Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
File: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft (raw, json)
Hash identifier: EA4+FNsL2uzyXO0V5t7ElQdO0t3+RwF95nT1JGxA5YQ=
Subject key identifier: 09:23:12:E4:18:CE:63:44:0E:4A:B6:E3:E4:2F:0F:4B:37:73:0C:22
Authority key identifier: 4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
Certificate issuer: /CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Certificate serial: 019EC4EF02414EBF48F0F0D00371D4B40377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
Manifest number: 17AA
Signing time: Sun 14 Jun 2026 07:00:58 +0000
Manifest this update: Sun 14 Jun 2026 07:00:58 +0000
Manifest next update: Mon 15 Jun 2026 07:00:58 +0000
Files and hashes: 1: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl (hash: Lsebi8R7+oBnRaTgeSDsnZL5TD9mNVgMdanDsqwcoGw=)
2: Yj8wjFZpgFB7N8QVvr8_EZtHm74.roa (hash: VttLajARZj1VpP60iZ08cMDJLdMSXXWBBP02KPI/yEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:ef:02:41:4e:bf:48:f0:f0:d0:03:71:d4:b4:03:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Validity
Not Before: Jun 14 07:00:58 2026 GMT
Not After : Jun 15 07:00:58 2026 GMT
Subject: CN=092312e418ce63440e4ab6e3e42f0f4b37730c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:6a:4c:1d:c3:13:7a:66:4e:7e:b8:b7:e6:
b7:5a:2d:4f:b3:ee:27:d9:39:8d:d7:d0:cc:dc:a2:
6d:2f:59:f2:44:23:91:31:19:01:8e:51:3e:75:30:
79:38:99:f6:cd:34:e6:c3:9e:03:91:09:35:b4:c4:
ed:99:0f:fb:63:89:24:c0:43:f7:ba:00:b5:cd:b1:
89:91:5a:2d:62:e6:2b:8c:27:2b:f7:ec:77:a6:28:
86:b4:50:d0:e4:6a:7d:35:fa:16:23:b5:be:87:82:
ac:22:fe:1a:a1:a9:c1:e1:59:ab:37:49:8b:28:f7:
71:75:9c:68:ac:52:06:3d:09:9a:37:08:47:65:d2:
58:8c:c2:5a:a5:e8:32:b7:06:de:99:51:95:f9:3d:
1b:27:e3:d9:c2:b3:0a:0c:69:3a:f3:76:9b:b1:97:
18:a9:e7:da:97:54:8e:48:49:75:12:26:dc:d7:56:
fc:81:7a:c0:01:9b:e9:2d:51:bd:0f:63:61:08:30:
d3:93:3d:2c:59:b3:4b:02:ac:f9:ea:3d:d9:df:0b:
0a:0f:bf:1e:57:fa:2a:d8:6d:29:2e:19:0f:ee:81:
6b:c2:bc:a7:cb:fd:81:94:8d:d2:46:30:d5:7d:b9:
f0:2f:d1:c6:de:05:92:c8:5a:69:4e:13:ff:ea:77:
57:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:23:12:E4:18:CE:63:44:0E:4A:B6:E3:E4:2F:0F:4B:37:73:0C:22
X509v3 Authority Key Identifier:
keyid:4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d0:50:b2:c4:d4:ba:d8:c7:0d:d9:d5:42:bf:67:eb:4a:8e:
95:48:e4:ae:3b:97:77:ea:cb:ef:ac:0e:1d:72:26:5b:9f:03:
61:e5:e5:93:79:56:b1:50:42:a4:03:60:bf:c8:1e:53:50:27:
79:96:e4:d6:73:3c:04:71:29:72:69:8c:e7:46:5f:3c:da:46:
99:4f:34:33:90:2c:40:c1:89:90:8f:21:54:ab:be:1c:2d:0d:
59:e5:4b:dc:0a:1d:52:bb:f5:2f:85:f4:28:34:bb:68:d5:01:
13:4b:9d:33:c7:0a:d5:de:4e:56:86:fc:4c:46:8c:d6:e1:53:
b9:7c:48:33:81:d2:de:6a:17:e7:7f:84:cb:e3:80:86:65:f4:
06:eb:56:5a:8a:62:a7:71:ae:60:e7:30:c9:9c:f8:bc:47:e1:
61:f2:f3:77:4a:ba:1c:da:75:69:2b:fc:84:8b:a6:e6:4e:66:
c5:ce:8c:47:0a:45:73:aa:94:77:e0:b7:47:90:87:2e:db:d8:
2d:90:32:42:b7:5d:d7:32:0a:9f:d9:ae:5a:96:21:d6:18:ac:
7b:26:d5:c1:39:08:3d:ef:d4:0f:c3:e4:43:db:c8:b4:34:4f:
fa:78:5c:e6:23:36:01:e2:9e:6e:5f:f4:a5:d9:9d:2c:6b:a9:
6b:ed:82:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:24:26 2026 by rpki-client