Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
File: SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft (raw, json)
Hash identifier: kXFpRkRkuuKEOn4eoKFQdRgH4fLb3UljCBW1kMuv6Fc=
Subject key identifier: F6:C8:E7:A2:68:D7:32:90:C7:78:FC:60:81:94:CF:94:91:C4:95:52
Authority key identifier: 49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
Certificate issuer: /CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Certificate serial: 019D265ECA58F52676B737044148C0DA6FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
Manifest number: 1239
Signing time: Wed 25 Mar 2026 19:00:39 +0000
Manifest this update: Wed 25 Mar 2026 19:00:39 +0000
Manifest next update: Thu 26 Mar 2026 19:00:39 +0000
Files and hashes: 1: G2qFSj-zHSZn_cR0UfWs4GFJbTA.roa (hash: LmGaxovGZ/u+AYW4AE5opwjlV2xNZIKAOEsB5GmrX1g=)
2: SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl (hash: yLiqAuABxqXPdX91RRj8zUH0LaKNKCybt5uudhh2oOg=)
3: T1xFBI_FXFj5vusDJo-pUeK0x0I.roa (hash: +8wuXinY8Xk3FyPY/iHD7k7tBAC8V4xrKKtAxVLmilA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:ca:58:f5:26:76:b7:37:04:41:48:c0:da:6f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Validity
Not Before: Mar 25 19:00:39 2026 GMT
Not After : Mar 26 19:00:39 2026 GMT
Subject: CN=f6c8e7a268d73290c778fc608194cf9491c49552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8d:9f:d6:b4:6c:37:00:19:b8:a8:29:f2:86:
c2:29:64:9f:88:e6:2c:43:dc:0b:80:5a:28:c2:33:
a5:98:d4:7c:41:5d:57:7f:b4:f6:b4:71:13:1d:b2:
ab:54:12:d9:32:53:4c:22:35:be:ec:3d:9d:a0:63:
d7:9f:5d:27:57:aa:86:8d:c2:12:42:de:13:3a:ad:
56:df:78:14:40:09:25:fd:e4:66:a8:14:40:8c:d3:
6a:e7:ef:8e:3f:8d:82:1a:62:0f:8a:f1:02:f2:1c:
77:5d:6e:87:0b:cb:9a:6f:af:4f:e7:7a:43:6b:35:
78:cb:fb:2c:bc:34:ca:51:b9:cb:6a:16:0d:89:49:
06:64:cb:89:81:52:58:ed:4b:54:ba:f1:68:e2:c3:
11:85:e7:d3:e5:62:ba:e8:87:50:b2:5f:e7:4e:6a:
f6:d5:0f:1d:77:cc:d6:63:ff:67:91:43:73:19:46:
08:ad:e0:57:34:5a:3d:15:49:6d:88:01:7b:45:9a:
aa:c0:1d:7e:47:8a:07:92:56:94:a9:49:77:67:da:
83:2c:d3:6d:31:b6:3c:08:b6:fa:d8:8b:1a:48:be:
23:df:0e:40:fe:20:02:b8:d7:18:ef:41:55:93:e9:
cf:f7:ce:13:b9:1c:48:cd:42:06:1a:bf:87:1f:7b:
46:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C8:E7:A2:68:D7:32:90:C7:78:FC:60:81:94:CF:94:91:C4:95:52
X509v3 Authority Key Identifier:
keyid:49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:7e:a2:c2:19:87:12:40:b5:eb:61:4f:0a:ad:b3:0b:3d:3b:
