Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
File: SU0Or4AlCrgkiYm-caQDlxjWk1o.mft (raw, json)
Hash identifier: lEAvFE/LgbaJg9SQOMK6ePVHCY/gph1N+rEB6gQ/3Zs=
Subject key identifier: C4:CC:45:53:F9:7F:CC:A9:8E:C2:41:C8:D2:F0:01:2C:3D:41:5B:4B
Authority key identifier: 49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
Certificate issuer: /CN=494d0eaf80250ab8248989be71a4039718d6935a
Certificate serial: 01A0EDAF8660FDDA174785235BE3F14BEB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
Manifest number: 1A7D
Signing time: Tue 29 Sep 2026 15:01:37 +0000
Manifest this update: Tue 29 Sep 2026 15:01:37 +0000
Manifest next update: Wed 30 Sep 2026 15:01:37 +0000
Files and hashes: 1: 0KJKpOQIMMRUve_Db7ZUFTqmRws.roa (hash: etju0WDFZjIJBWE3dUE0Yo+hxWpUlhYgNdf8HBRrcOY=)
2: SU0Or4AlCrgkiYm-caQDlxjWk1o.crl (hash: p5NqulanXZ4DqrvCaTLEdHEaP6qYeGwDLvp+cmJ8IvI=)
3: bxeM4h64PDnwHQgpeWEPs6xXjKE.roa (hash: vQaykNgd1AQKpk9ErV1Vc/Llei5KEpsTe/QrkRR1mYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 15:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:af:86:60:fd:da:17:47:85:23:5b:e3:f1:4b:eb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d0eaf80250ab8248989be71a4039718d6935a
Validity
Not Before: Sep 29 15:01:37 2026 GMT
Not After : Sep 30 15:01:37 2026 GMT
Subject: CN=c4cc4553f97fcca98ec241c8d2f0012c3d415b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:e3:e1:01:ae:c5:3e:5c:52:8a:de:ff:ab:
e0:8c:c6:65:81:41:5b:c8:93:c7:13:be:84:f4:a4:
14:e2:f6:af:e6:59:a9:ff:e1:e1:5e:7f:2a:b2:87:
61:4e:80:a6:dc:5d:02:48:02:fa:86:13:d9:06:43:
25:07:42:58:02:8c:3a:01:2b:f1:b6:0c:b5:66:f8:
36:d4:fb:62:9f:64:8b:e9:93:1e:f7:07:98:d5:63:
f1:9d:96:0e:08:04:cb:bd:8c:66:f4:97:3c:a3:f8:
62:4f:e4:c0:f0:fb:21:c8:d4:82:b7:15:15:fe:c8:
4a:7a:d2:f3:12:46:99:98:85:3c:85:cf:81:a3:38:
c5:21:94:4b:1f:88:c4:12:31:45:7b:89:62:0d:b3:
e9:61:61:42:5f:a6:06:03:27:ff:3c:83:69:b2:d9:
41:a5:26:d4:48:3f:8f:3f:ed:17:8c:66:c1:da:cd:
aa:4f:dd:cc:ee:40:d3:be:8e:db:73:7f:79:69:31:
ad:ab:ef:f5:16:e5:13:6b:de:8e:11:d0:ab:67:2b:
e1:54:00:8d:7c:5d:43:aa:2a:d6:f7:f9:7c:73:fd:
52:5a:c2:c6:6e:d9:64:85:2f:5c:c4:f0:45:1f:96:
19:85:9f:aa:38:19:12:ee:e6:97:d3:a2:3e:8e:64:
89:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CC:45:53:F9:7F:CC:A9:8E:C2:41:C8:D2:F0:01:2C:3D:41:5B:4B
X509v3 Authority Key Identifier:
keyid:49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b1:b8:ba:25:fb:92:dc:69:81:16:d7:1c:22:f4:46:b2:d3:
ed:d3:42:2f:55:96:d4:50:4b:4f:13:7b:92:7a:30:a5:11:5a:
8e:73:2a:73:f6:53:ae:80:91:a0:ff:61:9b:88:61:bd:a9:30:
ac:16:ef:de:76:07:84:6f:b9:ae:c5:b3:06:d2:e7:31:59:f1:
80:c2:e1:47:4e:ac:6c:87:0e:d0:54:87:87:0b:91:74:ee:3a:
96:33:32:d5:f3:27:1d:7c:a1:4f:1c:13:ff:bd:ee:ae:7a:a0:
a8:6b:8f:e7:90:f6:ca:6b:96:e4:95:d0:44:5e:ce:d7:f9:f6:
82:a3:58:4a:a2:f6:61:4b:d6:00:ea:b5:6e:7f:7a:13:1e:ad:
a1:27:24:42:db:17:23:f2:70:2e:c9:14:95:2d:5d:aa:7f:4d:
9c:05:0f:f4:3f:29:69:a5:d3:ee:84:70:82:ee:28:f1:d9:d3:
cd:21:8d:cc:3e:86:de:89:a1:1d:c4:be:2a:e6:c6:7e:72:a3:
24:f8:d3:d3:5d:13:27:4d:20:9a:8c:4f:61:0d:87:b1:42:79:
76:e0:d6:f2:cb:aa:c3:09:3e:8a:dd:b1:23:46:7c:85:2f:68:
27:45:0e:7c:ca:5c:fb:2c:f2:d3:27:dc:f0:92:50:7e:05:41:
17:2c:cc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:24:12 2026 by rpki-client