Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
File: sjby5CUi6Y03a-OKieXdUau_eZY.mft (raw, json)
Hash identifier: NA2KYFoohiV3BMBa8fBhQyngVU2+zrr/Gq6Tg0w3FoA=
Subject key identifier: 32:DB:0D:81:1B:D9:08:DA:52:85:B6:D9:D6:D0:ED:EF:98:97:75:BB
Authority key identifier: B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
Certificate issuer: /CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Certificate serial: 019CA9463730A0B07C7376F135385060DEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 12:01:16 +0000
Manifest this update: Sun 01 Mar 2026 12:01:16 +0000
Manifest next update: Mon 02 Mar 2026 12:01:16 +0000
Files and hashes: 1: BQSGEx3nMb3rW3Le5hymWyu8-YU.roa (hash: S7mWCQBW//r+Jv4L1fzMRolM2RhYHtuAZtqku2trt+E=)
2: _JF8Eg2LajBMQ-wk536FOe9jq_A.roa (hash: n3KkRLrkwjt5uz08CMrAQjO1W+ar0ekBVWg2d9z/IMg=)
3: oX6Il5fRV1X5jAgqxERBXvUP_Tw.roa (hash: XUq2WuxGzyAj/pRWgnx4uOuNcbSM05FoBf026KrRFWM=)
4: sjby5CUi6Y03a-OKieXdUau_eZY.crl (hash: LPhokFOrd8x+l4ihPVTNg56z8EdCxhqbM3rof1IHmb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:37:30:a0:b0:7c:73:76:f1:35:38:50:60:de:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Validity
Not Before: Mar 1 12:01:16 2026 GMT
Not After : Mar 2 12:01:16 2026 GMT
Subject: CN=32db0d811bd908da5285b6d9d6d0edef989775bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:e2:d7:c0:30:75:4a:35:c5:81:cc:21:8c:
3a:e6:41:25:9f:48:91:48:4f:4a:fb:7a:1d:2b:a9:
01:52:bd:61:d2:c3:3f:68:70:c4:dd:7d:4e:72:47:
7e:4f:71:5f:f9:7c:e8:7c:07:80:57:bc:29:cd:05:
fd:78:65:b1:8c:0e:e3:47:8f:f6:82:0e:ac:87:b9:
97:e7:89:b9:97:cc:5a:1b:8b:f9:1f:f6:f3:d4:82:
d3:4c:21:44:bc:b7:3b:3f:f5:0b:a8:43:a4:c5:50:
9a:b0:ad:57:3b:0f:a0:9e:6b:5e:77:24:2d:88:c6:
2d:68:62:0f:97:e4:7a:42:be:d9:91:55:6d:c5:6a:
58:ec:76:a8:d5:6f:5e:43:a4:79:48:a5:cd:94:09:
ee:85:c8:19:d9:d7:77:2c:be:1a:17:1b:f3:47:25:
3f:45:73:44:02:87:94:c3:83:80:de:78:ad:77:39:
e8:fa:b3:01:15:0d:b0:89:6a:d2:5e:34:c2:a9:9e:
ca:b5:75:58:ce:ea:7b:f0:30:e7:a3:af:38:41:ee:
d9:15:b6:4b:cc:c2:b8:4b:ff:49:dc:cb:56:55:1e:
39:08:aa:d3:52:7c:62:a5:9b:0f:f6:c7:1b:7f:11:
e3:09:ee:eb:a5:5a:da:21:f8:97:73:fb:5f:e5:06:
8a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DB:0D:81:1B:D9:08:DA:52:85:B6:D9:D6:D0:ED:EF:98:97:75:BB
X509v3 Authority Key Identifier:
keyid:B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:0e:86:b6:cd:ff:72:5d:ca:c3:86:cb:e5:b0:6c:bd:b7:f9:
a9:4a:2d:15:72:cd:6f:ff:e0:b9:ee:60:19:e7:80:bb:1b:fa:
04:95:d6:a7:8f:2b:12:9f:db:de:e6:a4:83:a8:35:e5:ce:9d:
b9:4f:f9:5e:31:5d:7c:7d:10:04:82:1f:1f:7e:dd:c1:be:7f:
1d:90:fe:10:43:aa:48:1f:43:8b:be:f0:44:6a:0e:23:c8:d7:
a5:64:13:d0:52:14:0e:bb:6f:bd:3a:17:a5:2c:34:03:70:47:
1f:e9:13:c4:5e:73:65:18:27:2f:9d:8d:55:3c:50:77:4f:1f:
cc:64:0a:2b:37:47:2f:06:78:e7:90:ef:ec:3d:1b:ca:ed:0f:
33:9f:d5:f1:44:5f:b1:21:40:c0:5e:bc:a3:d8:4e:37:c8:7b:
4a:9c:10:6f:ba:1d:9c:bf:52:1a:38:c2:e4:06:88:37:4c:1c:
4e:c3:e0:79:82:1b:ea:44:bb:bc:ee:42:48:13:dc:fa:35:e8:
af:61:f4:c1:b1:e6:8b:ed:db:9f:eb:45:ac:d3:e9:c1:fa:53:
73:9e:5d:b6:1f:48:a3:a4:c2:35:e1:21:8d:21:8f:16:26:60:
8d:67:4f:67:60:90:70:55:e4:36:86:50:ce:fe:fa:c0:d4:c0:
c3:82:14:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:39 2026 by rpki-client