Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
File: SU0Or4AlCrgkiYm-caQDlxjWk1o.mft (raw, json)
Hash identifier: +xQKSDjWpL0ecf7XatcJsD2LPCM2kPCcnUkMB97GID8=
Subject key identifier: 00:E6:28:01:BB:F2:D0:35:2A:0F:DB:E9:CE:7D:5D:84:0A:3F:BE:55
Authority key identifier: 49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
Certificate issuer: /CN=494d0eaf80250ab8248989be71a4039718d6935a
Certificate serial: 019D2695E077A4BB43F55170D652C945CB5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 20:00:49 +0000
Manifest this update: Wed 25 Mar 2026 20:00:49 +0000
Manifest next update: Thu 26 Mar 2026 20:00:49 +0000
Files and hashes: 1: 0KJKpOQIMMRUve_Db7ZUFTqmRws.roa (hash: etju0WDFZjIJBWE3dUE0Yo+hxWpUlhYgNdf8HBRrcOY=)
2: SU0Or4AlCrgkiYm-caQDlxjWk1o.crl (hash: RsKBfFqOhItVMu+2m4MZWahHNYZDsnhazPaxv2SsNxM=)
3: grKRDZ7eBdOsibsvQvX8cKB3pXQ.roa (hash: oGtGExHh4sBYB8EXlq88c5ERrh1bBHwf0WXsU+HrN+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:e0:77:a4:bb:43:f5:51:70:d6:52:c9:45:cb:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d0eaf80250ab8248989be71a4039718d6935a
Validity
Not Before: Mar 25 20:00:49 2026 GMT
Not After : Mar 26 20:00:49 2026 GMT
Subject: CN=00e62801bbf2d0352a0fdbe9ce7d5d840a3fbe55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:54:1a:ec:53:dd:3d:f9:05:da:fe:f1:aa:59:
57:00:a6:69:4a:45:8f:3c:d6:4d:6d:c5:60:0d:e6:
93:5f:7b:38:1b:3c:84:c7:c9:d7:0c:40:1c:21:79:
7b:c9:33:60:0e:56:2e:49:c3:e3:4b:a8:e8:33:f6:
28:08:cc:b3:23:d4:41:c9:ff:1a:f5:30:02:89:41:
24:7e:6e:11:fa:ba:7f:e9:2c:54:62:fb:3c:90:cd:
fc:94:de:f9:77:7e:04:d7:95:a8:7d:a1:7f:8e:30:
59:83:6f:a1:bd:95:e7:34:88:ba:cc:9d:c9:c0:a7:
49:9d:3a:15:4c:b3:21:e3:3c:ab:a3:f8:7e:32:e7:
75:94:f5:d7:52:b1:46:f3:c1:ef:aa:aa:7b:23:c1:
e1:77:e3:53:c2:14:3e:55:f8:50:54:5b:ea:36:ec:
d8:7a:6c:f4:e3:9e:32:a0:27:fd:bd:f6:74:2b:a6:
79:28:46:d3:4e:04:de:d0:80:43:92:85:21:d5:ca:
d6:b7:e6:24:4f:ad:3c:be:5b:c2:04:89:fb:d9:83:
e6:58:01:be:ce:40:c8:fc:bb:ee:2c:f0:ac:a9:10:
92:a1:eb:f1:7e:84:77:f0:e5:5b:77:c9:25:03:6f:
a0:be:bd:71:b0:ee:b6:10:7e:93:60:af:69:be:0b:
d7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E6:28:01:BB:F2:D0:35:2A:0F:DB:E9:CE:7D:5D:84:0A:3F:BE:55
X509v3 Authority Key Identifier:
keyid:49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:6a:40:2d:fc:b8:de:a5:43:44:42:d9:b1:10:b7:81:6e:d4:
ce:fb:9f:76:13:8f:56:f1:1d:97:a7:09:74:c5:c9:6a:e5:fa:
55:2b:44:6f:e3:15:ac:dd:8f:31:10:19:bc:a4:32:61:e7:6c:
35:00:14:d8:d0:0d:df:b5:a4:37:cf:6a:68:f9:89:0e:7f:49:
da:1f:16:e4:3f:76:11:21:d5:f2:52:8f:2f:ce:da:ef:17:87:
81:74:12:1d:1e:d2:69:3e:40:3e:96:0b:1f:b1:cf:e7:0f:aa:
a6:04:1b:d4:ec:37:49:90:db:4f:2e:55:03:d9:94:ec:fe:7c:
1a:eb:23:30:0e:c1:af:6d:9e:dd:7b:1a:f8:f1:8b:61:40:af:
ac:58:90:37:ed:51:c5:94:9f:d6:8e:aa:37:27:80:e5:1f:ab:
45:c0:ba:8c:c6:42:5e:95:43:34:4b:18:e2:2e:c8:90:43:23:
91:db:ba:da:b4:29:31:ee:42:d6:0e:62:b8:51:31:63:76:2b:
6c:fc:95:8c:1b:d0:8b:87:64:bc:53:cf:19:92:a3:3f:2c:47:
69:4c:6e:36:24:42:6b:eb:f8:aa:15:d9:f5:f4:2a:78:b3:02:
94:60:3b:bf:6c:95:d9:3d:74:37:e0:51:fd:83:8b:7d:17:29:
a9:a2:19:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:03 2026 by rpki-client