Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
File: SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft (raw, json)
Hash identifier: SCPDBzvCedQvJsYTR6Y5oy/DoQHxZ5O5Su+lsybkOHc=
Subject key identifier: 19:09:B8:2B:1C:A3:12:41:DF:78:FC:19:67:E3:41:BA:DF:65:11:CB
Authority key identifier: 4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
Certificate issuer: /CN=4aebd4543df29da64e4232ef3791f534573c12f1
Certificate serial: 019F92B69946890E839A1A0FC9B20ED59A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
Manifest number: 0DCB
Signing time: Fri 24 Jul 2026 06:01:08 +0000
Manifest this update: Fri 24 Jul 2026 06:01:08 +0000
Manifest next update: Sat 25 Jul 2026 06:01:08 +0000
Files and hashes: 1: SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl (hash: vElk9Yg+sjcsJEqGhG5ucLXHvNE64VTE+TeuLFHpaDc=)
2: kypMcuIm-WpR0ZjTrQvN18lgASs.roa (hash: rpyCcsQ2xUEDWY8mMlJ3ItAHPdOq2MVR8TSSQ09U5AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:99:46:89:0e:83:9a:1a:0f:c9:b2:0e:d5:9a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aebd4543df29da64e4232ef3791f534573c12f1
Validity
Not Before: Jul 24 06:01:08 2026 GMT
Not After : Jul 25 06:01:08 2026 GMT
Subject: CN=1909b82b1ca31241df78fc1967e341badf6511cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:ca:be:0f:4e:79:6a:bc:aa:b8:36:9c:c5:
da:37:97:49:65:d2:99:39:93:cc:f2:dc:09:a6:18:
b7:24:c5:71:12:60:5a:84:10:57:d0:52:c1:ae:0b:
4f:13:68:63:ed:78:f8:b7:20:bf:31:a3:79:3c:bd:
e5:1d:86:b4:9c:c9:c9:e9:9e:26:67:85:b6:0e:f9:
d6:11:e4:30:4a:35:94:48:24:9e:08:c6:86:0f:a8:
c0:b4:33:99:ab:da:56:7b:6c:1a:d8:b8:e9:da:4c:
3b:4f:a0:f5:e8:5b:6a:a4:c6:17:28:3c:46:0d:2a:
3a:7f:80:25:3e:5b:1a:8c:f6:24:1c:81:b9:57:3c:
90:e7:7d:51:d9:9f:0c:25:89:48:91:95:65:5d:24:
7c:3b:44:dc:46:aa:11:a0:5f:a0:1e:9f:4e:12:b7:
7a:19:1d:30:60:f7:17:e4:d4:1d:d4:5d:53:5a:8c:
86:ed:e9:03:60:36:c9:91:a2:aa:7c:4a:94:4e:3f:
69:93:bb:ed:19:93:3a:4f:6d:6d:5d:bf:83:16:04:
cf:d2:0f:c3:98:dd:1c:a9:59:96:f6:a0:55:c2:9c:
39:b4:a6:e7:ec:a4:73:f8:51:af:d1:91:b5:20:b0:
3e:82:3b:06:1b:c9:87:86:c7:77:e5:92:2e:e2:92:
f0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:09:B8:2B:1C:A3:12:41:DF:78:FC:19:67:E3:41:BA:DF:65:11:CB
X509v3 Authority Key Identifier:
keyid:4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:71:f4:0a:b0:51:0d:56:e4:f5:56:5e:9c:32:ad:5d:43:72:
da:7c:b1:14:7f:1b:e1:84:97:f3:25:5c:f4:2e:26:a2:76:4e:
02:40:58:28:cb:6d:dd:33:68:56:0f:85:1c:90:8a:1d:ce:93:
ac:a3:92:1b:35:4e:45:f9:d1:b2:fb:f7:3d:99:d3:61:62:97:
75:91:80:21:71:bd:cc:00:af:83:df:98:f0:c2:ef:b8:8c:fc:
43:5c:b6:1f:da:7b:03:c1:b8:0d:f6:a7:38:3c:87:40:f6:ab:
32:9e:90:d0:a7:8d:a9:39:c2:5a:06:34:a3:d9:c2:43:77:07:
6c:8c:80:43:63:96:d1:10:88:6c:6f:f6:2d:16:52:46:7b:36:
c6:87:78:40:ee:04:5a:17:b4:58:86:60:07:ea:0c:bb:63:20:
97:2f:84:01:5d:57:9d:a6:eb:27:cf:70:ea:30:1e:fa:eb:fd:
82:f4:6b:16:43:43:5a:76:f0:c1:09:f2:2f:11:19:12:d2:b2:
45:0c:5c:5f:52:f5:3d:c3:b7:3c:82:79:c6:cc:c3:eb:da:00:
5e:0a:4b:c2:48:11:30:f3:bc:f9:82:4f:4f:a3:71:1b:b6:52:
9a:60:a3:fc:55:03:b8:08:4c:2f:41:d2:2f:57:57:8b:39:20:
6d:8c:47:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:08:14 2026 by rpki-client