Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
File: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft (raw, json)
Hash identifier: xw4IAKlubh5/55OFcIVc4a9L7T8wlN7DmnwV3QN25BQ=
Subject key identifier: DC:96:1F:E8:47:58:0B:7E:29:86:48:AC:55:A8:8D:8F:C6:2B:AF:7D
Authority key identifier: 4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
Certificate issuer: /CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Certificate serial: 019D99993A38CAC2A15571C0FDA3AAB29BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
Manifest number: 170F
Signing time: Fri 17 Apr 2026 04:00:49 +0000
Manifest this update: Fri 17 Apr 2026 04:00:49 +0000
Manifest next update: Sat 18 Apr 2026 04:00:49 +0000
Files and hashes: 1: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl (hash: U4gtIIZEXlGJzlx5jYIn7AmDb5AFhPXYHjhnbdixrvw=)
2: Yj8wjFZpgFB7N8QVvr8_EZtHm74.roa (hash: VttLajARZj1VpP60iZ08cMDJLdMSXXWBBP02KPI/yEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:3a:38:ca:c2:a1:55:71:c0:fd:a3:aa:b2:9b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Validity
Not Before: Apr 17 04:00:49 2026 GMT
Not After : Apr 18 04:00:49 2026 GMT
Subject: CN=dc961fe847580b7e298648ac55a88d8fc62baf7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:4e:de:72:85:d5:e9:ff:bc:e9:ee:24:66:
ed:42:a5:63:d0:a6:da:58:2f:03:76:ce:25:ae:01:
2e:95:b3:da:97:15:c7:13:cd:d0:28:21:b9:a2:56:
57:8f:a1:82:18:e0:e9:2a:81:5b:55:0a:2b:cb:99:
29:f6:51:43:ca:3f:e7:8e:81:ab:9f:c7:7b:7e:8d:
e5:92:7d:37:39:8a:1c:3b:74:ca:9d:ff:15:6f:d9:
e0:19:a0:16:fe:68:8c:7c:31:f9:60:6b:29:2e:a2:
23:5f:5a:6e:15:e1:94:9e:c7:f7:ce:ff:d7:a5:08:
15:dc:59:d6:f5:36:c2:d0:c2:f1:0d:69:85:33:15:
61:ca:2c:3f:03:5f:a4:ad:e4:47:cb:b9:f1:28:84:
27:98:21:2c:b8:2a:da:50:c4:82:df:91:0c:5f:54:
33:c1:0f:88:3f:f2:a0:88:e6:0c:24:c6:86:73:92:
06:fe:52:0b:12:ed:5f:74:41:fd:37:5a:66:e5:fa:
1d:63:81:6a:ac:2a:ee:4a:ff:aa:70:fd:14:7e:14:
5b:ff:81:61:df:c8:96:19:6e:98:b3:03:40:97:42:
9b:dc:de:84:5a:0a:32:95:29:de:92:2e:cf:49:08:
ce:47:25:60:ef:cc:3d:d2:e8:18:5b:33:40:13:33:
bb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:96:1F:E8:47:58:0B:7E:29:86:48:AC:55:A8:8D:8F:C6:2B:AF:7D
X509v3 Authority Key Identifier:
keyid:4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a2:3c:79:b8:37:68:51:19:3d:28:be:95:d6:00:ab:cd:c1:
b7:be:96:75:ef:89:6e:3c:5b:0c:35:f9:c0:e3:e4:9e:0e:91:
74:a4:39:c4:09:8c:07:bc:f5:6f:ee:6f:a3:3d:eb:02:4a:59:
01:16:9f:d6:72:db:66:f1:b1:49:7b:7f:f4:fd:4d:33:2b:0d:
8c:58:8b:08:75:68:6f:72:25:5f:0e:f8:63:df:e0:79:b7:b9:
42:c9:26:2a:2a:38:ab:cd:3b:b3:41:85:5a:39:3a:8e:2f:c4:
15:41:ee:c4:4a:9c:7d:91:a0:8b:11:98:9f:57:5c:e1:81:20:
2a:d1:28:87:ee:15:8a:69:70:19:12:19:5f:2c:9a:6f:38:b1:
fe:58:0b:f3:ab:ca:0b:40:a4:d8:5e:39:15:c8:4e:f1:e2:fe:
89:87:f1:70:c7:3b:f9:7a:67:bd:d3:5e:e2:c5:c2:87:4b:a6:
40:ed:75:65:3f:e5:f1:36:d7:79:3d:58:8c:9a:29:7d:c6:70:
17:84:02:e8:8a:7a:23:53:5e:42:17:73:67:b9:07:48:90:88:
89:2f:ac:36:75:12:7b:07:48:52:d2:ef:c6:8b:e6:fe:b4:f2:
f5:54:e9:d8:3b:15:3f:1d:2b:83:84:41:68:88:09:fd:ce:37:
f5:25:02:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:09 2026 by rpki-client