62:fa:0f:c0:5b:6f:9f:5a:40:16:fb:03:d8:c1:11:89:00:7b:
18:82:c3:40:0e:14:18:4e:09:c6:90:1c:d6:db:63:94:c4:47:
aa:b2:a3:f8:be:19:8f:db:9e:b3:54:45:0c:d0:77:d6:92:15:
5e:e4:ba:59:f2:f1:60:3c:d8:dc:85:f8:a2:16:02:63:fb:d5:
e7:c8:b6:70:b6:fc:49:9d:2c:4b:15:84:fe:d1:12:fc:f7:33:
ba:ac:a9:84:17:03:95:16:0a:7a:7a:43:c0:8e:d7:2c:c7:24:
d6:b5:8e:6f:c9:9f:b5:98:ee:b4:b6:60:ef:40:21:74:7e:34:
a5:73:7c:68:e5:41:b8:d4:29:b0:a9:2d:46:4e:ef:c0:82:bc:
ec:ce:66:f8:91:9e:83:bc:87:00:db:81:63:05:4c:8e:a6:32:
22:06:67:19:62:a0:fc:b8:d6:1c:99:eb:0d:f9:d4:d1:21:c5:
ea:b0:44:aa:d5:31:29:88:ff:30:b8:9b:db:0e:77:07:18:66:
ee:31:89:b2:85:3c:22:48:d9:21:07:b2:01:5d:c5:6a:cb:3b:
87:02:96:37:7c:42:20:06:e5:9f:22:02:55:79:77:d6:c7:8b:
4c:72:ee:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXspY9SZ2tzcEQUjA2m/KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NDBjZjc3OGRkOTgxNzY1N2NkOGQ0ZmVlZGQ0MjNkNDZk
MWE5NjUwHhcNMjYwMzI1MTkwMDM5WhcNMjYwMzI2MTkwMDM5WjAzMTEwLwYDVQQD
EyhmNmM4ZTdhMjY4ZDczMjkwYzc3OGZjNjA4MTk0Y2Y5NDkxYzQ5NTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0I2f1rRsNwAZuKgp8obCKWSfiOYs
Q9wLgFoowjOlmNR8QV1Xf7T2tHETHbKrVBLZMlNMIjW+7D2doGPXn10nV6qGjcIS
Qt4TOq1W33gUQAkl/eRmqBRAjNNq5++OP42CGmIPivEC8hx3XW6HC8uab69P53pD
azV4y/ssvDTKUbnLahYNiUkGZMuJgVJY7UtUuvFo4sMRhefT5WK66IdQsl/nTmr2
1Q8dd8zWY/9nkUNzGUYIreBXNFo9FUltiAF7RZqqwB1+R4oHklaUqUl3Z9qDLNNt
MbY8CLb62IsaSL4j3w5A/iACuNcY70FVk+nP984TuRxIzUIGGr+HH3tGXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbI56Jo1zKQx3j8YIGUz5SRxJVSMB8GA1UdIwQY
MBaAFElAz3eN2YF2V82NT+7dQj1G0allMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1VEUGQ0M1pnWFpYelkxUDd0MUNQVWJScVdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iMDI1YmMtYmM3My00ZDNjLWE0MzAt
MDAzOTRiNjEwYTM0LzEvU1VEUGQ0M1pnWFpYelkxUDd0MUNQVWJScVdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9iMDI1YmMtYmM3My00ZDNjLWE0MzAtMDAzOTRiNjEwYTM0
LzEvU1VEUGQ0M1pnWFpYelkxUDd0MUNQVWJScVdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuX6iwhmH
EkC162FPCq2zCz07YvoPwFtvn1pAFvsD2MERiQB7GILDQA4UGE4JxpAc1ttjlMRH
qrKj+L4Zj9ues1RFDNB31pIVXuS6WfLxYDzY3IX4ohYCY/vV58i2cLb8SZ0sSxWE
/tES/PczuqyphBcDlRYKenpDwI7XLMck1rWOb8mftZjutLZg70AhdH40pXN8aOVB
uNQpsKktRk7vwIK87M5m+JGeg7yHANuBYwVMjqYyIgZnGWKg/LjWHJnrDfnU0SHF
6rBEqtUxKYj/MLib2w53Bxhm7jGJsoU8IkjZIQeyAV3Fass7hwKWN3xCIAblnyIC
VXl31seLTHLuRA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:32 2026 by rpki-client