Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
File: SjQVWNugttuUxVzgbjBv9lGdbvE.mft (raw, json)
Hash identifier: rS7vWaW7vJg8HtJ8VkZ1mRzL/Bwmey+WOwh2U3BsrzU=
Subject key identifier: 88:24:BF:92:D6:85:60:23:CE:0D:A2:32:1B:12:F2:B2:84:CC:7A:90
Authority key identifier: 4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1
Certificate issuer: /CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1
Certificate serial: 019D9A7544627A99E1EDFC9C832C1C6A898D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
Manifest number: 0AFA
Signing time: Fri 17 Apr 2026 08:01:09 +0000
Manifest this update: Fri 17 Apr 2026 08:01:09 +0000
Manifest next update: Sat 18 Apr 2026 08:01:09 +0000
Files and hashes: 1: RS_ewMX54hVbpRD6ei0HJL0oRHE.roa (hash: I5QkBNTE69fpfHSb13XFTFHNBBve1NDU9UJ/JapJNdQ=)
2: SjQVWNugttuUxVzgbjBv9lGdbvE.crl (hash: vL4+P2qooxOO8RUpajVI/Vpgk1pWD3/AdY2tht/duSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:44:62:7a:99:e1:ed:fc:9c:83:2c:1c:6a:89:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1
Validity
Not Before: Apr 17 08:01:09 2026 GMT
Not After : Apr 18 08:01:09 2026 GMT
Subject: CN=8824bf92d6856023ce0da2321b12f2b284cc7a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:a7:0f:3b:77:99:49:62:d8:62:ff:bd:1b:
58:d1:ce:79:d9:83:49:e0:69:5d:06:df:be:5a:29:
51:00:7e:0b:45:99:2c:d6:7b:57:fe:66:d9:12:f7:
ae:4e:8c:5e:29:d9:34:69:3b:2d:f4:d6:7c:b9:a2:
c0:a1:89:c9:da:96:33:d2:28:5e:df:a1:06:b5:c5:
ed:4c:60:9f:09:ad:32:8c:c5:1c:a2:55:54:f0:00:
de:70:ea:c8:44:f6:3a:dd:22:ef:08:56:1e:30:08:
bf:fc:fd:77:34:6a:9f:00:c5:cc:74:03:55:c0:3b:
b6:48:ed:4d:7d:6d:04:a5:61:6b:a3:7e:c0:ef:84:
f3:93:99:fc:d7:8a:e6:27:06:70:b9:7d:93:6d:fe:
68:17:fe:2a:62:bf:8e:e1:e3:72:34:84:a1:f8:bf:
d3:0b:9a:c2:db:7a:de:32:e2:ba:f4:28:2a:68:f2:
13:e6:ad:4e:b4:5e:ac:58:b1:3f:66:a5:d1:60:f6:
4d:2e:75:a9:d4:88:10:31:69:f9:b2:41:8b:ea:f5:
8d:78:84:37:f3:3c:a8:7a:4a:9c:3d:1e:42:56:14:
ec:52:05:e3:c6:5a:3c:08:86:c2:93:62:06:2e:ef:
08:03:2a:d5:58:2c:19:c8:12:43:ca:10:6c:1a:e3:
dc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:24:BF:92:D6:85:60:23:CE:0D:A2:32:1B:12:F2:B2:84:CC:7A:90
X509v3 Authority Key Identifier:
keyid:4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c6:b6:37:81:e3:52:16:4e:a7:dd:08:30:57:e3:b3:09:22:
b3:08:ed:0e:ce:43:82:df:12:40:cb:50:67:34:f9:a5:8f:65:
8b:19:f8:47:88:70:4f:73:b2:07:50:29:de:bd:04:86:9a:94:
69:5c:84:c7:c4:8a:fe:37:34:36:eb:47:e2:1c:22:2b:3c:a7:
01:77:02:b9:a5:1b:1f:6f:9b:c0:7c:8a:09:0a:21:64:b1:c6:
7a:de:45:6f:0d:90:78:2f:18:92:e3:06:80:80:a4:26:0b:a6:
c9:79:68:46:01:4c:b3:72:f8:b7:1b:5e:43:88:d8:3d:28:23:
72:3b:f1:13:99:0c:dd:c5:b4:ec:63:51:59:4e:e5:6e:ca:dd:
6d:b8:6c:93:95:55:91:01:fb:57:ca:23:22:cf:ec:09:56:56:
0a:7d:5c:bf:22:68:db:d6:28:0a:b3:03:46:54:a4:ed:c4:cb:
ed:79:81:84:09:fb:42:92:ed:e5:e4:40:a6:10:f6:f1:79:3c:
4e:c2:f1:3b:be:a5:c8:ee:10:b8:54:18:76:a9:b0:ff:09:a4:
d9:5c:6e:8b:14:ff:21:bc:cc:cb:5d:99:6c:3d:4f:b6:90:90:
6f:8e:34:20:0c:0f:e5:40:00:27:25:4c:4d:c6:9e:6b:74:41:
ea:3c:a0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:38:05 2026 by rpki-client