Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
File: SU0Or4AlCrgkiYm-caQDlxjWk1o.mft (raw, json)
Hash identifier: JX7Bni0Ksc3KkWlt8S56nn7Rhq7n1uGerrgRh2IUUm4=
Subject key identifier: 30:D0:26:91:D1:D2:0C:3B:0E:AA:83:91:A2:FF:D2:31:49:84:57:36
Authority key identifier: 49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
Certificate issuer: /CN=494d0eaf80250ab8248989be71a4039718d6935a
Certificate serial: 019E1FB60215B3AC74AEF011081025ECF412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 05:01:22 +0000
Manifest this update: Wed 13 May 2026 05:01:22 +0000
Manifest next update: Thu 14 May 2026 05:01:22 +0000
Files and hashes: 1: 0KJKpOQIMMRUve_Db7ZUFTqmRws.roa (hash: etju0WDFZjIJBWE3dUE0Yo+hxWpUlhYgNdf8HBRrcOY=)
2: SU0Or4AlCrgkiYm-caQDlxjWk1o.crl (hash: Yd1xIal2iZ1V7BEucyHGAuegOgRJvaY+p9hwtdjbNfw=)
3: grKRDZ7eBdOsibsvQvX8cKB3pXQ.roa (hash: oGtGExHh4sBYB8EXlq88c5ERrh1bBHwf0WXsU+HrN+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b6:02:15:b3:ac:74:ae:f0:11:08:10:25:ec:f4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d0eaf80250ab8248989be71a4039718d6935a
Validity
Not Before: May 13 05:01:22 2026 GMT
Not After : May 14 05:01:22 2026 GMT
Subject: CN=30d02691d1d20c3b0eaa8391a2ffd23149845736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5c:e5:a9:b7:4a:32:c9:7b:9b:72:09:a9:c4:
bd:c4:e8:73:15:09:63:c6:86:8b:82:85:ed:ba:98:
e2:2e:f3:66:77:56:e9:6c:82:44:14:b3:b1:47:8d:
31:b9:98:5d:30:9e:e3:f2:fa:fb:45:e7:50:5f:bb:
19:c4:62:f2:30:78:de:8f:31:09:5d:83:da:fe:6d:
24:d5:36:2b:23:46:2b:5d:7d:71:3a:35:cf:3f:8b:
fd:62:f4:40:aa:bc:3e:92:03:aa:b5:98:ee:00:d6:
44:2b:45:86:11:78:e5:f9:81:f9:ec:30:03:ed:4c:
a2:09:e0:15:bd:e7:f6:e9:13:08:ea:90:71:b0:26:
42:e3:fe:f5:06:cf:09:ba:c7:af:eb:08:dc:bf:79:
38:4c:32:66:f0:35:57:cc:31:c1:c7:67:2e:85:2f:
0e:de:e9:4b:f6:2c:22:08:30:5e:f4:bd:7e:f5:90:
e4:c5:b4:e5:6f:7f:21:f0:e3:6a:8e:99:94:98:5d:
84:5b:9a:d1:70:7e:83:b2:db:bb:a1:22:d3:63:74:
6c:c3:9c:2f:d0:c9:71:16:39:ec:2e:b1:e4:67:4e:
28:b9:4e:2f:9b:18:f5:4a:f0:18:aa:c0:73:af:07:
99:ea:d6:56:db:26:46:82:79:d0:6f:cf:7d:28:ba:
96:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D0:26:91:D1:D2:0C:3B:0E:AA:83:91:A2:FF:D2:31:49:84:57:36
X509v3 Authority Key Identifier:
keyid:49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8c:60:30:c0:75:99:df:53:b2:ef:40:d6:c7:27:49:b0:52:
c6:f3:8a:c0:98:b0:98:e8:d1:0d:d4:44:d0:09:5e:c5:53:e7:
