Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
File: Su-5nSoG7pneqVZvFr8ibbPlbJI.mft (raw, json)
Hash identifier: lXJRAZpP3cVFApW79i88DXghu2giUGCrDqudvpheNcg=
Subject key identifier: 9E:79:09:58:79:54:D3:62:F7:98:02:B3:C2:6C:5A:85:E9:B9:A8:EF
Authority key identifier: 4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
Certificate issuer: /CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Certificate serial: 019D2996E9326CB845E4B44D5588C92015DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 10:00:49 +0000
Manifest this update: Thu 26 Mar 2026 10:00:49 +0000
Manifest next update: Fri 27 Mar 2026 10:00:49 +0000
Files and hashes: 1: 0qSgEj9RKFqvqN-inwjjWZFI1pg.roa (hash: k4mc0z9gAu2JzOR/GrWxi/A3ANg5O3FYVYf/5aBTRK4=)
2: Su-5nSoG7pneqVZvFr8ibbPlbJI.crl (hash: JvsSjio6Fr8+YJ4F/Beac04ykft/UUHpkBYOafQ91O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:e9:32:6c:b8:45:e4:b4:4d:55:88:c9:20:15:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Validity
Not Before: Mar 26 10:00:49 2026 GMT
Not After : Mar 27 10:00:49 2026 GMT
Subject: CN=9e7909587954d362f79802b3c26c5a85e9b9a8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0d:89:2c:8b:ef:0b:c1:c7:e3:56:84:84:a5:
fa:8b:5d:c1:73:60:3c:9e:08:a8:3e:b0:d2:35:f7:
7b:c9:e0:85:b9:a3:6a:ac:7f:45:ae:1f:f4:20:c7:
2b:67:29:08:83:06:a5:b2:15:f6:b0:b2:bf:3e:3d:
e2:45:5b:f0:df:7a:85:74:f2:be:3d:4e:39:fc:75:
b2:86:93:02:c8:96:a3:c5:e9:3c:90:ec:fb:02:28:
d0:d7:5a:bb:a0:bf:f8:f4:b7:32:c0:40:e4:22:85:
f9:6c:c1:d0:30:2c:70:a8:ba:4f:92:f4:c1:f5:81:
e1:e0:db:6b:9c:6d:a9:1c:e5:75:0e:d4:71:09:5b:
7b:5d:e2:1d:73:70:fb:2e:62:e7:5b:ab:c0:0c:d5:
30:79:a3:dc:f7:a3:00:ab:05:11:2c:88:9e:63:93:
72:ca:c1:d6:30:8a:ac:a9:f8:1b:bf:27:f2:aa:04:
ef:4a:76:95:7c:45:36:6b:9f:ad:7d:10:a1:11:f8:
65:21:51:b7:12:d9:6d:1e:c4:48:d8:c2:70:37:56:
a4:e7:be:02:2d:e1:00:0b:d1:3a:91:76:24:9f:ab:
95:59:27:21:d9:34:a5:ca:38:23:e9:89:ba:a1:bd:
4f:0a:67:e0:ca:d8:04:fb:c6:f9:12:d3:43:bc:47:
15:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:79:09:58:79:54:D3:62:F7:98:02:B3:C2:6C:5A:85:E9:B9:A8:EF
X509v3 Authority Key Identifier:
keyid:4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:24:23:81:c1:4f:63:bd:21:76:db:10:69:43:7e:7f:e5:92:
72:fe:7a:87:e0:15:1b:67:c3:cc:45:3a:aa:6c:22:01:08:12:
8a:c3:41:8f:7b:ba:45:3a:4e:5a:aa:61:13:bd:b2:bc:fe:f1:
c8:b1:66:16:66:c8:2a:d7:09:da:e7:51:1b:42:51:e2:4f:7b:
1a:06:02:ce:79:d0:c2:f1:e8:d8:52:75:ef:39:8c:6e:84:27:
ae:42:3c:5d:29:e1:d2:d7:1f:ee:50:14:c8:93:4e:5d:b7:bf:
22:b7:46:a4:75:6c:46:8d:74:59:09:65:76:44:f2:a4:64:70:
6a:30:d8:c8:65:0b:b6:62:3b:4b:7c:45:ff:8f:db:40:53:7b:
70:1a:06:79:97:7c:2e:c5:d9:61:ae:dd:47:46:37:6c:e5:7a:
31:b1:60:c0:13:ec:ff:e8:37:4d:a6:31:94:c1:86:06:2d:cb:
b9:0e:da:c4:72:5f:81:72:99:ff:97:bd:5f:4d:16:f6:6d:f3:
05:55:5c:11:09:bd:cc:c4:51:a8:d0:e4:6d:bb:fa:fb:96:aa:
38:bc:85:5b:2d:bc:3b:ab:6f:d9:e0:93:b2:11:88:14:74:26:
80:b7:e3:4a:aa:ea:8c:00:73:9e:fb:03:6a:99:be:44:0e:ee:
13:f6:cf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:19 2026 by rpki-client