Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
File: sjby5CUi6Y03a-OKieXdUau_eZY.mft (raw, json)
Hash identifier: CZuivmXsEjQBSZHGadck9eZZm5sI2UoJvxg+TiSH1Ic=
Subject key identifier: D0:C3:C0:D6:5D:EA:B8:CD:1C:D6:E0:F0:DB:B4:D5:97:A8:0B:35:C5
Authority key identifier: B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
Certificate issuer: /CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Certificate serial: 01A0EC65CD50F9C40901AA9C87EC806630A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
Manifest number: 1A7D
Signing time: Tue 29 Sep 2026 09:01:29 +0000
Manifest this update: Tue 29 Sep 2026 09:01:29 +0000
Manifest next update: Wed 30 Sep 2026 09:01:29 +0000
Files and hashes: 1: BQSGEx3nMb3rW3Le5hymWyu8-YU.roa (hash: S7mWCQBW//r+Jv4L1fzMRolM2RhYHtuAZtqku2trt+E=)
2: _JF8Eg2LajBMQ-wk536FOe9jq_A.roa (hash: n3KkRLrkwjt5uz08CMrAQjO1W+ar0ekBVWg2d9z/IMg=)
3: oX6Il5fRV1X5jAgqxERBXvUP_Tw.roa (hash: XUq2WuxGzyAj/pRWgnx4uOuNcbSM05FoBf026KrRFWM=)
4: sjby5CUi6Y03a-OKieXdUau_eZY.crl (hash: 0Pn9guc1+uUKgN1LM/cs7OfhF8SwZifTn+U8UjfyMlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:65:cd:50:f9:c4:09:01:aa:9c:87:ec:80:66:30:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Validity
Not Before: Sep 29 09:01:29 2026 GMT
Not After : Sep 30 09:01:29 2026 GMT
Subject: CN=d0c3c0d65deab8cd1cd6e0f0dbb4d597a80b35c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:5d:ce:16:21:bd:e9:66:93:c2:a5:de:c3:
34:4a:f5:50:f7:18:e5:a6:b1:84:02:51:59:14:14:
b9:3c:c4:82:1d:f5:6c:75:15:d5:8a:fc:24:f1:09:
a4:8e:fd:03:24:f8:c1:15:0c:d0:e3:cb:97:ff:4c:
4d:06:f5:94:2f:cd:95:fd:3c:87:74:94:11:c7:8e:
f6:c7:c0:b9:f2:bf:d6:33:eb:1a:0a:29:34:19:f2:
7a:79:54:82:e9:7c:69:dd:61:03:13:2b:98:73:da:
80:03:a3:f7:a5:c3:b3:37:91:72:b5:19:83:bc:82:
da:8e:f1:f3:48:f6:53:8a:b9:c1:b8:e6:b9:26:e8:
93:a6:0b:c1:0e:6b:c9:68:58:cd:ee:de:10:78:ce:
d2:ab:db:dc:13:40:f2:5b:91:c3:8f:92:5d:7c:75:
61:ec:b8:e7:bc:79:93:41:f9:4f:25:8f:c1:be:5c:
82:75:a6:3e:09:5d:59:b1:95:73:c7:9f:d5:4c:7a:
82:16:2b:ff:ea:36:44:59:09:73:c4:35:2f:f5:b4:
55:23:8e:95:1b:e7:93:17:42:1d:c0:d2:7b:90:75:
89:5f:51:f3:29:c0:d8:7e:a0:83:46:fa:dc:1f:ed:
9c:37:8f:33:e0:be:04:b4:93:f7:35:36:e2:61:70:
f3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C3:C0:D6:5D:EA:B8:CD:1C:D6:E0:F0:DB:B4:D5:97:A8:0B:35:C5
X509v3 Authority Key Identifier:
keyid:B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f7:35:24:be:f1:e7:b8:07:d3:52:54:31:c2:fe:56:be:04:
bd:a4:37:18:d5:0d:3e:30:ab:a4:26:ef:48:3a:00:f4:1a:f3:
41:70:9a:58:31:ac:61:04:66:c5:2a:e4:22:f3:2e:a9:73:3e:
74:3b:6d:90:69:a7:2d:e9:c9:5a:96:f8:69:a9:91:82:46:c2:
55:bf:34:87:71:64:78:b2:b6:7b:98:86:44:4f:36:bc:6c:6b:
dc:79:b1:2d:b9:a9:d9:7c:12:e2:04:cd:6d:02:06:33:d3:d5:
34:24:1e:1a:35:61:65:bb:53:31:78:bc:4a:61:13:81:23:3f:
7d:5c:49:09:40:05:e3:05:a9:e8:23:10:e8:97:00:cc:54:b4:
4b:20:7e:c6:77:b4:ab:a7:bc:83:97:d7:6f:b1:5c:d0:7c:f9:
66:80:8b:3a:72:b9:4d:06:d9:f1:06:6d:85:1e:51:7a:4c:43:
65:a4:df:f4:f0:69:01:18:fd:03:2b:8a:2f:76:81:f9:fa:f7:
ee:a3:cd:df:58:50:7b:5b:0c:96:50:24:4a:16:c7:0f:79:52:
63:c9:52:60:e8:b9:e6:5d:b6:36:13:1c:68:65:4f:ea:52:92:
7e:cc:62:6c:10:a9:8e:25:9f:7c:6e:c6:3c:06:52:8e:ff:78:
ba:6b:45:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:11:17 2026 by rpki-client