Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
File: sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft (raw, json)
Hash identifier: 4xF7iEoospJpDOKYwrQE60823m4ubqzfp0slrPxcUyI=
Subject key identifier: 41:3C:51:79:B6:72:9E:01:46:92:43:A5:22:00:82:F8:A7:14:C9:9E
Authority key identifier: B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05
Certificate issuer: /CN=b14658fcab37032dfea96ef0ae68dc9deff6d705
Certificate serial: 019D25BAF0FCB5D95D18EA6B7008E8EE32F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
Manifest number: 1806
Signing time: Wed 25 Mar 2026 16:01:41 +0000
Manifest this update: Wed 25 Mar 2026 16:01:41 +0000
Manifest next update: Thu 26 Mar 2026 16:01:41 +0000
Files and hashes: 1: QBlYbj346qzHUv19Z-I6ndDq6qo.roa (hash: VEZ9eyiW7HYhsOu44s2MXlQaK3GSzzboX5o0voLYcrI=)
2: sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl (hash: 3x/ZzEJT18mciI//q5M8ZSl168vzmc3LaiMD5ZG7uRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:f0:fc:b5:d9:5d:18:ea:6b:70:08:e8:ee:32:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14658fcab37032dfea96ef0ae68dc9deff6d705
Validity
Not Before: Mar 25 16:01:41 2026 GMT
Not After : Mar 26 16:01:41 2026 GMT
Subject: CN=413c5179b6729e01469243a5220082f8a714c99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:f5:ac:67:a7:9f:94:7d:7e:f3:82:56:13:
fd:c1:99:0d:a8:b9:8f:bb:62:be:62:9d:0e:cd:1f:
df:03:80:99:f7:3d:3e:2e:90:9f:22:57:a3:3c:85:
22:82:a8:b9:66:58:69:8a:0c:24:43:65:13:57:1f:
35:68:44:84:97:67:fb:a7:70:28:02:78:d0:fa:26:
61:fd:9a:88:27:61:72:8d:d0:e7:7a:76:95:47:db:
44:d1:68:5e:75:ef:0c:0f:14:a6:9f:df:bf:c0:6c:
5f:38:6f:11:e2:15:5c:f0:6f:ad:65:a5:a0:88:26:
de:3b:0b:1b:1b:8c:82:94:16:83:ec:8c:4f:65:4c:
db:37:83:c5:42:eb:1b:ae:c1:62:6d:22:2c:cf:d6:
0f:2a:dc:9b:53:5f:60:7b:9e:06:81:d9:91:49:da:
a1:6f:77:a4:58:76:44:14:59:b0:46:bc:dd:5c:8e:
7f:3f:ed:40:68:c7:99:af:25:d6:2d:b5:88:6f:dd:
5a:b6:26:97:ad:68:15:70:3b:17:35:b8:42:ec:38:
cf:5d:ea:17:e5:2b:f4:ac:5c:78:d8:73:bd:70:58:
08:fc:4d:aa:3d:7a:7e:7c:3b:35:7c:3a:96:f3:f8:
43:ad:9e:18:d7:a1:e7:cf:5d:b6:98:57:2f:37:7e:
b8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3C:51:79:B6:72:9E:01:46:92:43:A5:22:00:82:F8:A7:14:C9:9E
X509v3 Authority Key Identifier:
keyid:B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c2:fe:9f:c2:a0:2f:24:c3:52:71:90:7a:45:f8:5f:d1:54:
