Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: CzVm/Un5brx9yct4i2OVa5z/Rhm24Nhurit716n7LxM=
Subject key identifier: 34:16:83:2D:C1:0E:56:11:26:94:88:12:90:85:70:6D:87:E8:60:58
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 01A0C7EA7AA3D74F5AE01B24F9E34DD0315D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 13A0
Signing time: Tue 22 Sep 2026 07:00:27 +0000
Manifest this update: Tue 22 Sep 2026 07:00:27 +0000
Manifest next update: Wed 23 Sep 2026 07:00:27 +0000
Files and hashes: 1: 4DavIRBSgZJRou5_5pXE0gpp9TU.roa (hash: S+MQh3x3BbVlY1FrerJ280vTss7JYvL8Z4S9DdFZKIM=)
2: VcOcd84KQjkoZhDL-2G9Bu1Nsrg.roa (hash: r5/pQOXKpUYtcCqvwsl8tV8NEiMQb4SPmxXSKYvWd28=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: 8b/dlAkFhfFvQhAP0/wC+Y/S8bVdeuDkTgb29M+gplk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:7a:a3:d7:4f:5a:e0:1b:24:f9:e3:4d:d0:31:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Sep 22 07:00:27 2026 GMT
Not After : Sep 23 07:00:27 2026 GMT
Subject: CN=3416832dc10e5611269488129085706d87e86058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f6:33:1e:63:d7:57:c9:ba:5a:42:2f:2a:82:
2d:7e:c0:68:b5:78:ca:da:2c:b6:d3:7c:4b:06:ff:
09:28:3c:85:b5:03:c8:a7:e9:cd:36:fb:76:27:a8:
a2:4b:06:d4:be:53:a7:1d:dd:45:7d:02:37:b1:47:
5e:ca:07:a1:82:68:76:52:00:95:70:a4:c6:a9:ba:
d2:13:4c:18:e1:24:9e:14:2c:c7:b1:67:c7:0b:b0:
e1:ea:15:89:de:34:6b:df:74:6c:78:dc:08:40:0e:
65:bd:42:03:13:dd:f1:8b:6e:36:6d:df:0a:96:ac:
ac:41:a9:b0:67:50:eb:93:2c:3c:dc:e6:db:90:f2:
3f:0b:89:80:8d:e4:31:c8:e2:f2:6b:71:c9:36:4e:
3f:bd:47:3f:de:e8:94:b5:bb:df:f7:1c:ce:0b:5c:
f6:36:83:51:2e:38:cd:cd:f9:f8:c8:9f:48:5b:48:
5e:08:14:4b:fd:36:e6:54:85:7c:81:a0:d4:36:ba:
5e:70:0e:7f:53:27:d3:19:59:5d:1b:59:49:e6:bb:
e5:bb:d4:7f:ed:a3:6d:08:18:23:d5:e0:fe:a7:01:
6e:35:c0:b1:24:9a:ae:d6:fd:05:c4:73:35:13:41:
7a:cf:93:b4:af:dc:d9:71:47:64:e8:56:b5:61:de:
b2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:16:83:2D:C1:0E:56:11:26:94:88:12:90:85:70:6D:87:E8:60:58
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:48:a6:28:bc:b9:52:d0:d7:ac:2e:fc:c0:16:4b:29:5e:c6:
c0:01:d8:1a:97:ad:2b:a9:c5:cf:ba:b4:0c:6c:9a:51:6e:9f:
f5:f0:c7:d4:81:d3:db:eb:0e:54:d5:47:9c:b5:43:03:6a:70:
34:05:97:8e:0a:7f:10:30:14:d5:d4:b9:7d:fb:7b:39:d4:de:
d1:f2:6a:eb:eb:83:0b:b4:04:27:53:67:97:ea:34:fa:c3:f3:
35:5f:2d:0f:ad:84:d5:f6:88:25:0a:e2:11:1d:aa:15:88:b5:
ea:cd:33:b7:03:9f:23:62:61:5e:04:15:80:af:e6:4d:88:e0:
16:ea:27:4a:a3:6d:7d:45:1c:40:ad:7a:85:59:87:32:b2:de:
91:44:77:27:ab:9f:44:fc:28:ec:8c:af:7b:ad:63:a6:3a:9f:
18:ba:17:c7:41:ff:66:30:94:7a:40:63:77:9d:5e:9e:bf:37:
0c:a2:c8:85:2e:93:3f:6a:73:f1:65:9e:b1:b6:54:3d:34:87:
d0:84:a9:eb:12:9e:5a:44:65:43:1e:24:5f:e0:82:38:c1:a6:
a3:64:c8:69:42:5d:b7:ed:71:30:22:b0:24:3f:42:b7:96:a2:
6e:73:4f:30:b8:b6:36:27:35:b4:5f:b0:30:3e:3c:76:39:a8:
81:1c:be:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:50:09 2026 by rpki-client