Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: un22ApP0rCm1F0QpXw+at7HqlCuDTDPqRwe6NU433So=
Subject key identifier: 3F:DC:25:05:C6:46:D6:89:C1:A1:40:05:6D:2A:4F:4C:94:58:76:B6
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 019ED3BD091709908BA5E7D389B506E910C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 129D
Signing time: Wed 17 Jun 2026 04:00:41 +0000
Manifest this update: Wed 17 Jun 2026 04:00:41 +0000
Manifest next update: Thu 18 Jun 2026 04:00:41 +0000
Files and hashes: 1: 4DavIRBSgZJRou5_5pXE0gpp9TU.roa (hash: S+MQh3x3BbVlY1FrerJ280vTss7JYvL8Z4S9DdFZKIM=)
2: VcOcd84KQjkoZhDL-2G9Bu1Nsrg.roa (hash: r5/pQOXKpUYtcCqvwsl8tV8NEiMQb4SPmxXSKYvWd28=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: 7RjvZXOFuTeX+9P+qfK7zlWbfQVKUd5AY8ZVWauS0Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:bd:09:17:09:90:8b:a5:e7:d3:89:b5:06:e9:10:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Jun 17 04:00:41 2026 GMT
Not After : Jun 18 04:00:41 2026 GMT
Subject: CN=3fdc2505c646d689c1a140056d2a4f4c945876b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:f4:9a:9b:4f:6c:45:67:4e:a1:95:3f:4e:
05:da:11:aa:1a:f6:99:08:a6:c9:a7:41:c2:b2:02:
88:ed:88:fe:f7:7e:0a:b3:a1:0f:d5:94:aa:10:86:
cb:fa:6a:50:ae:54:2a:3f:c3:e7:7c:aa:f9:54:96:
70:f7:a5:4f:9c:a2:a6:78:73:77:e1:bc:fe:d4:23:
a9:c9:75:95:eb:66:12:f7:f6:bc:dc:d7:8d:b0:06:
b5:50:b8:16:5c:59:82:3c:30:11:21:97:98:49:89:
12:13:17:aa:76:43:be:48:68:00:b2:1b:43:ff:05:
3e:a4:a2:5a:ad:97:37:f7:e9:de:72:b7:9b:06:97:
bf:14:96:c2:9a:92:71:a5:70:ce:11:2e:15:be:75:
61:f6:ca:e7:b1:d1:48:1f:26:1e:7d:34:2c:61:2e:
1c:82:94:da:ae:03:72:cc:5a:ad:11:82:68:11:b2:
9c:7e:9f:9b:59:6e:e4:2a:7c:8b:ca:3c:97:93:a0:
60:a3:bb:da:b8:88:b0:90:f3:22:82:89:a6:ea:8c:
68:40:1e:96:37:89:09:d9:55:cf:4e:49:d1:78:6b:
ba:c4:cd:4b:2f:df:8a:eb:16:78:9f:f0:29:2a:5d:
4d:1e:2d:1e:67:29:bd:7f:b5:9d:19:c7:00:a0:61:
65:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DC:25:05:C6:46:D6:89:C1:A1:40:05:6D:2A:4F:4C:94:58:76:B6
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ab:98:a4:86:ad:97:70:ab:55:48:c5:02:67:31:6e:01:d5:
90:70:1d:1a:d7:57:f2:fd:d8:4f:f6:e0:3b:20:ed:f9:09:69:
f9:fb:b4:52:c5:cb:99:74:58:8c:e3:c8:f2:b2:36:df:ad:94:
b2:40:c2:79:0e:a2:0e:15:02:3b:c7:ee:00:64:2c:c2:c0:44:
4e:a0:2a:a4:16:75:ba:a9:c8:13:eb:97:e7:80:85:be:5c:27:
a8:f7:11:47:f1:8d:96:13:50:d5:70:2f:88:af:a4:2d:18:e2:
e5:85:41:c4:f7:db:5c:f3:b4:b7:ac:44:a9:e4:f6:56:60:ac:
45:ff:83:d6:d2:ce:55:a6:c6:4e:66:ac:83:2f:4e:6f:8e:03:
81:f8:42:2c:30:77:e1:bb:60:2d:df:ff:30:60:c9:fc:34:cb:
9a:32:d4:fc:34:43:ae:25:56:2a:9e:97:40:cc:90:30:77:48:
b0:45:f9:87:69:6f:13:0a:0d:d0:f4:4c:95:50:81:53:c3:4f:
7c:34:04:1e:81:e9:25:ee:ef:48:4f:0b:03:92:3b:f3:b7:d1:
d4:ff:40:4e:10:c6:94:10:c7:45:df:39:fd:4e:ed:42:43:91:
07:9f:1f:ee:c7:04:50:0b:b5:a1:67:d5:b5:79:fa:e1:c4:5e:
f9:08:c1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:47:39 2026 by rpki-client