Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
File: SUqFZSdrSiUbpXPdbV9fh4I469I.mft (raw, json)
Hash identifier: 3WJs4eSdvVGRoQltz8Z365WMkFMexy4C8uDYj/TTLH0=
Subject key identifier: 14:C4:60:AC:2D:2D:C0:37:78:9F:B2:CA:F3:60:46:B6:C1:72:16:BC
Authority key identifier: 49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2
Certificate issuer: /CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
Certificate serial: 019D26CCA4FC6BE8FA6E4213EEBE18B1477E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
Manifest number: 1403
Signing time: Wed 25 Mar 2026 21:00:38 +0000
Manifest this update: Wed 25 Mar 2026 21:00:38 +0000
Manifest next update: Thu 26 Mar 2026 21:00:38 +0000
Files and hashes: 1: SUqFZSdrSiUbpXPdbV9fh4I469I.crl (hash: fzMyGQijj2gtK6BjlCapSMRKo92Fs96/xPe3VK0Bqgs=)
2: aq077HDVuYpFz4tohOgQZVXtR0I.roa (hash: lmR3p1MzRx0IGSbTUTZO/Vwf3/td5VWtWsrVAx4InFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:a4:fc:6b:e8:fa:6e:42:13:ee:be:18:b1:47:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
Validity
Not Before: Mar 25 21:00:38 2026 GMT
Not After : Mar 26 21:00:38 2026 GMT
Subject: CN=14c460ac2d2dc037789fb2caf36046b6c17216bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:b8:1f:72:90:ba:6b:05:51:52:63:96:89:
f7:41:2f:7b:16:4e:9c:e6:5b:66:b7:f9:9f:bf:d3:
d3:78:32:30:36:96:8b:12:d0:b4:3a:38:ca:2b:90:
6c:6b:00:5c:11:3f:a3:56:d2:11:75:b2:68:f9:62:
ad:79:bb:52:d7:fa:1c:67:f0:6c:7a:e0:2b:c3:00:
6b:a2:ce:66:67:b6:58:4e:a3:66:68:10:67:53:18:
69:8e:df:c8:6d:55:af:ce:04:2d:c7:03:08:59:a1:
31:16:ef:4e:d7:71:3e:db:62:89:90:eb:e1:b3:69:
41:81:9d:fd:75:40:c8:26:f7:00:b9:b4:7b:33:c4:
11:c1:3b:7c:11:a2:0e:a0:33:12:74:e3:c9:3f:0a:
c3:38:cd:06:39:82:39:9f:31:7c:24:00:1c:7b:36:
0f:83:e3:6d:44:03:cb:36:d5:99:71:05:e6:54:60:
c4:6f:68:f5:b0:d1:d5:2e:b5:7f:24:0a:71:3e:4a:
9e:06:62:8a:73:bf:05:7a:9d:63:2c:8f:f7:de:bc:
43:78:b5:c4:fd:f3:c2:f0:b8:de:a9:a9:0d:46:46:
a5:bc:fb:75:f3:3f:7b:35:ae:e9:ae:c0:07:be:97:
28:e8:6f:ec:04:eb:4b:c2:83:b2:1c:6a:29:1b:0e:
f6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C4:60:AC:2D:2D:C0:37:78:9F:B2:CA:F3:60:46:B6:C1:72:16:BC
X509v3 Authority Key Identifier:
keyid:49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9e:6d:5d:8b:3a:d6:5c:f2:81:ca:a8:96:28:54:f2:c3:de:
9a:e4:31:77:c1:d2:e2:44:2e:87:03:c1:54:ea:7e:ed:ab:18:
