Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
File: SujQiQnRha9B0KDDvl6ijDUvAiY.mft (raw, json)
Hash identifier: 5UFCY7reIUa0g/bd3t1fP3ODu9FeykralMwdz0ZCDYk=
Subject key identifier: 1B:B4:0F:93:11:2C:78:E5:6C:51:12:B4:F8:01:CA:FB:F7:2A:5B:1F
Authority key identifier: 4A:E8:D0:89:09:D1:85:AF:41:D0:A0:C3:BE:5E:A2:8C:35:2F:02:26
Certificate issuer: /CN=4ae8d08909d185af41d0a0c3be5ea28c352f0226
Certificate serial: 019D2AA9276B9B4BCFA2CE496A94CA2FD7F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
Manifest number: 1707
Signing time: Thu 26 Mar 2026 15:00:21 +0000
Manifest this update: Thu 26 Mar 2026 15:00:21 +0000
Manifest next update: Fri 27 Mar 2026 15:00:21 +0000
Files and hashes: 1: SujQiQnRha9B0KDDvl6ijDUvAiY.crl (hash: WA5+/LxxGUEcb/NN1yEalXKazQTBVnIbcPQnpOF2N7Q=)
2: _kIyn54Kwl02SBVsVFIcVuZztFA.roa (hash: 72qRo50GT69ynWH6rCDwF6eh8ixb9QAqQtQqlDICbx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:27:6b:9b:4b:cf:a2:ce:49:6a:94:ca:2f:d7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ae8d08909d185af41d0a0c3be5ea28c352f0226
Validity
Not Before: Mar 26 15:00:21 2026 GMT
Not After : Mar 27 15:00:21 2026 GMT
Subject: CN=1bb40f93112c78e56c5112b4f801cafbf72a5b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:80:5a:d5:21:7d:df:e1:55:bc:60:34:19:93:
ed:f0:3c:cc:df:73:ab:9e:d5:2f:41:89:ae:30:d6:
c8:a8:5e:a9:c3:03:5d:b3:18:87:6f:a9:ef:8c:0d:
ce:3e:c1:d1:22:00:a7:e0:cd:a0:54:90:16:c4:58:
e5:f0:ac:9c:b8:de:ff:c1:06:9c:e1:94:0d:d4:f4:
4b:77:22:7f:60:86:57:18:1d:ba:a0:7c:d3:9b:9e:
81:1c:dc:6f:b6:e0:83:9a:58:9c:1a:fc:5c:f9:96:
dc:fa:cf:44:97:ed:47:52:39:60:32:13:a0:c7:06:
15:b8:c3:f8:0b:31:ce:a4:ea:23:e2:f0:e6:4c:9b:
79:04:c5:ca:4e:c5:fd:f7:7e:e9:dc:0b:e1:22:be:
00:56:84:96:9e:85:1e:16:30:2b:5d:2d:aa:26:6f:
96:8e:a3:4a:39:59:05:8b:51:77:f4:7c:47:84:7d:
ea:0c:90:b8:65:15:d7:24:7e:d5:2b:5d:24:88:17:
23:37:d6:e0:73:9d:ea:d3:95:58:05:24:04:c8:51:
6c:dc:b8:bd:b9:59:11:d1:37:a6:5c:88:ca:98:99:
e1:65:01:b1:38:be:1d:0c:e6:f4:bc:fb:6f:9a:da:
8d:f3:d9:59:58:01:3a:7a:3f:c9:f2:82:93:55:3f:
b6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B4:0F:93:11:2C:78:E5:6C:51:12:B4:F8:01:CA:FB:F7:2A:5B:1F
X509v3 Authority Key Identifier:
keyid:4A:E8:D0:89:09:D1:85:AF:41:D0:A0:C3:BE:5E:A2:8C:35:2F:02:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:85:54:0a:ea:89:da:ca:b2:0e:13:7d:d6:03:1b:b5:35:8b:
17:ae:31:c1:b6:b2:2c:fb:46:c9:8c:7e:e7:00:9e:1a:a7:4b:
70:6a:2a:dc:3e:f4:ca:47:8d:b7:87:87:ad:35:b7:e6:28:f0:
4a:0e:f5:c0:4b:a9:43:3c:03:65:a8:24:62:de:29:67:18:71:
d3:79:11:f0:66:48:f7:4f:7f:6f:e7:c6:98:30:6d:d3:b5:0f:
13:6d:74:e4:51:4c:b9:c9:15:6a:0d:8c:b1:de:bb:43:d8:17:
e3:e2:ec:bf:b4:73:55:68:f8:0c:62:fa:f8:b3:9a:97:85:84:
e0:f6:63:02:5b:d1:24:fe:d2:1d:3f:9e:f5:8f:84:39:2d:f8:
fb:30:7b:0c:e8:09:b4:6e:ac:1f:54:b0:88:ea:e6:54:ef:dd:
a0:b6:01:26:dd:49:8f:7d:05:bc:40:65:07:1e:46:78:3a:f2:
55:f5:7d:b3:62:92:89:ab:5a:fc:64:1c:69:70:92:a6:14:91:
d3:b0:69:3b:bb:34:17:29:33:2d:87:0e:6a:2d:f2:68:c8:99:
f5:1a:9b:45:19:40:96:18:e8:b6:bc:a5:17:84:6b:7f:aa:b4:
43:e6:b8:85:15:70:97:d4:d2:9f:bf:9c:2f:88:fa:67:e5:93:
99:a1:8d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:18 2026 by rpki-client