Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
File: SjUhO60WmUgIOMBVgPB44kHetYo.mft (raw, json)
Hash identifier: kR+ToE0Rq/Xv/KlToakEsX1HLrb4iBek1s0z/IxuJqA=
Subject key identifier: 0C:12:B2:1E:3D:7F:F5:AB:ED:5E:29:A9:D7:BF:2E:8C:D1:B4:49:40
Authority key identifier: 4A:35:21:3B:AD:16:99:48:08:38:C0:55:80:F0:78:E2:41:DE:B5:8A
Certificate issuer: /CN=4a35213bad1699480838c05580f078e241deb58a
Certificate serial: 01A12B44A36701A47AABD9249D211FB2EDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
Manifest number: 01AA
Signing time: Sun 11 Oct 2026 14:01:20 +0000
Manifest this update: Sun 11 Oct 2026 14:01:20 +0000
Manifest next update: Mon 12 Oct 2026 14:01:20 +0000
Files and hashes: 1: SjUhO60WmUgIOMBVgPB44kHetYo.crl (hash: lyu3b8h10BRQ2ikUgzZpKhm1D2Ttf01r4/Pe6sbEe9w=)
2: V1EGIfr7BvBMfahUaU4NVnlqdEQ.roa (hash: JrfQTYX7TC++GoVkr1xgTObKGu86dQxHF4+9hinDHN8=)
3: e_PoDcp11oHj3X7XTipT_OU4OPQ.roa (hash: +Lh+HAKbeHouZEc3ttgnD9FzVZd95ZF99HpVIGLvd0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:a3:67:01:a4:7a:ab:d9:24:9d:21:1f:b2:ed:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a35213bad1699480838c05580f078e241deb58a
Validity
Not Before: Oct 11 14:01:20 2026 GMT
Not After : Oct 12 14:01:20 2026 GMT
Subject: CN=0c12b21e3d7ff5abed5e29a9d7bf2e8cd1b44940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3c:fe:90:30:ec:4f:a2:0a:f0:69:e1:de:82:
bf:8c:a5:b2:73:27:2c:5a:9c:03:f6:f6:1f:42:ab:
bd:40:ca:e4:12:9c:34:72:c7:a2:11:15:a3:a9:b2:
76:3b:2a:d4:e4:4b:22:be:10:0e:31:01:6a:5a:7a:
d8:6a:a3:a4:c4:3e:d1:a5:4f:77:1f:eb:bd:6d:c7:
ce:e9:64:d4:9c:6b:67:5e:8c:9e:af:01:4b:27:e1:
bb:12:1e:ce:4f:fd:9d:4e:3a:f3:d5:b2:94:ae:32:
2b:0a:d6:83:1f:b7:61:2b:ce:32:92:a6:67:da:e5:
5b:07:70:4a:5d:80:a5:47:77:f0:ee:00:79:a5:8d:
a2:37:20:6c:de:a6:ba:e1:11:9e:f5:2d:3e:c6:2e:
e2:35:dc:09:21:51:17:b4:15:24:3f:c4:6f:c7:e7:
07:ad:ba:40:20:18:23:6f:e7:c4:2c:6e:a3:0d:61:
f7:20:17:af:72:3c:8a:bc:bc:3e:36:0f:44:53:d3:
3e:28:39:59:cd:71:dc:6c:a0:df:cd:a4:3f:2e:9c:
4e:22:24:92:2f:da:ed:18:f0:fc:25:46:bd:fa:d7:
7c:5c:15:be:7c:13:06:54:c1:23:9a:f6:40:13:df:
39:a0:19:9b:0e:11:8c:26:ea:b1:98:67:09:39:a4:
6c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:12:B2:1E:3D:7F:F5:AB:ED:5E:29:A9:D7:BF:2E:8C:D1:B4:49:40
X509v3 Authority Key Identifier:
keyid:4A:35:21:3B:AD:16:99:48:08:38:C0:55:80:F0:78:E2:41:DE:B5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4d:ca:99:64:03:f7:34:bf:c7:f8:1a:80:1b:ef:ec:43:bf:
ba:08:10:97:7e:25:ae:71:c3:fc:31:ec:cb:d7:a7:6e:ca:00:
0f:5c:8b:b3:b3:e6:60:7b:a2:7d:e9:17:5e:43:35:20:a3:db:
86:c0:3c:db:5a:b8:b4:a3:15:3e:df:e4:75:cb:bf:22:79:1c:
a8:93:d7:d9:51:02:41:ee:89:f6:bd:41:a1:25:6a:e0:21:1d:
53:70:f9:2c:23:c0:b1:23:db:87:cf:de:b4:79:f9:64:dc:d5:
87:46:d3:05:e9:15:e3:36:b2:11:6a:30:cf:a6:24:f7:86:4b:
6f:b6:a6:c3:33:9c:65:86:85:02:08:af:46:87:2b:15:6d:da:
27:a7:f0:63:11:1e:62:2f:d6:8d:7d:d9:bb:2e:eb:62:d1:ac:
10:85:69:bf:ed:00:50:17:f6:df:67:40:f8:cd:17:27:29:68:
61:81:b8:fe:61:ec:74:b3:a2:b4:50:b0:f3:94:97:08:d7:5c:
d0:82:93:88:be:26:ce:04:5e:0b:4b:78:2d:f5:df:98:c0:84:
9c:a6:01:17:9f:cc:33:f5:62:0d:d2:28:32:18:6e:29:2f:5d:
6c:ce:69:a9:7d:c5:a4:51:ae:4f:62:cf:5b:49:7f:4a:4c:1f:
1c:88:38:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:19:24 2026 by rpki-client