Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: Gm4fVG/VGM6c+PMBmf9b5SXlXq/z6Mbdo9EChJbMNfU=
Subject key identifier: D2:27:02:BB:47:8F:05:4B:CC:C1:27:01:76:B8:1C:4B:52:31:8D:ED
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 019D98F41534B0AE5670ECF8D78D94C59FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 11FA
Signing time: Fri 17 Apr 2026 01:00:26 +0000
Manifest this update: Fri 17 Apr 2026 01:00:26 +0000
Manifest next update: Sat 18 Apr 2026 01:00:26 +0000
Files and hashes: 1: 4DavIRBSgZJRou5_5pXE0gpp9TU.roa (hash: S+MQh3x3BbVlY1FrerJ280vTss7JYvL8Z4S9DdFZKIM=)
2: VcOcd84KQjkoZhDL-2G9Bu1Nsrg.roa (hash: r5/pQOXKpUYtcCqvwsl8tV8NEiMQb4SPmxXSKYvWd28=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: QDFNoufTDa38/jwl8GMAEGB7M1Q0wXFjAj5+G85nFSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:15:34:b0:ae:56:70:ec:f8:d7:8d:94:c5:9f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Apr 17 01:00:26 2026 GMT
Not After : Apr 18 01:00:26 2026 GMT
Subject: CN=d22702bb478f054bccc1270176b81c4b52318ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:c7:66:ad:bd:dc:fb:4a:6a:6f:fb:bd:a5:
41:f4:ae:bf:78:71:fe:4a:e8:9c:f2:fd:e3:25:f4:
5e:31:7f:73:fc:d4:ad:e2:13:73:d0:c9:fb:52:91:
d3:3b:66:a0:a0:21:bc:85:37:13:cf:fb:d2:f2:52:
ef:02:d0:d1:a3:ef:e2:18:59:d7:64:4e:cc:a9:c3:
d3:98:8d:4b:ff:79:20:19:12:28:71:e8:71:d3:7d:
c1:78:1d:a6:cd:65:73:cd:11:5b:8a:dd:f2:73:8c:
23:93:79:8a:26:68:af:71:aa:e7:a3:df:0e:9e:b4:
9d:77:9a:c7:26:d6:3d:f3:8a:63:1c:1f:6d:0b:80:
54:ba:04:a1:a1:8a:03:5f:0d:60:e2:73:52:72:6f:
0d:e7:fb:31:4c:fc:94:bb:e5:05:6f:72:0e:cd:8f:
98:99:16:55:e5:dd:27:cf:48:37:19:1a:ce:3d:14:
5f:c8:8a:89:8b:04:b7:6e:34:dd:6e:cf:3c:d0:ea:
e2:ca:36:dc:89:df:0f:ee:7f:be:fd:42:d7:c3:61:
11:7f:75:e7:49:25:e0:0b:2a:48:73:0e:6d:dc:45:
65:26:f1:8e:d9:69:af:cc:09:99:d9:17:44:68:01:
1d:f3:91:3f:04:44:36:43:49:63:e4:be:d5:7e:d1:
19:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:27:02:BB:47:8F:05:4B:CC:C1:27:01:76:B8:1C:4B:52:31:8D:ED
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:87:6c:8b:0a:3b:de:78:f5:81:47:be:8f:7f:83:33:b2:1f:
e4:6a:67:34:dd:c5:d0:fe:36:82:e2:1c:ba:0e:da:a4:ec:fb:
d9:d8:6e:bb:b0:43:1c:6f:df:9a:47:dd:9c:90:1d:d0:76:e6:
4b:b5:d1:ec:c0:33:63:f0:10:b1:cd:25:0a:a5:be:8d:b5:bd:
46:e6:b5:03:31:3f:2d:b2:43:04:59:72:8e:fd:28:b6:db:0c:
67:0b:25:f1:e1:e7:a1:d8:f3:18:0e:21:0d:cc:b5:8e:c5:2a:
92:f0:65:03:a5:80:9e:15:94:34:d8:28:1e:36:83:2a:a3:49:
f6:c2:9a:b2:53:1a:19:fd:9d:e0:e3:62:53:71:46:51:d8:09:
a9:ab:bf:63:1f:5a:f8:09:3a:d2:af:6c:79:2b:15:9e:83:fc:
c5:2f:9a:f8:59:1d:bd:ed:73:c0:fb:20:ef:3f:d0:12:ac:a6:
a1:32:56:61:b1:3b:77:78:c6:bc:04:85:0d:11:60:7a:85:a1:
ff:c6:12:a5:03:1c:ed:90:21:a4:46:86:51:f6:ca:41:28:09:
31:dc:f8:be:7d:93:52:2b:12:99:c7:d5:32:fb:a2:21:89:c2:
ca:f3:a5:47:ff:c5:2f:07:05:5c:6a:9f:a6:c3:a0:27:c7:29:
43:d7:13:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:58:29 2026 by rpki-client