Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
File: SUKa2sRAwGNzIEXa68w9kVLjXLs.mft (raw, json)
Hash identifier: +4WRQ1hd93oVHIw3t7auCOvqwHEOKkWrC4E4NWjDDPI=
Subject key identifier: EE:E6:04:C2:FC:3D:45:09:04:DB:9B:86:A1:16:DF:36:18:FA:53:0C
Authority key identifier: 49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
Certificate issuer: /CN=49429adac440c063732045daebcc3d9152e35cbb
Certificate serial: 01A0E0617BF53BD36AD3254D2C59C7854731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
Manifest number: 0A1E
Signing time: Sun 27 Sep 2026 01:01:20 +0000
Manifest this update: Sun 27 Sep 2026 01:01:20 +0000
Manifest next update: Mon 28 Sep 2026 01:01:20 +0000
Files and hashes: 1: SUKa2sRAwGNzIEXa68w9kVLjXLs.crl (hash: 1HhkiTOOjsQ0B+t7h2uDBwqoQ9U2yHLvia5ZyR1R98k=)
2: y3bvy_33tu5eNo5dntWwgBiVOKM.roa (hash: 0jBLusOYMXpJ9g0mg0/UmdwotUwhOWWhPW6bnD34ATs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:7b:f5:3b:d3:6a:d3:25:4d:2c:59:c7:85:47:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49429adac440c063732045daebcc3d9152e35cbb
Validity
Not Before: Sep 27 01:01:20 2026 GMT
Not After : Sep 28 01:01:20 2026 GMT
Subject: CN=eee604c2fc3d450904db9b86a116df3618fa530c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e0:b3:1b:da:07:19:18:2e:16:69:90:e7:f9:
e0:c8:35:4f:38:bd:99:91:f1:af:6d:02:7b:7f:71:
40:43:97:4e:58:12:02:3c:0e:dc:1f:46:5b:9a:8e:
e7:84:f2:18:fc:c0:ad:b7:a8:18:fc:52:a7:81:52:
1f:a9:82:80:d7:20:be:f6:04:25:40:05:e2:46:e2:
3c:72:20:23:b7:34:60:78:a7:a4:d9:21:65:62:5d:
23:44:cd:6e:ce:ee:b2:3c:59:bb:c7:94:4a:d6:a5:
91:e1:8a:0c:8a:07:0f:68:22:14:ab:3b:5e:d7:39:
df:50:3f:5f:49:9e:81:39:33:b0:5b:5f:34:5c:f1:
26:45:e4:9e:37:b5:3a:e8:2e:27:32:17:2d:bf:63:
a6:01:7c:40:64:7a:5c:4c:7f:e4:52:7c:8b:49:f0:
e5:69:cf:e3:fa:44:78:b8:1b:7e:55:ad:37:22:ee:
cc:c2:1a:b0:3a:7e:71:3d:e5:2f:8b:e6:58:31:5b:
6e:9c:71:20:66:60:c6:b6:4a:4f:7f:53:5b:f9:7d:
ae:c6:48:67:02:c8:46:f4:80:7b:1c:f8:20:c9:d6:
34:7e:7b:dc:79:c5:6e:6d:a4:4e:a4:28:a5:a6:ae:
3d:39:37:eb:d2:9f:9f:6e:39:fe:ba:7a:4f:27:49:
9f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E6:04:C2:FC:3D:45:09:04:DB:9B:86:A1:16:DF:36:18:FA:53:0C
X509v3 Authority Key Identifier:
keyid:49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:0c:55:da:00:9e:d2:65:f6:aa:41:13:6a:53:03:b0:69:2d:
ae:45:44:9b:6a:17:87:2f:ab:03:ae:17:7f:a2:38:a0:b9:15:
91:62:f1:33:9b:1d:29:02:2e:a8:5e:9f:63:3c:08:78:df:bc:
d4:53:98:c7:29:93:0d:ea:11:0c:87:61:be:af:2b:9d:8f:8a:
ef:0e:61:51:1f:a9:93:a8:b0:27:aa:8b:5b:7e:14:56:dc:ae:
08:2a:2e:68:8d:bb:17:76:f3:ff:07:57:58:dc:35:f5:ff:6a:
a1:89:b3:ca:2e:67:4b:0c:50:d2:cf:45:d4:f0:d9:5b:53:b2:
bc:15:b4:4c:45:cc:94:f1:9a:61:ce:2a:fe:47:90:ec:82:01:
62:5d:02:7a:80:20:f3:24:96:1c:b7:50:82:e6:2f:40:fd:1a:
28:4f:85:50:b9:5d:e2:f1:6e:34:6c:a9:63:c5:42:59:10:6c:
48:0b:14:39:1f:a7:1b:1a:c4:1e:66:d9:dd:34:20:88:87:62:
c0:51:ea:89:be:c2:36:ba:ff:54:82:b6:c8:a2:51:52:d3:8d:
66:d0:7b:34:55:e3:91:81:7c:a9:8d:c0:34:e8:58:cd:9c:75:
7e:df:d9:62:46:01:5a:b0:b1:51:9e:dd:8a:4c:5d:e4:2d:59:
9f:da:83:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:51:15 2026 by rpki-client