Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
File: SUKa2sRAwGNzIEXa68w9kVLjXLs.mft (raw, json)
Hash identifier: FwCmoin8S755m1SzTFZyyc8ghjTyroIMa6PPaHZNayY=
Subject key identifier: D5:7F:15:F7:29:31:32:05:DF:50:05:FC:FD:C9:3E:9A:EC:27:AC:40
Authority key identifier: 49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
Certificate issuer: /CN=49429adac440c063732045daebcc3d9152e35cbb
Certificate serial: 019F94378E2F8EC52E59554F9559FBC2722C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
Manifest number: 0972
Signing time: Fri 24 Jul 2026 13:01:36 +0000
Manifest this update: Fri 24 Jul 2026 13:01:36 +0000
Manifest next update: Sat 25 Jul 2026 13:01:36 +0000
Files and hashes: 1: SUKa2sRAwGNzIEXa68w9kVLjXLs.crl (hash: ec+/u8Lcl7qq/5xKvVfAopMNzJaZrMYD5yplWA6PHBQ=)
2: y3bvy_33tu5eNo5dntWwgBiVOKM.roa (hash: 0jBLusOYMXpJ9g0mg0/UmdwotUwhOWWhPW6bnD34ATs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:8e:2f:8e:c5:2e:59:55:4f:95:59:fb:c2:72:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49429adac440c063732045daebcc3d9152e35cbb
Validity
Not Before: Jul 24 13:01:36 2026 GMT
Not After : Jul 25 13:01:36 2026 GMT
Subject: CN=d57f15f729313205df5005fcfdc93e9aec27ac40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:84:d1:0c:33:bc:26:53:35:a8:ad:a1:6b:
91:3f:be:b4:e6:94:b6:e5:e0:75:c7:84:e2:7a:85:
9e:14:32:e4:14:88:03:ee:fb:78:aa:52:82:07:40:
b6:4e:b9:f5:de:56:b5:a8:b7:4e:1c:3a:c6:01:96:
fd:0a:1f:ea:cc:6f:31:c4:e2:e6:06:2a:65:04:77:
d8:e2:a0:c1:ec:e4:ac:c4:48:27:fe:fe:9f:5d:c4:
b7:58:de:99:d3:38:e4:c1:1e:d3:84:b8:52:39:2b:
e7:40:45:1c:2a:d2:68:9f:30:d9:49:87:1a:5b:5e:
b3:fa:c3:be:ef:12:6a:c0:c0:23:2f:5e:a4:56:2c:
58:bc:4f:00:f6:26:59:86:1a:7c:35:d0:f8:3d:13:
33:f3:8e:70:a9:ba:1c:87:10:cd:88:5b:5b:e4:78:
d3:e7:63:da:9b:bf:52:cd:53:ca:a4:3d:21:b8:9b:
77:7a:cc:3f:1f:bd:62:1a:9f:32:d6:8a:69:bf:2c:
39:7e:ef:56:39:80:6e:c1:fd:ee:96:a1:15:54:3e:
19:c2:1b:bb:43:71:a6:47:6b:62:08:97:e6:c1:2f:
db:92:ab:19:9f:81:f1:29:4f:49:bc:45:1e:8b:d4:
ec:02:63:e8:c0:a3:00:be:85:24:7c:fa:c5:04:bb:
3d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7F:15:F7:29:31:32:05:DF:50:05:FC:FD:C9:3E:9A:EC:27:AC:40
X509v3 Authority Key Identifier:
keyid:49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f2:82:22:5f:7b:41:d9:6d:96:6b:9e:83:fe:25:86:b1:a6:
6a:00:e8:f6:84:a6:2e:c0:e7:5f:f3:4d:89:cd:29:c6:a1:dd:
