Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
File: sjQvyZcw8qNNCe5LXukheHVs1NE.mft (raw, json)
Hash identifier: h+DQumUnItH0JVjZcJrK3ln+DPWzQvS9xM59snywoJk=
Subject key identifier: BF:D2:1D:F1:C9:BF:48:EC:96:F8:8F:17:FA:6F:C4:6C:A7:FA:46:A1
Authority key identifier: B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
Certificate issuer: /CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Certificate serial: 019D992B13B3872F903ED4772C0877B8A1C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
Manifest number: 096E
Signing time: Fri 17 Apr 2026 02:00:30 +0000
Manifest this update: Fri 17 Apr 2026 02:00:30 +0000
Manifest next update: Sat 18 Apr 2026 02:00:30 +0000
Files and hashes: 1: sjQvyZcw8qNNCe5LXukheHVs1NE.crl (hash: fUKxYloygrriKP0JNrnSdv4orD4tQTz0axfEJTO6J5Y=)
2: teqMxaMsvGSivY1kM5tYiYtMetI.roa (hash: BdOofOPKznRVYGlAF2MYDPxT7W12etq/82wrXDQ0g60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:13:b3:87:2f:90:3e:d4:77:2c:08:77:b8:a1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Validity
Not Before: Apr 17 02:00:30 2026 GMT
Not After : Apr 18 02:00:30 2026 GMT
Subject: CN=bfd21df1c9bf48ec96f88f17fa6fc46ca7fa46a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:24:e8:20:6e:52:eb:d5:42:5c:82:1d:24:b0:
9d:00:30:6b:0a:0c:3e:d5:1b:64:11:2c:ec:1a:a0:
3d:ee:36:58:e5:e3:0e:56:74:44:20:03:f3:c5:b2:
48:65:4f:55:28:4d:38:e2:4f:8c:7a:59:19:6e:7d:
fc:70:ed:e9:f4:d3:46:64:ac:4e:49:ef:b0:9f:f3:
66:69:f2:f8:92:18:eb:92:39:b3:79:26:fa:22:aa:
39:72:ed:8d:a4:b9:80:06:d9:8f:8e:eb:d1:92:c5:
7a:6b:81:98:bd:1c:ac:4b:57:46:88:a1:02:96:5a:
02:ce:cb:f8:3b:1a:2e:13:9d:24:01:60:bd:42:f7:
4b:09:6e:91:3e:ef:7c:5b:31:a2:96:d2:2d:1f:59:
13:ff:db:20:58:30:e6:0e:81:d5:63:b7:1d:fe:f6:
4f:0c:b8:d4:f3:7c:19:be:8c:72:86:53:ac:f6:13:
e0:6b:45:09:19:a5:2b:28:79:4a:76:63:a1:f0:77:
e4:53:c6:1e:d9:f4:8d:39:96:fd:8b:26:ac:06:ef:
ff:22:be:83:b2:20:9a:80:0b:f2:3b:a5:9b:d0:3c:
dd:93:44:53:23:30:75:86:94:56:9b:17:25:c8:0b:
b9:5f:ff:fb:9d:de:42:34:08:70:2e:0e:f3:be:06:
10:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D2:1D:F1:C9:BF:48:EC:96:F8:8F:17:FA:6F:C4:6C:A7:FA:46:A1
X509v3 Authority Key Identifier:
keyid:B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:7f:2c:09:93:3a:21:f9:b3:26:41:bf:29:bd:0b:56:28:7c:
8e:af:ff:12:e4:72:8c:08:af:6c:49:4f:7f:d2:fc:7d:47:20:
33:6a:b7:a9:10:85:56:fd:5c:be:cb:0f:6a:42:67:a3:2c:a5:
96:c0:3d:fd:66:b0:92:c5:2b:c4:f2:84:bc:5e:ad:98:99:b0:
21:a0:49:34:0b:a7:54:f8:57:70:84:28:ba:21:fe:f5:26:85:
21:3a:57:f3:cd:6a:17:6d:f6:90:ac:5e:ab:0b:1d:7b:77:d4:
ba:84:e5:bc:89:3c:3a:e9:21:b3:aa:6a:be:fe:14:13:a3:ec:
2a:ba:d3:6c:99:d6:c6:55:b7:fb:84:ff:00:99:d9:65:a6:08:
5c:a6:2c:ad:ce:6c:02:f7:48:89:f1:7e:35:f0:b1:26:da:cf:
b4:b3:61:67:9d:fa:10:50:13:fc:14:89:ac:92:f4:da:89:c8:
ad:32:10:9f:0f:ff:a1:1a:88:41:38:d8:a1:5a:be:0e:ad:a0:
4f:c8:b7:a6:75:09:82:67:b4:72:99:5d:03:9e:b8:73:55:ab:
93:b3:8d:51:32:84:1a:e1:8f:19:be:8f:94:fa:39:30:6e:59:
43:8c:30:fb:87:01:a0:19:b0:c6:31:e3:af:03:21:80:b6:35:
ba:00:95:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:47:56 2026 by rpki-client