fe:8b:64:2b:de:16:4b:33:37:94:8e:4f:c6:04:18:a9:4f:d6:
a4:4f:56:88:d4:a8:da:ff:96:55:14:6b:e3:67:de:9b:2b:f9:
6d:42:c5:65:4b:54:52:3a:f9:f8:65:69:13:f7:0c:ef:2e:9b:
11:d9:55:16:af:b8:56:df:08:c6:c4:3a:81:6d:7c:08:c8:da:
54:9f:30:6e:76:8b:b6:28:6d:89:f0:2e:f4:5c:04:eb:01:39:
8a:39:9b:d3:88:c1:37:67:f9:91:f5:13:5e:64:c4:78:cc:21:
6b:f8:bf:e7:64:5c:10:8e:15:81:5d:8a:6a:e4:19:b8:d5:ba:
64:49:8c:46:e3:da:f7:07:16:dc:5b:61:6d:b5:1c:3a:8e:0e:
ae:4f:ae:2d:2d:61:63:2d:c7:e4:a1:2a:b5:fc:63:e1:b4:d3:
a2:2f:e8:a9:dd:ee:c5:9e:9f:62:7a:e8:68:94:1c:78:19:48:
bc:f6:d5:73:f3:6d:90:54:2f:6d:2f:f3:3d:ce:ad:5e:c0:f9:
76:c6:9c:ee:52:89:76:97:34:30:2a:06:d1:b0:b7:98:2f:fd:
06:bc:49:4e:49:61:5c:05:49:9c:23:f7:c6:59:c3:c4:9f:7e:
d4:31:97:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0luvD8tdldGOprcAjo7jL0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNDY1OGZjYWIzNzAzMmRmZWE5NmVmMGFlNjhkYzlkZWZm
NmQ3MDUwHhcNMjYwMzI1MTYwMTQxWhcNMjYwMzI2MTYwMTQxWjAzMTEwLwYDVQQD
Eyg0MTNjNTE3OWI2NzI5ZTAxNDY5MjQzYTUyMjAwODJmOGE3MTRjOTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZr1rGenn5R9fvOCVhP9wZkNqLmP
u2K+Yp0OzR/fA4CZ9z0+LpCfIlejPIUigqi5ZlhpigwkQ2UTVx81aESEl2f7p3Ao
AnjQ+iZh/ZqIJ2FyjdDnenaVR9tE0Whede8MDxSmn9+/wGxfOG8R4hVc8G+tZaWg
iCbeOwsbG4yClBaD7IxPZUzbN4PFQusbrsFibSIsz9YPKtybU19ge54GgdmRSdqh
b3ekWHZEFFmwRrzdXI5/P+1AaMeZryXWLbWIb91atiaXrWgVcDsXNbhC7DjPXeoX
5Sv0rFx42HO9cFgI/E2qPXp+fDs1fDqW8/hDrZ4Y16Hnz122mFcvN364CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEE8UXm2cp4BRpJDpSIAgvinFMmeMB8GA1UdIwQY
MBaAFLFGWPyrNwMt/qlu8K5o3J3v9tcFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VaWV9LczNBeTMtcVc3d3JtamNuZV8yMXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81ZjY1NjYtODE2MC00Mzk0LTg3NWYt
YTdlYWQ4YWIxMjczLzEvc1VaWV9LczNBeTMtcVc3d3JtamNuZV8yMXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS81ZjY1NjYtODE2MC00Mzk0LTg3NWYtYTdlYWQ4YWIxMjcz
LzEvc1VaWV9LczNBeTMtcVc3d3JtamNuZV8yMXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8L+n8Kg
LyTDUnGQekX4X9FU/otkK94WSzM3lI5PxgQYqU/WpE9WiNSo2v+WVRRr42femyv5
bULFZUtUUjr5+GVpE/cM7y6bEdlVFq+4Vt8IxsQ6gW18CMjaVJ8wbnaLtihtifAu
9FwE6wE5ijmb04jBN2f5kfUTXmTEeMwha/i/52RcEI4VgV2KauQZuNW6ZEmMRuPa
9wcW3FthbbUcOo4Ork+uLS1hYy3H5KEqtfxj4bTToi/oqd3uxZ6fYnroaJQceBlI
vPbVc/NtkFQvbS/zPc6tXsD5dsac7lKJdpc0MCoG0bC3mC/9BrxJTklhXAVJnCP3
xlnDxJ9+1DGXoQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:20 2026 by rpki-client