Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
File: sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft (raw, json)
Hash identifier: ni7SNEZj2w01HoJvryKgpOamYmng48r6or6pmaFqkiw=
Subject key identifier: 87:4D:88:65:38:E1:EC:C5:CB:C9:DE:D7:0E:CF:68:4E:6E:94:2E:34
Authority key identifier: B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59
Certificate issuer: /CN=b092425ab7d66bab711fbaa22757377807834159
Certificate serial: 019CAAC676A130DB8DCF8D0A601BF7550F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
Manifest number: 1387
Signing time: Sun 01 Mar 2026 19:00:58 +0000
Manifest this update: Sun 01 Mar 2026 19:00:58 +0000
Manifest next update: Mon 02 Mar 2026 19:00:58 +0000
Files and hashes: 1: ob4RLJ_y_7wEvkHKUSSog54LQNw.roa (hash: Jads8EK5VWX+m/AfmuiROvWcFDNzh7waaTO1j/WWRvo=)
2: sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl (hash: TGi4fS68YFmoCPNDPvqehpMXlKVuJBS4IesdF3Vg2Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:76:a1:30:db:8d:cf:8d:0a:60:1b:f7:55:0f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b092425ab7d66bab711fbaa22757377807834159
Validity
Not Before: Mar 1 19:00:58 2026 GMT
Not After : Mar 2 19:00:58 2026 GMT
Subject: CN=874d886538e1ecc5cbc9ded70ecf684e6e942e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:e0:8f:ae:b0:94:4c:4f:1d:14:ff:26:40:
11:73:9d:04:69:de:95:c4:01:69:a4:4c:38:e7:aa:
3a:20:e5:33:bd:7b:ef:04:5f:f2:f3:f5:cd:8e:ff:
a3:99:6f:bb:d1:aa:b8:41:94:c4:f7:39:5b:3b:35:
37:ec:e4:ea:07:5f:6e:df:ac:38:92:77:f6:34:39:
e6:f5:8e:2f:1d:82:5c:50:c7:5f:4c:a1:87:17:7f:
78:5b:6d:20:ca:d2:e8:14:f5:93:a3:7b:1a:b3:45:
76:f8:13:ea:e5:6b:55:6d:9f:3a:34:3e:5a:f8:ee:
cd:10:82:74:1e:4b:1c:b3:97:03:2b:9e:17:01:db:
0b:27:25:94:0f:1d:f2:27:9b:27:72:3b:d0:ac:a7:
e4:c6:8a:83:c0:09:ad:08:d9:80:32:2f:a1:71:72:
eb:94:9f:e6:7b:be:41:28:1f:3e:74:f4:12:df:1b:
b0:38:b7:37:85:28:2b:e4:f5:88:58:08:81:cf:2d:
e0:8e:ea:57:60:21:64:03:26:64:38:fa:8f:c5:80:
99:80:cd:8f:89:21:54:8e:32:5e:c7:52:73:63:de:
86:2c:55:fe:5e:a5:7b:b6:5f:c8:f7:b4:67:36:ae:
a2:7f:16:01:32:f8:88:fd:63:91:8f:ee:5a:8d:b9:
24:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4D:88:65:38:E1:EC:C5:CB:C9:DE:D7:0E:CF:68:4E:6E:94:2E:34
X509v3 Authority Key Identifier:
keyid:B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:90:db:ba:6f:57:8f:4c:d6:a3:f4:ea:1f:6c:42:ce:f9:cd:
1d:17:f3:70:ca:fa:ac:7d:de:17:e3:b0:8f:ab:03:7e:15:c8:
50:82:63:1d:2b:37:99:73:e2:4f:a7:49:27:9b:a8:e1:4e:57:
bd:4e:fb:86:79:a3:6e:2e:9a:d1:c6:9f:ac:7b:72:f0:f2:01:
90:6f:d0:43:f1:a4:5c:93:9d:2b:18:35:76:2d:79:b1:36:5f:
0f:8c:8d:fc:68:09:46:46:06:0c:f7:95:14:8c:4c:2b:74:5a:
56:10:eb:52:c5:03:5d:08:21:6d:8e:74:bc:26:6b:f6:e7:89:
fc:c4:1f:0d:53:e1:82:84:1b:ac:b9:20:f9:e7:5d:c8:3a:a0:
27:fd:71:43:c8:a2:41:40:17:33:41:55:1b:ec:e5:cf:c5:98:
65:59:29:7a:d9:05:88:35:0e:c7:77:58:ab:f5:e5:f4:bd:fb:
9a:d1:3f:d9:f8:2b:3d:96:55:81:0a:b8:d8:7c:29:ae:05:f1:
e1:09:de:c7:30:cd:b4:2e:c7:04:8a:cc:c8:4f:cb:54:e3:42:
7d:66:5b:66:0a:77:f3:59:90:ac:df:12:30:1c:b2:e8:2f:70:
72:b3:3a:61:45:42:a5:96:78:91:b0:45:9a:27:b8:3a:be:27:
c6:a0:00:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:30 2026 by rpki-client