1e:06:6b:ba:5e:fb:59:a6:56:df:40:e1:2c:67:e8:7f:7b:b6:
bc:13:86:6a:d7:37:b6:0b:c9:2e:cd:15:55:46:0b:1a:46:dd:
cc:1d:aa:0b:0a:1b:13:c9:37:e8:0d:3c:f8:fd:fb:79:0c:16:
39:ab:77:a1:61:85:7a:43:9c:0d:98:ab:da:6d:51:d6:bb:8d:
81:83:df:e5:f8:e9:ea:0d:77:15:2e:dd:b8:78:b0:59:dc:ba:
25:18:74:fb:3b:12:62:66:e7:b7:a8:cf:59:fa:46:4c:92:19:
3b:74:a4:68:db:9e:dc:b8:c8:83:83:63:05:7e:e0:33:cf:07:
35:39:60:23:aa:18:94:a1:97:34:00:ca:29:a0:54:b6:25:cd:
ee:c6:af:ee:a0:7b:82:20:46:92:a0:30:17:b7:5e:3f:4f:16:
a3:9a:ab:75:c1:33:45:4c:88:25:a1:93:9a:b7:fe:76:b1:47:
50:f4:fb:e3:ff:25:81:bb:c8:fe:3d:07:10:9d:4f:48:ee:7a:
fb:ec:51:b0:61:22:dc:9b:2f:78:ba:94:68:dc:7a:ba:c7:30:
6e:3a:4c:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UN44vjsUuWVVPlVn7wnIsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NDI5YWRhYzQ0MGMwNjM3MzIwNDVkYWViY2MzZDkxNTJl
MzVjYmIwHhcNMjYwNzI0MTMwMTM2WhcNMjYwNzI1MTMwMTM2WjAzMTEwLwYDVQQD
EyhkNTdmMTVmNzI5MzEzMjA1ZGY1MDA1ZmNmZGM5M2U5YWVjMjdhYzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjGE0QwzvCZTNaitoWuRP7605pS2
5eB1x4TieoWeFDLkFIgD7vt4qlKCB0C2Trn13la1qLdOHDrGAZb9Ch/qzG8xxOLm
BiplBHfY4qDB7OSsxEgn/v6fXcS3WN6Z0zjkwR7ThLhSOSvnQEUcKtJonzDZSYca
W16z+sO+7xJqwMAjL16kVixYvE8A9iZZhhp8NdD4PRMz845wqbochxDNiFtb5HjT
52Pam79SzVPKpD0huJt3esw/H71iGp8y1oppvyw5fu9WOYBuwf3ulqEVVD4Zwhu7
Q3GmR2tiCJfmwS/bkqsZn4HxKU9JvEUei9TsAmPowKMAvoUkfPrFBLs9gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNV/FfcpMTIF31AF/P3JPprsJ6xAMB8GA1UdIwQY
MBaAFElCmtrEQMBjcyBF2uvMPZFS41y7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1VLYTJzUkF3R056SUVYYTY4dzlrVkxqWExzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS80ODA4ZDctOGVmYi00MjE5LThmZTMt
ZWE5NDVkNjA0YjBlLzEvU1VLYTJzUkF3R056SUVYYTY4dzlrVkxqWExzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS80ODA4ZDctOGVmYi00MjE5LThmZTMtZWE5NDVkNjA0YjBl
LzEvU1VLYTJzUkF3R056SUVYYTY4dzlrVkxqWExzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvKCIl97
Qdltlmueg/4lhrGmagDo9oSmLsDnX/NNic0pxqHdHgZrul77WaZW30DhLGfof3u2
vBOGatc3tgvJLs0VVUYLGkbdzB2qCwobE8k36A08+P37eQwWOat3oWGFekOcDZir
2m1R1ruNgYPf5fjp6g13FS7duHiwWdy6JRh0+zsSYmbnt6jPWfpGTJIZO3SkaNue
3LjIg4NjBX7gM88HNTlgI6oYlKGXNADKKaBUtiXN7sav7qB7giBGkqAwF7deP08W
o5qrdcEzRUyIJaGTmrf+drFHUPT74/8lgbvI/j0HEJ1PSO56++xRsGEi3JsveLqU
aNx6uscwbjpMwg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:29 2026 by rpki-client