Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
File: SjUhO60WmUgIOMBVgPB44kHetYo.mft (raw, json)
Hash identifier: cST4GBBqPphYrwqwyHIyqvuuFWb1n2Oigz4fQTe8B3g=
Subject key identifier: 26:5A:7C:C1:46:88:08:21:0C:AC:A6:30:21:FF:31:92:55:E4:48:2B
Authority key identifier: 4A:35:21:3B:AD:16:99:48:08:38:C0:55:80:F0:78:E2:41:DE:B5:8A
Certificate issuer: /CN=4a35213bad1699480838c05580f078e241deb58a
Certificate serial: 019FACE3BD94A200D669A384BA999E16E41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
Manifest number: E4
Signing time: Wed 29 Jul 2026 08:00:34 +0000
Manifest this update: Wed 29 Jul 2026 08:00:34 +0000
Manifest next update: Thu 30 Jul 2026 08:00:34 +0000
Files and hashes: 1: SjUhO60WmUgIOMBVgPB44kHetYo.crl (hash: 5SAhFK98d45rHM0nnPszoAKsRhXdmRKUd5bO3zHuMRk=)
2: V1EGIfr7BvBMfahUaU4NVnlqdEQ.roa (hash: JrfQTYX7TC++GoVkr1xgTObKGu86dQxHF4+9hinDHN8=)
3: e_PoDcp11oHj3X7XTipT_OU4OPQ.roa (hash: +Lh+HAKbeHouZEc3ttgnD9FzVZd95ZF99HpVIGLvd0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:bd:94:a2:00:d6:69:a3:84:ba:99:9e:16:e4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a35213bad1699480838c05580f078e241deb58a
Validity
Not Before: Jul 29 08:00:34 2026 GMT
Not After : Jul 30 08:00:34 2026 GMT
Subject: CN=265a7cc1468808210caca63021ff319255e4482b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4c:ec:88:e3:82:18:57:b2:b6:72:42:7f:6e:
ca:8f:fa:c7:fe:fb:3f:7f:1f:ce:6a:69:c3:74:fa:
d8:8d:fe:3e:6c:cf:e1:0e:a8:f3:89:24:28:da:a5:
64:99:5f:c3:7a:db:49:ce:cb:0a:af:56:1e:97:ec:
d7:37:eb:b3:d5:b1:4a:f9:2a:f7:9c:e6:e7:6b:ba:
41:3f:26:44:63:66:1a:a9:47:4c:f7:1b:a5:88:2d:
19:ce:da:4c:c9:5e:04:0b:53:86:a0:80:54:55:2f:
3b:b7:47:26:8e:32:b6:0d:37:e0:71:85:7d:17:7f:
b0:02:b9:03:91:a7:74:14:f8:f4:8e:fc:8e:36:88:
d6:60:79:f9:96:aa:0b:04:e9:d0:60:3a:ff:5f:6a:
de:ef:46:c7:e2:91:5c:86:dc:76:8e:ad:d7:a6:af:
8d:9a:a5:f7:1a:78:4a:e4:d0:43:86:7b:b6:ce:dc:
36:a5:7b:af:38:cd:75:46:f2:16:22:80:e6:9b:d1:
3d:41:16:fe:b6:c4:31:6a:1b:26:8a:7d:7b:0a:59:
a3:5d:6d:06:bb:5f:eb:d9:39:b2:6f:1a:a6:bc:63:
9a:52:7f:94:b4:46:82:81:b4:c3:76:f9:b7:c6:72:
d3:bc:da:a1:54:ab:1c:23:1d:94:f7:54:d6:7c:fa:
15:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5A:7C:C1:46:88:08:21:0C:AC:A6:30:21:FF:31:92:55:E4:48:2B
X509v3 Authority Key Identifier:
keyid:4A:35:21:3B:AD:16:99:48:08:38:C0:55:80:F0:78:E2:41:DE:B5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2a:12:4f:22:19:ae:68:30:0e:c3:61:9d:26:e1:04:6f:69:
e5:0e:03:ac:29:64:f5:50:8e:de:f3:ad:7c:18:53:b3:03:23:
30:fe:2d:d2:0d:c0:b0:9a:74:17:33:77:5d:c4:3c:35:3c:5a:
6f:65:11:d4:45:57:f1:37:15:88:68:79:18:5a:92:41:a7:f5:
86:7a:0f:00:00:c8:53:51:35:f0:02:85:72:fb:f5:40:ca:8b:
7f:a6:10:27:dc:4e:b3:ad:60:06:3a:a8:eb:6a:69:7e:09:c1:
90:e9:56:9b:79:f4:72:11:ff:84:dd:de:60:6c:12:5a:a8:69:
36:c2:a6:4c:5b:20:4d:a4:04:30:c1:e6:e6:88:9e:b1:5f:40:
80:1a:c0:4c:f3:ae:5d:95:bc:93:41:79:cf:da:40:52:24:b1:
b8:be:1f:1b:61:19:23:32:3d:10:bc:d2:97:2c:e3:c7:e3:e9:
34:26:d3:c2:76:b4:89:aa:36:7c:6b:c4:f2:e4:fe:3c:47:5e:
fe:35:7d:4d:1b:d5:7b:9b:8e:6d:a2:c5:c3:07:cf:89:34:1f:
6f:2f:b4:0e:e9:72:a7:ee:fb:b3:79:59:9f:58:9c:aa:b0:20:
01:0b:1f:22:19:a5:82:8e:2a:a5:e3:f1:b8:9c:f1:32:05:3b:
5f:e2:43:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:12:05 2026 by rpki-client