Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
File: SUKa2sRAwGNzIEXa68w9kVLjXLs.mft (raw, json)
Hash identifier: ez4kVsUy4J+nfcntG/9LtxA5PGebPcbMkLuoAc6Xm5I=
Subject key identifier: 77:C7:E4:DD:3B:0A:4B:45:B3:ED:FD:2E:5C:23:57:23:8D:C8:C8:72
Authority key identifier: 49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
Certificate issuer: /CN=49429adac440c063732045daebcc3d9152e35cbb
Certificate serial: 019E1D911E1001FC39F468164661E6A5F573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
Manifest number: 08B0
Signing time: Tue 12 May 2026 19:01:50 +0000
Manifest this update: Tue 12 May 2026 19:01:50 +0000
Manifest next update: Wed 13 May 2026 19:01:50 +0000
Files and hashes: 1: SUKa2sRAwGNzIEXa68w9kVLjXLs.crl (hash: 8+6ymxLoP7TsSVOfPVbbn6NepaqDqNNBA3lFHUj2icg=)
2: y3bvy_33tu5eNo5dntWwgBiVOKM.roa (hash: 0jBLusOYMXpJ9g0mg0/UmdwotUwhOWWhPW6bnD34ATs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:1e:10:01:fc:39:f4:68:16:46:61:e6:a5:f5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49429adac440c063732045daebcc3d9152e35cbb
Validity
Not Before: May 12 19:01:50 2026 GMT
Not After : May 13 19:01:50 2026 GMT
Subject: CN=77c7e4dd3b0a4b45b3edfd2e5c2357238dc8c872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:44:fa:0e:cc:65:17:f3:df:2d:70:d2:18:88:
7b:cc:1b:9f:cb:14:d5:81:b0:eb:61:36:9a:ad:d1:
e1:b9:b6:ff:12:15:b4:c7:29:45:43:cd:7f:1b:e3:
46:47:3c:07:dd:e0:5a:41:3d:ed:c8:aa:f8:d1:c7:
ed:69:3c:7a:bb:4a:12:f0:10:7d:9b:53:09:82:00:
ae:53:04:88:38:33:98:8a:5c:50:c2:60:29:1c:af:
02:12:04:88:3b:e2:41:eb:b5:e3:6b:e0:28:62:38:
0b:fe:8c:87:c1:08:44:cb:e5:86:1c:54:9f:23:6b:
1d:4a:9f:9b:84:05:5f:1a:64:fc:16:90:06:82:de:
05:5b:c6:f8:00:0d:39:b1:a2:d5:fa:1a:8c:7f:9f:
55:b5:02:a8:d6:a8:3f:96:2e:4b:9a:9f:1f:74:76:
e8:fe:48:3f:92:ea:d5:07:2d:0b:10:b3:4f:f9:b3:
b2:3b:48:62:23:27:3d:6f:ea:fb:14:93:96:b7:6c:
b9:86:de:37:1b:00:52:05:67:2d:6d:06:34:27:f3:
c5:64:61:c2:29:a2:c7:0b:ff:0f:c7:a9:7f:d8:e2:
68:c0:a9:be:9d:52:e8:02:4c:1c:b9:23:5c:f5:0c:
2e:12:6d:89:35:11:4a:dd:a1:30:a0:ec:25:c0:cc:
c5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C7:E4:DD:3B:0A:4B:45:B3:ED:FD:2E:5C:23:57:23:8D:C8:C8:72
X509v3 Authority Key Identifier:
keyid:49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:87:43:e2:31:5d:e1:db:80:3c:9c:91:dc:ad:85:3c:db:81:
0a:74:82:84:f4:a4:a8:46:d1:0b:28:b3:67:a5:51:57:ec:16:
da:57:c5:51:8f:f1:24:e1:44:61:39:79:08:50:a4:fd:3a:66:
dd:33:40:24:33:67:f1:90:f4:81:80:65:92:32:9f:8c:e9:3f:
2a:a6:d7:ad:81:eb:48:fc:89:ba:c5:d2:0d:49:43:6b:21:d1:
ec:fa:ec:41:ea:fe:08:d6:2a:76:98:e7:60:b1:6d:2d:74:9c:
4c:09:aa:62:35:30:a5:a8:30:f6:74:e3:30:e3:b7:c6:f0:a6:
a8:51:f5:7d:15:b8:47:e2:70:59:b6:fa:92:f0:e5:96:ee:39:
8a:92:c1:61:d0:13:97:23:e8:21:51:0c:6c:c2:b8:c3:9a:d5:
61:ec:af:a0:d9:9a:08:98:cd:37:2e:61:d8:8c:67:ca:66:4d:
fa:0c:be:fe:00:e6:98:a9:94:18:94:2d:26:47:e2:87:99:cd:
e5:a1:db:57:a1:45:b8:53:47:9a:9b:c8:25:3e:a6:0d:99:dc:
80:11:4e:9f:c2:2c:89:2a:99:d3:d4:ae:92:17:f4:11:a1:14:
fb:96:f6:d4:75:1f:68:37:c6:79:72:18:78:c5:bc:23:28:1b:
43:b4:69:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:11 2026 by rpki-client