Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.mft
File: SjqJ1pMbo1T4TtM2XHQeiXvCtnE.mft (raw, json)
Hash identifier: QR/0Keh0l0GgQvVNfBj6Zsx4qmwbarnIpjsf99sRY2o=
Subject key identifier: 9C:72:0F:D2:1B:F2:4A:FB:DD:1A:F8:88:30:F0:CD:02:1D:17:D2:B2
Authority key identifier: 4A:3A:89:D6:93:1B:A3:54:F8:4E:D3:36:5C:74:1E:89:7B:C2:B6:71
Certificate issuer: /CN=4a3a89d6931ba354f84ed3365c741e897bc2b671
Certificate serial: 01A0C5C52F23BEDC78DDC1C0BAA6C8D2CCF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.mft
Manifest number: 0162
Signing time: Mon 21 Sep 2026 21:00:29 +0000
Manifest this update: Mon 21 Sep 2026 21:00:29 +0000
Manifest next update: Tue 22 Sep 2026 21:00:29 +0000
Files and hashes: 1: LHrB9S_5wN9q4TKss5lhMnzZWUE.roa (hash: gT83cdmafD/JVl5E5X2iRmun1/6JhaCWrmB+yXrCpBw=)
2: SjqJ1pMbo1T4TtM2XHQeiXvCtnE.crl (hash: L5558xc36wLgpqS4mdovQlMixBDzRg0TZXxEf9Z578U=)
3: kw17cN7O6BZjrXtc0Po7Gnc29_E.roa (hash: 9+glnkrOqAZcUFE880RM58Uxpk29L9aOpV/CKJsAnIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:2f:23:be:dc:78:dd:c1:c0:ba:a6:c8:d2:cc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3a89d6931ba354f84ed3365c741e897bc2b671
Validity
Not Before: Sep 21 21:00:29 2026 GMT
Not After : Sep 22 21:00:29 2026 GMT
Subject: CN=9c720fd21bf24afbdd1af88830f0cd021d17d2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:91:96:57:d7:5d:3c:ff:d7:de:a1:7a:7b:b3:
ef:56:3c:eb:4b:13:64:eb:0f:76:63:e0:02:db:72:
78:15:f1:47:bb:a9:69:94:76:17:64:23:83:1a:b9:
e8:a8:81:bc:06:66:5a:59:58:cb:1b:11:f4:15:74:
5f:a9:0e:64:39:4c:9d:46:36:56:ff:08:27:82:8e:
17:41:f6:1f:ca:23:e5:20:76:c9:1f:d8:08:14:4b:
1e:e6:2c:47:a1:3c:69:3e:d4:12:e2:c4:4f:69:cd:
ac:ed:8c:bd:cb:47:85:6b:51:ec:bd:7a:4a:9f:58:
84:fc:aa:84:02:30:6d:95:5e:ec:a9:47:c0:f9:c6:
64:52:bd:37:be:13:b6:24:b8:4c:be:48:a7:ed:35:
6d:de:68:80:5d:6b:53:45:fc:86:54:be:80:e5:02:
19:12:3a:35:6d:0a:14:51:04:69:4f:b8:9a:f3:2d:
9f:64:11:af:13:77:8a:f6:07:b3:60:0c:bf:9f:33:
4e:a5:21:21:03:6c:fb:69:b2:12:cf:4e:a1:d9:3d:
a4:99:64:4c:b9:a0:77:1b:4a:46:23:e5:f0:f4:3f:
56:10:bd:83:90:01:6a:6e:a2:bd:fc:f1:f4:1c:13:
24:90:f0:55:33:21:88:f6:a1:a3:47:90:6e:bf:1b:
01:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:72:0F:D2:1B:F2:4A:FB:DD:1A:F8:88:30:F0:CD:02:1D:17:D2:B2
X509v3 Authority Key Identifier:
keyid:4A:3A:89:D6:93:1B:A3:54:F8:4E:D3:36:5C:74:1E:89:7B:C2:B6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5e:7e:01:c8:31:67:5d:fa:7c:fd:4a:c0:24:46:b5:f2:65:
21:c8:57:4c:50:30:b8:82:a6:02:a4:77:e0:3a:9c:01:3d:57:
9d:25:e7:84:d7:e2:a5:b8:8f:7f:86:49:a4:9e:2f:39:4a:18:
34:d6:78:94:54:28:54:00:3d:e3:33:98:99:e8:17:e7:52:70:
42:2b:9b:cb:d1:00:bb:5b:4b:ac:8e:46:ee:04:ab:8f:f4:e8:
77:40:6a:2f:c5:05:f3:bb:0c:90:a7:8e:00:c7:d5:24:6b:d8:
4f:84:18:64:4f:15:cd:1c:a4:bd:7c:75:df:18:05:69:8b:96:
82:f6:80:be:d8:ce:f4:c6:52:c3:fc:91:80:ec:19:c7:04:21:
fe:18:11:8f:9e:4a:8b:51:23:21:2d:c3:ec:c4:82:da:be:07:
18:f8:6e:07:a3:f6:94:53:ca:de:19:86:41:2e:16:f8:d1:d8:
6f:00:3c:76:15:24:17:6b:9f:2b:4e:1d:59:c5:d5:0e:a2:da:
07:1b:7d:0e:ed:16:09:41:5f:4a:5c:f4:68:b1:f4:d2:f9:26:
90:d7:6b:e3:6c:83:8f:ec:9c:23:bd:b6:0f:2e:80:c6:e5:81:
ed:4a:39:b3:c1:4d:53:ad:c9:cc:47:33:3a:24:ca:30:bd:50:
fc:07:ae:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:28:45 2026 by rpki-client