Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
File: Su_P7VH_FY--aMzWC3s5vl8-riA.mft (raw, json)
Hash identifier: kzaWfLQDbXsFENele860vScSKNae3GwOReEZffgPVy0=
Subject key identifier: AA:9A:C6:98:38:AD:B3:BD:CA:44:4A:A7:35:D8:5A:4E:C4:1E:46:84
Authority key identifier: 4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
Certificate issuer: /CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Certificate serial: 019D265F7539E3035097DD6C2022164861E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:01:23 +0000
Manifest this update: Wed 25 Mar 2026 19:01:23 +0000
Manifest next update: Thu 26 Mar 2026 19:01:23 +0000
Files and hashes: 1: KUDAYGIsT3CXoWuYxHO7vusuZwM.roa (hash: 04pcVXnvwMaNPBLFWogLi25UblwMiRGuELwew3PlXfA=)
2: Su_P7VH_FY--aMzWC3s5vl8-riA.crl (hash: T4wC+DE97JR8WuH1jIB7djKJsjK921BA6ZoukfZM0T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:75:39:e3:03:50:97:dd:6c:20:22:16:48:61:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Validity
Not Before: Mar 25 19:01:23 2026 GMT
Not After : Mar 26 19:01:23 2026 GMT
Subject: CN=aa9ac69838adb3bdca444aa735d85a4ec41e4684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:06:6e:a3:4d:18:b3:31:9e:20:ca:f9:4a:
2f:3c:83:ec:da:4a:0c:a0:05:68:92:c0:41:17:51:
cc:99:a8:db:2d:99:86:de:24:47:45:3c:5c:5a:45:
e0:dc:10:76:17:ff:75:70:3d:ac:9d:b5:86:17:94:
8c:51:17:bb:98:eb:79:bb:9b:80:22:f7:9e:97:e8:
71:9d:31:88:fb:41:87:ff:ae:3a:3e:ee:81:4b:75:
d0:fc:56:50:37:10:e3:ec:18:70:33:71:5d:ed:31:
83:a3:33:bb:20:b0:4f:3c:71:86:7b:a8:80:21:6c:
2f:63:a3:9e:8d:21:eb:26:1a:79:9e:56:a3:d8:a4:
d7:fa:3c:f4:6b:95:4c:d4:f6:5c:5c:07:ee:d9:6c:
06:bf:0b:5f:f0:ad:a5:5b:98:45:32:c5:73:55:31:
91:81:93:97:53:b2:cc:0d:fb:f8:31:12:33:fb:e0:
2b:f0:27:c1:60:44:d2:3d:2e:3d:ac:85:5f:b8:f5:
73:a6:98:0d:da:ce:f8:31:14:e8:c9:98:74:85:1b:
01:00:ab:90:d4:ec:7a:53:7a:62:26:74:ef:74:a6:
6d:7c:bd:cd:7c:04:ca:77:94:89:6c:4e:63:60:c2:
fd:97:09:2f:60:86:40:8b:9e:95:df:06:ee:0b:c6:
7d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9A:C6:98:38:AD:B3:BD:CA:44:4A:A7:35:D8:5A:4E:C4:1E:46:84
X509v3 Authority Key Identifier:
keyid:4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3b:50:55:36:e0:67:e6:27:df:8b:7f:d6:23:dc:cf:79:a1:
71:31:cd:d4:df:d2:a0:ca:a4:39:05:45:43:b7:42:1e:ac:6e:
ee:26:4f:3a:e8:9a:81:96:c0:d9:09:a0:cd:1c:86:ca:16:23:
92:8d:7d:3f:08:00:e5:24:72:42:54:21:63:4d:d6:39:ae:9f:
61:f9:8f:26:7c:b8:18:b0:02:3a:5c:5a:c9:43:8c:35:37:fe:
66:83:be:e6:a4:be:ca:3e:45:eb:f3:f9:4f:a5:30:88:0e:c1:
82:2a:75:f9:aa:be:81:77:d2:e3:9c:31:d0:c4:e6:61:d5:32:
b1:4d:f5:35:3d:e9:71:9f:37:f5:87:fc:13:ab:47:a8:3e:ed:
a2:4f:31:9f:a8:2b:54:7a:9c:46:dc:5c:a4:10:d9:7c:a3:2e:
43:d4:ea:f0:82:2d:fc:ce:f1:1e:9a:0a:0c:d5:78:3a:20:b5:
4e:fd:6b:e8:06:fa:08:6e:a0:ed:4c:78:74:f0:14:a9:2f:c3:
a0:41:6b:aa:c0:bc:9c:46:2b:20:90:1b:41:6c:f0:9f:7a:fb:
3e:02:9b:d2:a4:54:0b:8c:cc:31:04:83:e6:46:46:fe:a4:c6:
e0:7d:61:69:08:72:8f:6f:ec:f5:f3:43:5e:82:03:64:1a:6c:
f1:0e:1e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:14 2026 by rpki-client