a5:ce:f9:f7:fa:f6:64:fb:9c:d6:e0:47:81:d8:6a:64:97:8f:
ec:7a:fd:d4:f7:c2:98:ee:87:65:fa:7d:38:a9:91:d9:0a:8f:
c0:27:1b:4f:08:98:88:95:3b:0f:59:26:59:ec:69:d2:70:e7:
63:e7:e1:d9:54:3a:18:4c:53:9f:73:ba:58:30:f6:4d:48:cb:
24:ef:24:d1:67:8a:a3:4f:8f:17:bb:e6:58:5f:1e:8e:2e:a4:
85:8f:7c:46:3b:72:48:da:51:ca:79:9c:8c:8a:3a:0f:85:53:
a9:ac:6a:b0:f3:ac:33:24:9f:25:e9:b8:47:5d:ca:51:4a:df:
00:01:43:db:5e:b8:d9:0b:0a:4f:93:88:ea:98:0d:0d:a4:bd:
5d:67:b9:d8:05:8a:07:a1:8b:09:73:76:4d:bb:16:01:18:13:
18:df:be:63:fb:82:16:05:ad:15:63:9d:57:9d:cd:f8:03:7c:
b0:46:03:a5:c7:24:3f:9e:13:9c:99:55:d6:47:40:33:95:d9:
ee:99:52:27:42:a9:79:a4:30:c4:31:cb:c6:fd:ec:fa:38:ed:
62:46:fd:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzKT8a+j6bkIT7r4YsUd+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NGE4NTY1Mjc2YjRhMjUxYmE1NzNkZDZkNWY1Zjg3ODIz
OGViZDIwHhcNMjYwMzI1MjEwMDM4WhcNMjYwMzI2MjEwMDM4WjAzMTEwLwYDVQQD
EygxNGM0NjBhYzJkMmRjMDM3Nzg5ZmIyY2FmMzYwNDZiNmMxNzIxNmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqom4H3KQumsFUVJjlon3QS97Fk6c
5ltmt/mfv9PTeDIwNpaLEtC0OjjKK5BsawBcET+jVtIRdbJo+WKtebtS1/ocZ/Bs
euArwwBros5mZ7ZYTqNmaBBnUxhpjt/IbVWvzgQtxwMIWaExFu9O13E+22KJkOvh
s2lBgZ39dUDIJvcAubR7M8QRwTt8EaIOoDMSdOPJPwrDOM0GOYI5nzF8JAAcezYP
g+NtRAPLNtWZcQXmVGDEb2j1sNHVLrV/JApxPkqeBmKKc78Fep1jLI/33rxDeLXE
/fPC8LjeqakNRkalvPt18z97Na7prsAHvpco6G/sBOtLwoOyHGopGw72DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTEYKwtLcA3eJ+yyvNgRrbBcha8MB8GA1UdIwQY
MBaAFElKhWUna0olG6Vz3W1fX4eCOOvSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1VxRlpTZHJTaVVicFhQZGJWOWZoNEk0NjlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xOGEyZmQtMTVmNS00M2U2LWI3ODYt
YzZkOWY5MTViZDhiLzEvU1VxRlpTZHJTaVVicFhQZGJWOWZoNEk0NjlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xOGEyZmQtMTVmNS00M2U2LWI3ODYtYzZkOWY5MTViZDhi
LzEvU1VxRlpTZHJTaVVicFhQZGJWOWZoNEk0NjlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZ5tXYs6
1lzygcqolihU8sPemuQxd8HS4kQuhwPBVOp+7asYpc759/r2ZPuc1uBHgdhqZJeP
7Hr91PfCmO6HZfp9OKmR2QqPwCcbTwiYiJU7D1kmWexp0nDnY+fh2VQ6GExTn3O6
WDD2TUjLJO8k0WeKo0+PF7vmWF8eji6khY98RjtySNpRynmcjIo6D4VTqaxqsPOs
MySfJem4R13KUUrfAAFD21642QsKT5OI6pgNDaS9XWe52AWKB6GLCXN2TbsWARgT
GN++Y/uCFgWtFWOdV53N+AN8sEYDpcckP54TnJlV1kdAM5XZ7plSJ0KpeaQwxDHL
xv3s+jjtYkb9EA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:30 2026 by rpki-client