Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
File: sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft (raw, json)
Hash identifier: 1IB9Y/OWD7gEk+ykrbqRwf94JUCSYk4I0+6psEs3Hqc=
Subject key identifier: 5D:32:31:88:88:2E:54:D1:83:98:A9:8B:89:F1:38:2A:29:F9:A0:88
Authority key identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
Certificate issuer: /CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Certificate serial: 019CACB503B5EE17784D1928ABD8B89440D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 04:01:09 +0000
Manifest this update: Mon 02 Mar 2026 04:01:09 +0000
Manifest next update: Tue 03 Mar 2026 04:01:09 +0000
Files and hashes: 1: J8WfogeIpk1UKcHSO8WrjdEFqSM.roa (hash: PzzkgqrS9E4dkHoOcT2At52JZ2wJfpowp9BIjzEgVJE=)
2: sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl (hash: kA7Di9wrYLlj7sN0kc7ybrvMEZedznnkW4Aj2U1ZEBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:03:b5:ee:17:78:4d:19:28:ab:d8:b8:94:40:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Validity
Not Before: Mar 2 04:01:09 2026 GMT
Not After : Mar 3 04:01:09 2026 GMT
Subject: CN=5d323188882e54d18398a98b89f1382a29f9a088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b0:a0:4e:9e:fc:01:0a:af:cc:6d:fa:8f:95:
0f:e3:7e:d1:77:e4:b7:eb:e9:5b:06:d5:33:fe:2d:
37:1f:90:16:e9:82:1a:16:72:9b:90:0f:9f:c6:29:
1f:ff:bd:ff:2a:0a:2a:d4:65:29:65:d5:0d:0a:09:
20:7a:f8:43:0a:c7:9f:c2:68:c1:3b:a5:6a:02:ea:
d2:24:00:fe:be:94:18:0c:29:e0:37:0d:49:7c:bb:
a1:ac:b3:34:dd:cd:62:bf:6b:33:6e:61:f6:b0:98:
81:55:05:20:2f:d0:c6:1e:f7:36:03:bf:ab:f7:28:
30:96:37:33:e0:dc:54:86:4f:5f:cb:3b:86:fa:44:
f8:69:86:04:1b:b5:e6:ae:f8:94:81:c1:b7:39:3d:
18:4d:b8:79:a3:27:62:61:1b:ea:8d:1d:da:13:db:
fd:15:3b:2a:f7:17:08:48:f4:94:88:26:4c:43:16:
2e:4d:a9:b3:c2:99:59:ed:a8:dc:f6:f1:e9:61:df:
3e:47:1a:30:51:ea:7e:de:ef:74:23:08:bd:43:ce:
be:48:19:3d:5c:a0:a9:1d:64:0c:b7:a4:ff:25:38:
49:67:39:1b:d6:09:11:64:90:21:a2:80:8c:70:b1:
e7:13:46:c1:35:c1:e1:6e:96:c5:6d:f4:65:1f:66:
ef:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:32:31:88:88:2E:54:D1:83:98:A9:8B:89:F1:38:2A:29:F9:A0:88
X509v3 Authority Key Identifier:
keyid:B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:0b:94:11:9f:80:92:94:be:8a:d6:40:50:4a:3a:11:dd:dd:
9e:19:90:68:a4:b0:a9:c7:0b:c6:43:76:58:da:7a:c2:7a:62:
6c:fe:89:1d:3a:03:b2:ce:6d:88:f4:77:cc:49:ef:bf:c7:32:
16:df:b8:af:c7:9c:84:39:fa:71:7c:f7:4b:e7:8b:6f:c1:4d:
33:a0:c1:87:ae:41:49:58:b8:cc:96:90:4a:51:ad:eb:0a:13:
86:7e:41:00:63:84:a8:22:58:19:15:cc:5d:82:81:5c:21:22:
ca:03:34:33:fe:84:17:15:52:18:16:7d:e5:05:5a:57:bd:4f:
75:93:77:10:e0:e3:2d:5e:80:9e:ca:c1:93:43:72:da:be:f9:
d2:4b:07:23:02:8c:b4:55:88:73:05:a9:7f:8f:90:84:38:56:
17:66:bd:76:f6:5f:55:26:42:d8:2b:8b:5b:06:87:35:3a:ee:
1e:af:f3:1c:c6:91:7d:ad:ac:9d:e2:aa:64:df:3a:c4:78:3c:
4d:ef:f1:7d:2c:38:43:f5:6e:59:40:0f:be:7a:45:58:54:2d:
06:51:c3:a3:48:fc:80:93:7d:6f:3e:48:42:23:97:f1:40:3f:
23:0f:7d:35:01:17:db:62:40:c7:4d:fb:d6:30:b1:04:88:1d:
10:20:6e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:21 2026 by rpki-client