8e:4d:b7:8b:a3:7b:ba:49:8c:ed:d4:11:2b:7e:52:71:4f:13:
ba:4c:66:38:17:38:81:75:fd:39:b6:dc:12:a8:cf:1d:84:a8:
e8:14:1b:30:ae:dd:43:d6:21:71:34:22:05:4a:aa:d7:a2:40:
b6:9f:e9:59:62:2d:06:3e:6c:81:74:96:85:93:9c:10:ca:04:
bc:c6:15:e7:38:7a:ae:12:b9:40:d8:4d:cd:04:99:9d:e3:6a:
2f:b5:52:89:41:0f:29:40:84:ac:c3:aa:4e:94:dd:2c:0c:ad:
29:b1:47:a8:46:b0:6a:6e:62:5f:6c:38:14:82:30:38:c9:d9:
a2:86:89:3f:a6:7d:a1:11:6a:81:97:76:45:26:fa:42:5e:e8:
6c:f6:a3:11:17:8c:bd:0d:b2:cf:3c:c0:52:09:53:aa:50:43:
7a:28:96:40:fd:d6:af:b2:ce:89:9d:55:1b:14:f1:60:5d:8c:
6c:3b:9a:34:5f:97:22:62:7f:b6:11:16:07:46:fb:ee:ce:76:
1c:ed:d6:ec:3a:2c:7d:7f:43:a6:09:b6:93:3c:25:bf:11:82:
46:75:9f:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftgIVs6x0rvARCBAl7PQSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NGQwZWFmODAyNTBhYjgyNDg5ODliZTcxYTQwMzk3MThk
NjkzNWEwHhcNMjYwNTEzMDUwMTIyWhcNMjYwNTE0MDUwMTIyWjAzMTEwLwYDVQQD
EygzMGQwMjY5MWQxZDIwYzNiMGVhYTgzOTFhMmZmZDIzMTQ5ODQ1NzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VzlqbdKMsl7m3IJqcS9xOhzFQlj
xoaLgoXtupjiLvNmd1bpbIJEFLOxR40xuZhdMJ7j8vr7RedQX7sZxGLyMHjejzEJ
XYPa/m0k1TYrI0YrXX1xOjXPP4v9YvRAqrw+kgOqtZjuANZEK0WGEXjl+YH57DAD
7UyiCeAVvef26RMI6pBxsCZC4/71Bs8Jusev6wjcv3k4TDJm8DVXzDHBx2cuhS8O
3ulL9iwiCDBe9L1+9ZDkxbTlb38h8ONqjpmUmF2EW5rRcH6Dstu7oSLTY3Rsw5wv
0MlxFjnsLrHkZ04ouU4vmxj1SvAYqsBzrweZ6tZW2yZGgnnQb899KLqW/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDQJpHR0gw7DqqDkaL/0jFJhFc2MB8GA1UdIwQY
MBaAFElNDq+AJQq4JImJvnGkA5cY1pNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1UwT3I0QWxDcmdraVltLWNhUURseGpXazFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jODg1NTUtYWJiNy00YjEwLWFiNjQt
MTljNTQyN2U0MTZmLzEvU1UwT3I0QWxDcmdraVltLWNhUURseGpXazFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jODg1NTUtYWJiNy00YjEwLWFiNjQtMTljNTQyN2U0MTZm
LzEvU1UwT3I0QWxDcmdraVltLWNhUURseGpXazFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIxgMMB1
md9Tsu9A1scnSbBSxvOKwJiwmOjRDdRE0AlexVPnjk23i6N7ukmM7dQRK35ScU8T
ukxmOBc4gXX9ObbcEqjPHYSo6BQbMK7dQ9YhcTQiBUqq16JAtp/pWWItBj5sgXSW
hZOcEMoEvMYV5zh6rhK5QNhNzQSZneNqL7VSiUEPKUCErMOqTpTdLAytKbFHqEaw
am5iX2w4FIIwOMnZooaJP6Z9oRFqgZd2RSb6Ql7obPajEReMvQ2yzzzAUglTqlBD
eiiWQP3Wr7LOiZ1VGxTxYF2MbDuaNF+XImJ/thEWB0b77s52HO3W7DosfX9Dpgm2
kzwlvxGCRnWfZA==
-----END CERTIFICATE-----
Generated at Wed May 13 12:49:46 2026 by rpki-client