d:3c:38:65:7c:9f:61:8d:cf:43:d9:d7:42:2e:91:cc:f8:
25:ff:9a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:17 2026 by rpki-client