Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
File: SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft (raw, json)
Hash identifier: wqaFm5+UP+AydRBvTjr7AnVzUTEA+YZaUGaW4covwRo=
Subject key identifier: ED:CB:FD:3B:84:13:36:3C:3F:51:B9:55:4E:B7:23:82:9D:5A:4E:06
Authority key identifier: 49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
Certificate issuer: /CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Certificate serial: 019F924812D7808F9B84FA418573C61E4455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
Manifest number: 137A
Signing time: Fri 24 Jul 2026 04:00:24 +0000
Manifest this update: Fri 24 Jul 2026 04:00:24 +0000
Manifest next update: Sat 25 Jul 2026 04:00:24 +0000
Files and hashes: 1: G2qFSj-zHSZn_cR0UfWs4GFJbTA.roa (hash: LmGaxovGZ/u+AYW4AE5opwjlV2xNZIKAOEsB5GmrX1g=)
2: SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl (hash: tyap8aq4d1zisz7+sAz0L2Ss6OJ+XsujLHB4Ogi7Du0=)
3: T1xFBI_FXFj5vusDJo-pUeK0x0I.roa (hash: +8wuXinY8Xk3FyPY/iHD7k7tBAC8V4xrKKtAxVLmilA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:12:d7:80:8f:9b:84:fa:41:85:73:c6:1e:44:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Validity
Not Before: Jul 24 04:00:24 2026 GMT
Not After : Jul 25 04:00:24 2026 GMT
Subject: CN=edcbfd3b8413363c3f51b9554eb723829d5a4e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6c:00:f0:b0:76:73:7e:2c:33:7c:a3:cd:42:
74:fe:1f:53:aa:be:26:28:ce:5f:6a:79:bb:f8:88:
41:61:a4:e5:79:1e:ec:7d:c3:03:47:a9:d0:16:4b:
15:fb:fb:10:c3:11:c8:48:88:bc:10:bb:fb:89:30:
77:56:ad:c1:0b:dc:1a:d5:67:f5:d6:7d:4f:44:93:
a4:6e:ad:8c:b5:91:8c:df:3e:75:c6:62:b0:86:a2:
2b:2e:62:3b:ef:a1:79:6a:4f:e2:33:17:2f:60:9b:
71:92:e1:20:78:c1:71:11:76:25:01:52:9e:3b:e0:
34:de:90:3e:26:5e:8e:b6:62:73:3a:93:d7:02:d9:
fa:07:a9:62:82:bc:83:e6:8a:16:f6:46:5d:a8:fd:
c6:a6:38:6f:15:38:a4:cd:3c:4c:fc:93:47:1a:c9:
5d:15:dd:e6:60:b5:1e:34:d8:a0:7d:7a:30:fc:36:
8b:1d:53:02:e0:64:8e:cb:12:fc:5f:9c:8a:66:d5:
65:e9:ef:0f:8f:7f:f8:ae:00:3f:ad:b9:d9:73:ad:
f3:35:55:e6:1a:6c:14:65:3f:64:0b:e8:6d:0b:e3:
ac:13:64:d9:33:f9:5f:e4:37:28:a7:68:19:27:f7:
e9:a0:9e:65:ee:d0:52:66:e8:cf:0a:7e:56:c7:ee:
8a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CB:FD:3B:84:13:36:3C:3F:51:B9:55:4E:B7:23:82:9D:5A:4E:06
X509v3 Authority Key Identifier:
keyid:49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:73:42:17:23:73:bc:ab:bb:39:0c:f2:ce:73:93:d6:4c:76:
c0:49:b5:fa:78:44:cc:b6:37:0a:53:6e:85:09:68:e8:61:cc:
f0:2a:d1:e5:b2:28:86:90:d4:00:e1:fa:34:91:27:ee:7b:d2:
ea:fc:9b:1c:27:0b:14:50:20:da:1b:f0:ca:e0:88:84:82:a9:
4e:58:bb:ab:74:51:26:6c:5f:c8:23:89:4f:56:d6:19:cd:ce:
a2:15:48:dc:c2:06:dd:6f:4c:16:1e:39:ac:c3:2d:c9:d0:2c:
90:0d:15:66:08:f1:05:88:8f:b8:71:dc:3d:78:5c:55:30:fe:
b3:20:47:99:2f:cb:7b:60:83:3a:02:d0:82:be:be:7f:15:04:
c8:be:e7:c9:f4:ca:4e:39:35:6a:85:d9:c8:ad:b6:61:95:5d:
4d:95:3c:24:e4:42:d0:02:0c:87:fb:9f:a9:80:4e:fa:65:0c:
3c:50:02:ef:77:63:93:df:d7:1b:9b:b7:dd:38:0b:cd:c9:af:
7c:ee:2a:df:f8:57:73:df:e5:dd:8f:8c:cc:c1:6f:ac:82:f1:
90:cc:c8:14:e2:71:de:ee:6c:1a:e1:57:9c:5c:89:51:90:21:
4b:de:97:50:70:5f:14:59:3c:96:87:07:5c:cd:d1:1d:c0:f6:
e3:1e:11:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:06:42 2026 by rpki-client