Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
File: SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft (raw, json)
Hash identifier: 3cSRZakDdWgzGpAqRdN24yHnpszm+rzlfFQRgLstNsg=
Subject key identifier: 21:74:1F:94:65:4A:A6:F6:B6:8F:AD:44:11:14:96:0B:C8:D1:08:D5
Authority key identifier: 4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
Certificate issuer: /CN=4aebd4543df29da64e4232ef3791f534573c12f1
Certificate serial: 019E1DFE95C27D0A077751414F891ECF7F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
Manifest number: 0D0A
Signing time: Tue 12 May 2026 21:01:24 +0000
Manifest this update: Tue 12 May 2026 21:01:24 +0000
Manifest next update: Wed 13 May 2026 21:01:24 +0000
Files and hashes: 1: SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl (hash: SLiZSpkn+h6WhevtwV+fazDFUg9lSQI3ssSL5rGbYdo=)
2: kypMcuIm-WpR0ZjTrQvN18lgASs.roa (hash: rpyCcsQ2xUEDWY8mMlJ3ItAHPdOq2MVR8TSSQ09U5AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:95:c2:7d:0a:07:77:51:41:4f:89:1e:cf:7f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aebd4543df29da64e4232ef3791f534573c12f1
Validity
Not Before: May 12 21:01:24 2026 GMT
Not After : May 13 21:01:24 2026 GMT
Subject: CN=21741f94654aa6f6b68fad441114960bc8d108d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e5:0b:19:60:4f:5c:81:b1:34:ad:8e:28:3e:
90:66:12:16:04:4c:5d:97:ee:6c:45:ed:c9:6e:82:
b2:c1:df:03:2e:b8:b2:30:6c:64:17:86:fc:92:5b:
95:06:6d:e1:81:56:28:8d:3f:45:76:8a:48:db:d9:
91:35:89:20:3c:0f:f3:06:96:81:b4:fa:64:6f:98:
be:27:25:6a:83:5e:43:ad:b0:4c:e5:5e:cd:08:df:
44:89:28:9f:c6:7f:00:40:ca:14:33:c4:af:51:99:
a6:a9:c5:d2:db:8b:58:22:c4:05:f4:59:d9:e1:8a:
ff:6f:b6:15:d0:1a:c4:ef:ab:c1:9c:fb:12:7d:c4:
45:1c:c1:45:2f:70:fb:b7:ca:eb:14:55:5c:95:97:
df:2f:14:fa:8f:a2:0c:53:bc:49:56:ad:41:58:70:
b0:cb:e8:6b:94:38:6d:09:c2:5b:50:10:ce:0a:e5:
28:58:cd:ad:3e:dc:54:da:54:51:ae:62:8f:b5:ef:
4b:f4:eb:c5:c0:65:58:bc:4b:6f:3c:d3:bb:00:f9:
45:22:5a:b2:3e:7c:87:11:2f:bf:0a:af:33:cf:df:
ea:37:50:eb:95:2a:a6:48:06:56:4d:14:1f:9f:05:
73:30:12:7d:bd:11:6b:e1:fa:4b:fd:dd:d2:6e:ad:
1e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:74:1F:94:65:4A:A6:F6:B6:8F:AD:44:11:14:96:0B:C8:D1:08:D5
X509v3 Authority Key Identifier:
keyid:4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b9:32:50:05:de:d3:b0:01:79:64:fd:76:a8:cb:5e:5e:c4:
eb:6c:ef:75:a7:85:df:b3:49:bb:cf:bb:50:89:bd:b9:29:36:
8c:de:7f:db:b5:5c:03:52:21:22:2b:46:de:49:95:56:58:17:
73:3c:d2:db:69:95:4b:3a:c8:0b:8e:22:a1:62:16:a8:0e:a6:
55:57:d4:64:cd:ef:ff:7c:26:5f:fe:b5:57:e2:9f:b6:98:38:
11:80:04:00:15:87:da:3c:bb:bf:39:e6:81:af:1f:7b:97:1c:
92:ad:29:a6:be:1e:b1:33:6b:32:c2:8c:21:fa:2b:8d:8c:b1:
17:15:e1:30:6d:f6:21:b1:57:38:23:da:3c:31:33:74:f5:27:
d0:71:ba:8b:d2:ad:87:34:0e:f7:37:03:0e:d6:16:dc:e8:ae:
89:7e:b0:36:0a:3c:8a:60:93:e8:ef:58:10:78:46:12:f8:b8:
4f:f6:68:cb:a6:e0:03:b2:59:44:47:8e:8d:11:f1:f0:5d:d9:
75:b5:3f:e6:eb:55:f0:16:93:79:be:55:09:04:6d:31:b9:75:
41:6c:28:a9:c0:bd:5a:5d:bb:ac:75:5c:b9:c3:ec:c1:fa:4a:
b4:d3:63:7f:c6:9f:7d:00:7d:62:4f:07:51:e9:bb:48:5d:6d:
59:5e:03:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:03:04 2026 by rpki-client