Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
File: SUKa2sRAwGNzIEXa68w9kVLjXLs.mft (raw, json)
Hash identifier: NUthZRuKbOvEHlJ7hE/Lisu3zwXybgPzTRMux1VXQ48=
Subject key identifier: 5E:25:C9:AA:BA:77:D8:E5:CF:6F:8A:BB:9F:A1:DF:66:0C:9A:B5:19
Authority key identifier: 49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
Certificate issuer: /CN=49429adac440c063732045daebcc3d9152e35cbb
Certificate serial: 019D284D5589EE5F3F16ADF4A5E0CC81ACBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
Manifest number: 0831
Signing time: Thu 26 Mar 2026 04:00:49 +0000
Manifest this update: Thu 26 Mar 2026 04:00:49 +0000
Manifest next update: Fri 27 Mar 2026 04:00:49 +0000
Files and hashes: 1: SUKa2sRAwGNzIEXa68w9kVLjXLs.crl (hash: l9mx+MqRbM+Js/XWAx19pXJV/Q5uLEobtnL5IPpMA6c=)
2: y3bvy_33tu5eNo5dntWwgBiVOKM.roa (hash: 0jBLusOYMXpJ9g0mg0/UmdwotUwhOWWhPW6bnD34ATs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:55:89:ee:5f:3f:16:ad:f4:a5:e0:cc:81:ac:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49429adac440c063732045daebcc3d9152e35cbb
Validity
Not Before: Mar 26 04:00:49 2026 GMT
Not After : Mar 27 04:00:49 2026 GMT
Subject: CN=5e25c9aaba77d8e5cf6f8abb9fa1df660c9ab519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:c2:28:29:58:3a:22:59:99:f0:8b:16:a4:
48:88:1f:c1:ef:66:f7:e2:a5:ce:2a:8d:9e:93:b2:
5a:83:fa:04:e7:64:1f:a8:c6:77:e9:88:39:6f:dc:
4c:c8:08:0c:67:c8:38:02:85:80:45:2d:cb:0a:21:
30:60:7f:03:f3:d0:30:c8:75:21:a3:2c:eb:35:5e:
e2:c6:19:c2:28:3d:e7:63:6b:f6:ce:83:3c:e0:ae:
72:3e:4c:9d:fa:16:ce:a7:87:17:33:96:97:90:e6:
c6:f1:ac:03:86:c3:28:ad:0a:35:43:cd:d1:bf:da:
1b:95:0c:22:43:e9:aa:cc:53:d6:90:3e:4f:ff:09:
f8:79:09:9b:98:09:7c:de:e3:3c:b1:63:12:9f:80:
5a:57:44:6e:f4:bd:65:d4:04:5f:26:c0:1f:6b:ca:
a9:f1:ce:00:3a:e4:d3:19:b6:4b:6f:8f:fa:c8:2a:
83:29:ac:2b:91:18:27:1d:fb:11:ec:58:fb:dc:f9:
51:e2:5a:93:41:e4:d8:c4:cd:50:8d:dd:01:94:db:
4a:d2:63:5a:98:65:cd:51:39:78:b7:6b:34:6f:6b:
6e:de:e9:80:d6:18:ff:3f:79:57:95:b4:0c:28:38:
bf:d0:0d:49:2e:8e:4f:8d:a5:97:ec:8b:b1:09:7f:
4e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:25:C9:AA:BA:77:D8:E5:CF:6F:8A:BB:9F:A1:DF:66:0C:9A:B5:19
X509v3 Authority Key Identifier:
keyid:49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1e:de:4c:d5:47:9c:29:c6:b4:87:1a:20:c1:04:15:29:26:
df:50:21:cd:d6:e5:a4:86:24:4c:78:81:03:97:7e:13:66:05:
45:38:79:49:6e:2b:db:e5:69:00:58:b7:e9:68:0b:b5:df:2a:
13:d9:14:11:65:dc:a3:a2:5d:d3:57:70:6d:6f:4c:c2:6d:d6:
92:f9:e0:12:7d:00:09:93:e6:3f:d8:19:b0:05:62:03:e4:a7:
2a:e1:f3:6d:36:9c:0a:4f:46:96:ce:f3:5d:0a:86:63:db:1f:
01:7a:00:b3:89:40:90:e5:82:c0:28:d4:d3:22:f8:e8:a6:16:
a5:57:74:e0:ce:5d:13:dc:67:9c:7a:72:34:8a:13:42:27:f6:
6e:57:08:9e:fd:c4:af:14:40:23:cb:d8:f9:18:d1:e4:d8:13:
1b:4f:e8:9d:ef:05:8a:3f:85:a4:ac:ad:aa:88:cb:ea:00:87:
0b:df:ce:a4:77:bf:78:a1:dd:48:a6:cd:0e:6a:4f:49:df:90:
78:2a:86:6f:d9:8f:4e:a4:94:41:f5:4d:43:ea:46:65:ff:81:
d1:53:b4:8f:36:92:61:ae:d3:ee:2c:10:ec:aa:53:d5:fa:5a:
50:fc:bc:c3:cc:20:df:2e:1d:1a:d4:4d:99:2c:6d:b3:41:71:
57:a5:cc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:05 2026 by rpki-client