Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
File: sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft (raw, json)
Hash identifier: BnAELbYcCjobj49qjEY3qcHODRu1CmaIdCPfoj9sDoA=
Subject key identifier: 89:42:33:8C:CD:BD:B4:51:8F:6A:6D:FE:20:EE:5F:A1:94:63:E0:52
Authority key identifier: B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59
Certificate issuer: /CN=b092425ab7d66bab711fbaa22757377807834159
Certificate serial: 01A0C557EA42ABE5961C45FD4FD53718BD1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
Manifest number: 15A7
Signing time: Mon 21 Sep 2026 19:01:08 +0000
Manifest this update: Mon 21 Sep 2026 19:01:08 +0000
Manifest next update: Tue 22 Sep 2026 19:01:08 +0000
Files and hashes: 1: ob4RLJ_y_7wEvkHKUSSog54LQNw.roa (hash: Jads8EK5VWX+m/AfmuiROvWcFDNzh7waaTO1j/WWRvo=)
2: sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl (hash: fOEUuJBnb3C9DPkWaeMZRwyPReOx5/SV7Q+ZHpxOAGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:ea:42:ab:e5:96:1c:45:fd:4f:d5:37:18:bd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b092425ab7d66bab711fbaa22757377807834159
Validity
Not Before: Sep 21 19:01:08 2026 GMT
Not After : Sep 22 19:01:08 2026 GMT
Subject: CN=8942338ccdbdb4518f6a6dfe20ee5fa19463e052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:bb:a6:09:5f:ab:9c:63:fe:7c:52:5c:40:
f4:49:9a:5e:6d:e4:34:2f:b9:8b:69:89:42:8e:63:
e5:1e:c7:fc:f8:b6:6f:86:ff:7f:3c:30:39:18:ba:
e6:95:03:2f:fb:41:37:b3:87:24:a7:9f:94:65:d3:
bd:1b:c5:b2:d9:b3:77:b4:64:e8:41:da:c9:64:9a:
ff:8f:f1:73:fb:85:1a:cc:41:f9:26:5a:38:2b:83:
9f:15:4d:8d:f0:9a:d7:b2:d6:97:fc:a0:17:03:52:
d2:ed:97:9b:dd:6d:f3:5a:c4:c3:5e:41:6e:b1:94:
73:7c:64:1d:79:de:ff:93:80:ad:53:bc:d4:fb:cc:
9f:21:00:51:34:2d:e3:26:8a:20:7b:d3:4b:e4:71:
60:40:0d:80:51:1b:4f:34:80:01:dd:c4:69:03:81:
b7:6c:c6:74:1e:8b:9e:25:c3:f7:47:6e:b5:0c:37:
f0:1d:08:5d:55:ff:3b:99:29:b8:c0:24:74:ee:21:
f0:a3:78:7c:9a:fe:4f:7c:0d:e9:ed:ec:f0:c3:27:
57:54:0b:d2:3c:d6:e5:7a:6f:6e:89:0d:8b:eb:5a:
8e:42:83:dc:ae:b2:16:cf:d7:4a:9c:d1:c7:a5:63:
ad:7b:24:ae:86:85:e4:01:ff:b3:6c:d0:10:0d:a8:
52:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:42:33:8C:CD:BD:B4:51:8F:6A:6D:FE:20:EE:5F:A1:94:63:E0:52
X509v3 Authority Key Identifier:
keyid:B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:17:ba:ae:76:e5:ab:6e:58:11:8d:b4:fc:13:8d:59:2a:69:
26:a2:c5:cc:cc:e1:c5:cd:7a:e4:b4:a0:21:2f:40:0e:48:04:
cf:bc:31:d3:0a:c9:ae:2f:f8:4f:2a:dd:40:d2:27:9a:f8:2a:
2f:7a:90:8c:a7:63:f1:14:eb:f9:b6:84:79:2f:7e:fa:3c:b5:
eb:b0:8a:f8:27:85:29:b0:18:aa:be:36:a1:18:08:0b:3c:27:
5a:5c:ba:c4:32:c6:6b:67:72:0b:58:79:b8:b0:98:a9:28:0a:
7f:f8:48:8f:be:9f:49:2e:11:96:0b:62:a6:32:a1:fe:ec:ec:
8f:18:28:59:73:b1:d9:60:28:2e:b3:55:1d:2f:be:32:b5:d6:
49:ff:aa:17:bd:8e:d5:28:0b:a3:0a:52:20:ff:57:45:95:f8:
32:5e:f9:db:39:d4:69:93:75:e2:19:d3:8b:e3:27:df:4e:f8:
ff:66:88:23:95:8e:73:6d:14:43:18:4b:a2:2b:56:41:39:ff:
f9:51:cd:d9:6c:d5:29:db:27:3c:59:10:68:9b:1a:f1:58:6c:
57:76:c7:cc:5e:93:82:70:73:99:48:39:b8:81:a3:b2:55:cd:
65:be:0f:0f:26:5f:3a:fe:6f:8a:cc:1d:5f:96:8d:c7:19:96:
21:d0:48:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:55:08 2026 by rpki-client