Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
File: SJwmPoGEhs_YMcJF3frMqR-9gcA.mft (raw, json)
Hash identifier: HJdoK9+xSWSEx0M6k5cimo+LUJFVCkf3mMP/5Osl2V8=
Subject key identifier: 31:13:F3:97:F2:CC:6B:4E:67:F1:30:EE:F2:CA:99:49:EF:F2:9D:D4
Authority key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
Certificate issuer: /CN=489c263e818486cfd831c245ddfacca91fbd81c0
Certificate serial: 019CADC7F6AD62B32633AE9C02028B73B57E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
Manifest number: 04CC
Signing time: Mon 02 Mar 2026 09:01:28 +0000
Manifest this update: Mon 02 Mar 2026 09:01:28 +0000
Manifest next update: Tue 03 Mar 2026 09:01:28 +0000
Files and hashes: 1: 5JcOQzq7WzmjMFbG4IJGxYNeKgo.roa (hash: gSdvGPuX99g6e3AjEkD3xzqC8m6WCx9LmxK0VDXFz5E=)
2: QsLpU8hJ4ATxawddQAfsVH71Yrc.roa (hash: 8LAE+r4LCdI7plc1J5/y/lKsTqyUBWlK/iV7nFAj/Ks=)
3: SJwmPoGEhs_YMcJF3frMqR-9gcA.crl (hash: EHbzBmKB/Qr5QdsVfbA/bR1353zjR3x3lWaUcCZRtC4=)
4: tjcd2B2MoHez1-FLdOBN_2wuTBg.roa (hash: nHwqBLL+1vMmNTrdugL+2uUX5fBDVoNX8Hv9HhSFUYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:f6:ad:62:b3:26:33:ae:9c:02:02:8b:73:b5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=489c263e818486cfd831c245ddfacca91fbd81c0
Validity
Not Before: Mar 2 09:01:28 2026 GMT
Not After : Mar 3 09:01:28 2026 GMT
Subject: CN=3113f397f2cc6b4e67f130eef2ca9949eff29dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7b:62:0e:79:de:e6:75:1f:04:f0:bb:bd:7e:
5b:cc:26:62:f9:13:4e:13:bb:4d:ae:42:ff:26:6c:
9b:ca:9b:48:75:da:1d:fc:33:6a:1d:a3:4d:99:a2:
69:18:83:93:0e:6b:26:8e:88:73:44:e5:78:5f:cd:
a5:e4:63:4b:de:96:c7:8d:98:3a:48:d6:83:d7:0c:
3c:63:9b:cd:4f:6b:6d:28:c5:7d:f5:bd:60:99:90:
b2:5e:db:9a:43:af:06:b5:e1:e1:04:41:57:ba:1c:
08:a4:21:3a:f1:3e:08:3b:29:66:cb:25:8d:8a:98:
73:2b:a4:e1:f5:cd:16:0b:fd:e5:8a:d7:e6:46:58:
3b:b1:4b:b0:f8:a8:bd:b7:c7:0a:d5:d5:f3:62:d5:
71:0b:07:55:41:24:a6:02:a9:f9:8a:20:1c:19:57:
0b:8f:d2:29:61:4e:08:23:d5:32:ce:2b:8e:46:33:
d1:5b:ce:48:59:b4:03:a7:f1:28:69:82:6e:59:d7:
3d:18:c8:4e:83:4c:8e:b8:2e:86:93:4d:c0:3b:7a:
e0:f1:4f:82:5c:e7:16:90:4e:21:a8:27:0a:10:66:
86:50:f8:95:26:2d:13:97:88:ce:39:e2:9c:5b:88:
c2:2a:ca:1c:71:3a:8d:37:99:c7:a9:28:c1:32:84:
69:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:13:F3:97:F2:CC:6B:4E:67:F1:30:EE:F2:CA:99:49:EF:F2:9D:D4
X509v3 Authority Key Identifier:
keyid:48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fe:94:76:a9:71:0b:90:0c:f0:e4:73:74:95:aa:07:fe:73:
ba:2e:d9:81:ca:51:2c:6b:e5:0f:28:bc:fd:28:d6:66:da:d9:
c0:97:e5:b1:8b:c2:e2:2f:92:2a:f6:0a:f9:28:74:19:fa:1c:
cd:f6:82:f7:b9:03:83:41:cd:26:b2:82:82:b1:60:fe:0f:f4:
4b:a1:c1:ce:b0:8a:f3:c9:84:39:0c:38:40:db:01:77:5f:22:
f9:4e:df:53:89:4f:cb:2f:29:e2:b0:a5:01:5c:1b:a6:b2:da:
1e:79:b8:cc:82:2b:84:2a:5d:56:97:79:27:3e:56:46:56:aa:
25:fd:ae:4d:fe:1f:15:ed:1d:3e:71:4e:16:24:e4:23:f8:9d:
7b:c6:42:2b:71:e7:a9:a5:15:d5:2b:0f:b2:78:68:d1:0e:5c:
3c:b6:1b:81:a3:e3:30:5c:28:3f:5f:1c:91:37:5d:29:ba:d1:
7a:ad:7b:7f:09:da:30:27:b0:29:dc:25:a7:ee:fd:bb:06:2f:
e6:8d:12:62:46:4d:e8:b1:4e:08:d2:12:e9:58:3e:89:09:af:
9b:ed:05:82:88:e2:64:ee:4b:1f:41:06:7d:4d:01:b7:ea:13:
93:51:14:91:8f:0a:66:08:ba:84:cb:b8:2d:26:8d:f6:17:c3:
99:36:26:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:07:48 2026 by rpki-client