Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
File: suORFp8MnyGqjy6J5zdccuxnT-s.mft (raw, json)
Hash identifier: QiWHgIO4n2gUjM4R7bxiQ+Dx/pVs5zdF7xIaRvJTySI=
Subject key identifier: 90:00:C8:E8:25:C7:96:D5:53:29:84:94:F3:E0:6B:A3:10:B6:7F:B8
Authority key identifier: B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
Certificate issuer: /CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Certificate serial: 01A0D8A845113B44D75AB65E8D6E9F731183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
Manifest number: 1A03
Signing time: Fri 25 Sep 2026 13:01:41 +0000
Manifest this update: Fri 25 Sep 2026 13:01:41 +0000
Manifest next update: Sat 26 Sep 2026 13:01:41 +0000
Files and hashes: 1: PaUq1i1qchD33WEhkgfziRXOQqo.roa (hash: 4jZTQPexjQrBRUzBh0uva4unQWrx3Cy+0TA6XIINReI=)
2: suORFp8MnyGqjy6J5zdccuxnT-s.crl (hash: J3bHA1XlE7KjDhWyizRHlyzVaeKv4HbmxxKxsyIL44A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:45:11:3b:44:d7:5a:b6:5e:8d:6e:9f:73:11:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Validity
Not Before: Sep 25 13:01:41 2026 GMT
Not After : Sep 26 13:01:41 2026 GMT
Subject: CN=9000c8e825c796d553298494f3e06ba310b67fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b6:0a:62:a9:ac:aa:51:07:f0:30:06:a4:57:
36:da:51:3d:6d:8c:cf:0d:1d:33:4a:c9:3b:0c:0b:
a9:bf:8f:ff:69:15:52:f6:e6:9c:34:0b:95:2f:a5:
91:cc:f2:f1:66:80:a8:a7:d0:b0:df:c9:77:4b:08:
75:4c:5c:19:e1:df:d1:0a:86:5b:13:a8:1f:29:8a:
68:f9:1c:a1:97:d0:5f:f1:f2:bc:68:b5:d2:33:c5:
28:ad:13:69:7f:e5:dd:3c:14:5a:7a:2f:8f:9b:33:
24:e8:d5:da:a2:35:2f:b6:a0:6e:3f:60:ba:13:d6:
eb:de:72:c4:0a:af:03:1c:40:07:0e:84:07:21:81:
16:b7:a2:75:3d:24:d7:08:15:09:af:2f:d8:df:2c:
c9:f6:4f:5f:5e:9b:52:a8:ee:32:96:73:bb:48:5f:
d1:39:58:c9:74:72:a5:b9:cd:da:e1:eb:79:a4:36:
34:62:9f:22:6f:51:92:98:1a:e3:51:03:84:3a:d1:
58:31:d6:2a:43:4b:89:92:c4:c2:06:5c:e0:60:0a:
33:a3:a2:2e:4e:d0:98:db:28:0c:21:02:c8:c9:d7:
5e:88:45:ee:2a:d1:af:54:9d:7c:b5:fa:a6:e5:ae:
3a:01:85:f7:e2:d4:ab:47:11:8b:02:24:ed:93:88:
c4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:00:C8:E8:25:C7:96:D5:53:29:84:94:F3:E0:6B:A3:10:B6:7F:B8
X509v3 Authority Key Identifier:
keyid:B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:04:fb:0c:71:46:30:f2:e7:43:f5:3b:f4:15:fb:08:bf:8d:
04:10:13:cf:92:45:7c:7c:6a:ca:a1:bf:af:d7:0d:36:46:c6:
92:f0:42:51:4e:21:18:88:d1:ad:2f:84:62:de:d1:65:71:f5:
db:c1:24:6d:4b:30:5f:4f:f5:db:36:73:37:05:1f:95:be:06:
82:b1:d2:64:2a:f4:0f:ff:b2:5a:3f:1f:83:0c:25:5e:1d:9d:
57:24:de:b1:5d:39:24:ed:77:a9:43:5f:b5:67:8e:85:fe:77:
16:1f:40:13:47:f2:d9:29:eb:24:f3:2a:cc:a3:73:66:95:cd:
82:90:e1:c8:d9:a9:f8:77:48:7d:4b:09:5a:ae:33:5b:04:bc:
75:51:9a:84:8b:42:9b:06:49:6e:55:c5:b8:68:9e:54:20:6e:
6b:63:27:78:40:f8:c8:4c:d0:41:80:66:48:4a:20:9f:6d:0e:
61:58:f4:a0:8f:90:da:4e:38:8a:1d:35:32:3d:a6:58:c1:0d:
b3:d7:9e:4c:c3:5c:c8:ab:08:8c:e5:e6:4a:de:10:29:f0:6c:
3d:81:f7:6f:bf:98:1d:ee:4d:fc:21:ff:ac:b6:6d:7a:63:52:
c2:15:b0:66:fc:f8:21:85:fa:7c:7f:e4:47:9d:c9:22:4a:59:
71:8e:98:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYqEURO0TXWrZejW6fcxGDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZTM5MTE2OWYwYzlmMjFhYThmMmU4OWU3Mzc1YzcyZWM2
NzRmZWIwHhcNMjYwOTI1MTMwMTQxWhcNMjYwOTI2MTMwMTQxWjAzMTEwLwYDVQQD
Eyg5MDAwYzhlODI1Yzc5NmQ1NTMyOTg0OTRmM2UwNmJhMzEwYjY3ZmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bYKYqmsqlEH8DAGpFc22lE9bYzP
DR0zSsk7DAupv4//aRVS9uacNAuVL6WRzPLxZoCop9Cw38l3Swh1TFwZ4d/RCoZb
E6gfKYpo+Ryhl9Bf8fK8aLXSM8UorRNpf+XdPBRaei+PmzMk6NXaojUvtqBuP2C6
E9br3nLECq8DHEAHDoQHIYEWt6J1PSTXCBUJry/Y3yzJ9k9fXptSqO4ylnO7SF/R
OVjJdHKluc3a4et5pDY0Yp8ib1GSmBrjUQOEOtFYMdYqQ0uJksTCBlzgYAozo6Iu
TtCY2ygMIQLIyddeiEXuKtGvVJ18tfqm5a46AYX34tSrRxGLAiTtk4jE9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAAyOglx5bVUymElPPga6MQtn+4MB8GA1UdIwQY
MBaAFLLjkRafDJ8hqo8uiec3XHLsZ0/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS84OGMyMDQtYmMzMC00YjlkLWI5ZWMt
NTY4NjI3OWVjOTZlLzEvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS84OGMyMDQtYmMzMC00YjlkLWI5ZWMtNTY4NjI3OWVjOTZl
LzEvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQT7DHFG
MPLnQ/U79BX7CL+NBBATz5JFfHxqyqG/r9cNNkbGkvBCUU4hGIjRrS+EYt7RZXH1
28EkbUswX0/12zZzNwUflb4GgrHSZCr0D/+yWj8fgwwlXh2dVyTesV05JO13qUNf
tWeOhf53Fh9AE0fy2SnrJPMqzKNzZpXNgpDhyNmp+HdIfUsJWq4zWwS8dVGahItC
mwZJblXFuGieVCBua2MneED4yEzQQYBmSEogn20OYVj0oI+Q2k44ih01Mj2mWMEN
s9eeTMNcyKsIjOXmSt4QKfBsPYH3b7+YHe5N/CH/rLZtemNSwhWwZvz4IYX6fH/k
R53JIkpZcY6Y9w==
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:04:43 2026 by rpki-client