Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/950a20-599a-4e78-998c-a769db907bf4/1/suXMb3FVOXdgDMQRu-uYjRZjHnU.mft
File: suXMb3FVOXdgDMQRu-uYjRZjHnU.mft (raw, json)
Hash identifier: IyqYvZMlwFav8adDRzc6gtNBU/8LAYUVlB5d/Qd0oO8=
Subject key identifier: 9F:F1:DB:C3:09:04:B6:7B:2A:26:75:78:38:82:EA:DD:2A:DE:48:72
Authority key identifier: B2:E5:CC:6F:71:55:39:77:60:0C:C4:11:BB:EB:98:8D:16:63:1E:75
Certificate issuer: /CN=b2e5cc6f71553977600cc411bbeb988d16631e75
Certificate serial: 01A0F00B888D03C2542A8CA9BAA2A7D9D7CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suXMb3FVOXdgDMQRu-uYjRZjHnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/950a20-599a-4e78-998c-a769db907bf4/1/suXMb3FVOXdgDMQRu-uYjRZjHnU.mft
Manifest number: 4E
Signing time: Wed 30 Sep 2026 02:01:22 +0000
Manifest this update: Wed 30 Sep 2026 02:01:22 +0000
Manifest next update: Thu 01 Oct 2026 02:01:22 +0000
Files and hashes: 1: suXMb3FVOXdgDMQRu-uYjRZjHnU.crl (hash: vQ3g4L0HWmAauy2vYq/2St4c++z3FKkcq4nO3Bao4e0=)
2: x4cPD1EJXBWEbFTeeGp8lHvzP6s.roa (hash: 1c7bHKSm2FryEiD26IsKwnBSp5MMVBFvGXNakIgfTYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/950a20-599a-4e78-998c-a769db907bf4/1/suXMb3FVOXdgDMQRu-uYjRZjHnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/950a20-599a-4e78-998c-a769db907bf4/1/suXMb3FVOXdgDMQRu-uYjRZjHnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/suXMb3FVOXdgDMQRu-uYjRZjHnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:0b:88:8d:03:c2:54:2a:8c:a9:ba:a2:a7:d9:d7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e5cc6f71553977600cc411bbeb988d16631e75
Validity
Not Before: Sep 30 02:01:22 2026 GMT
Not After : Oct 1 02:01:22 2026 GMT
Subject: CN=9ff1dbc30904b67b2a2675783882eadd2ade4872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b3:67:4d:c2:70:c8:d8:36:b2:56:15:5b:44:
4e:52:5a:a5:cd:96:2c:2a:e6:b0:53:f4:14:34:57:
4e:0c:5a:a4:ff:e8:69:f4:c9:3b:63:84:86:61:20:
c3:cf:10:ed:f4:4d:47:b3:f5:f6:7c:a4:43:3f:80:
a2:fd:ca:9a:9c:cc:39:6e:6d:e3:70:47:0b:ef:b9:
5d:74:bf:dc:5a:80:77:d3:b5:30:6c:a2:88:01:90:
fa:46:e8:19:f6:0a:14:51:b3:96:0e:0f:47:e1:7a:
ca:ce:12:f6:b6:39:a1:c6:83:07:ba:02:ae:55:4e:
3a:f4:bd:50:9e:70:dd:5f:2a:3f:08:ea:8c:04:a3:
f7:1d:10:47:cb:9b:8e:55:86:2f:8f:f9:56:15:e7:
93:b4:81:96:fa:a4:16:58:37:90:1a:77:a2:3d:70:
e6:a0:24:64:88:d2:e7:40:76:32:a7:72:19:ad:16:
0f:f8:9b:fa:f7:58:85:01:f6:43:ba:45:c7:04:1d:
a7:a9:91:54:39:9c:7b:e3:0a:1f:d0:08:56:8d:5f:
12:0b:d7:c5:61:b3:b1:32:33:d8:cf:38:77:8b:9c:
fd:82:9c:c2:68:24:e2:36:b0:96:35:07:e5:9a:b3:
6f:9a:4d:e1:b8:46:5c:d7:c9:da:53:34:83:88:18:
bf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F1:DB:C3:09:04:B6:7B:2A:26:75:78:38:82:EA:DD:2A:DE:48:72
X509v3 Authority Key Identifier:
keyid:B2:E5:CC:6F:71:55:39:77:60:0C:C4:11:BB:EB:98:8D:16:63:1E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suXMb3FVOXdgDMQRu-uYjRZjHnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/950a20-599a-4e78-998c-a769db907bf4/1/suXMb3FVOXdgDMQRu-uYjRZjHnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/950a20-599a-4e78-998c-a769db907bf4/1/suXMb3FVOXdgDMQRu-uYjRZjHnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:04:c8:9e:5e:bc:14:2a:bd:cc:a4:67:a3:c7:0a:bf:cf:46:
e3:14:8d:b3:eb:55:e0:fe:5a:5a:9e:a7:07:fb:26:47:18:4a:
7e:c6:70:35:98:ab:99:52:30:92:b8:68:aa:8c:5f:95:b1:5b:
19:b0:b6:2f:6e:44:58:88:64:43:30:ae:e5:b9:5c:58:6e:21:
a1:cf:c2:e1:18:9c:04:7b:8a:63:d1:16:d7:d6:c8:0a:eb:55:
78:93:4c:b1:0a:bc:74:8a:0a:a7:b0:59:f6:7a:e4:e0:cd:0f:
2e:30:1c:ed:49:50:6a:63:3f:ca:08:4a:eb:47:5b:21:36:40:
87:db:ce:e7:70:44:8d:22:56:49:e5:1f:0e:89:86:cc:f4:eb:
34:63:ff:54:2a:56:48:4c:d6:8d:92:93:98:c4:1f:ea:53:06:
03:27:5c:e4:1e:ed:15:38:d3:7b:16:ee:b0:81:a8:64:41:22:
eb:e1:89:9c:4f:e7:dc:ed:ad:0a:e5:1a:19:34:6e:9e:9a:2d:
57:f2:31:e1:e2:d0:be:97:5c:17:95:4b:79:6d:ec:33:50:dc:
69:8a:b8:26:f6:13:45:b6:bd:bf:9a:b0:b5:1a:df:11:70:63:
a5:52:c4:49:bc:db:e1:89:20:b6:c2:07:d8:79:52:6b:2c:5f:
74:fb:d4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 10:53:17 2026 by rpki-client