Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
File: sjby5CUi6Y03a-OKieXdUau_eZY.mft (raw, json)
Hash identifier: GneNVqytdcZqVFvpHMX1nBPxFhmY4IBQ1oBxnoDXRYE=
Subject key identifier: 00:63:FB:F5:C4:6E:22:ED:C5:9D:06:1C:4C:75:C7:97:D3:72:8F:3E
Authority key identifier: B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
Certificate issuer: /CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Certificate serial: 019D26CCFBC7E48669292F21CFE6BE5F9375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 21:01:01 +0000
Manifest this update: Wed 25 Mar 2026 21:01:01 +0000
Manifest next update: Thu 26 Mar 2026 21:01:01 +0000
Files and hashes: 1: BQSGEx3nMb3rW3Le5hymWyu8-YU.roa (hash: S7mWCQBW//r+Jv4L1fzMRolM2RhYHtuAZtqku2trt+E=)
2: _JF8Eg2LajBMQ-wk536FOe9jq_A.roa (hash: n3KkRLrkwjt5uz08CMrAQjO1W+ar0ekBVWg2d9z/IMg=)
3: oX6Il5fRV1X5jAgqxERBXvUP_Tw.roa (hash: XUq2WuxGzyAj/pRWgnx4uOuNcbSM05FoBf026KrRFWM=)
4: sjby5CUi6Y03a-OKieXdUau_eZY.crl (hash: vBomsogj2PSeGJLeZYexdtYFqJD1UF4T1rsKlCuTSac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:fb:c7:e4:86:69:29:2f:21:cf:e6:be:5f:93:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Validity
Not Before: Mar 25 21:01:01 2026 GMT
Not After : Mar 26 21:01:01 2026 GMT
Subject: CN=0063fbf5c46e22edc59d061c4c75c797d3728f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:84:cb:e1:d1:1a:cf:ca:72:bd:26:ec:9f:
c1:ce:3f:65:2b:e0:ef:56:5b:a8:a8:d3:7b:cf:0b:
06:3e:1f:0a:1a:5d:f5:d2:ef:6b:3a:bb:b0:eb:b1:
2a:cc:7d:d1:d0:00:42:82:b5:3c:44:fe:24:84:6c:
fc:1d:51:01:de:26:c9:11:6e:cb:ba:e6:af:59:b2:
49:f9:7a:bd:59:23:b1:ff:65:14:53:d0:78:02:93:
a0:62:e5:3d:7f:94:52:8b:83:56:ac:9b:a3:f1:82:
9b:3e:71:cb:c8:ad:aa:8d:99:a5:76:78:98:1f:40:
ad:89:23:0c:9a:a4:8f:2d:00:7f:c3:46:22:0f:41:
b7:b3:55:23:9d:cb:f5:99:5f:ee:76:6c:92:eb:31:
ef:2b:99:c1:54:e0:ad:a7:8d:b7:f3:c3:59:d4:88:
93:99:29:b2:1f:f1:2e:8d:6f:f4:61:45:c1:aa:81:
3c:8c:66:bb:b4:54:20:2a:5f:45:5e:f0:77:0b:ee:
a4:9e:4b:83:20:c8:78:aa:19:99:c9:b5:f0:ca:fc:
5b:04:70:3a:e5:f7:91:9d:dd:01:94:54:57:aa:4d:
0f:79:05:6f:12:17:f4:ef:76:09:a3:84:68:e3:77:
c9:ad:79:09:95:cd:e0:7b:66:61:ed:e1:1f:fa:1d:
34:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:63:FB:F5:C4:6E:22:ED:C5:9D:06:1C:4C:75:C7:97:D3:72:8F:3E
X509v3 Authority Key Identifier:
keyid:B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3b:c3:52:7f:a8:13:9f:bf:97:44:8b:5e:0b:b6:51:93:84:
2d:e0:2a:3c:37:e1:1c:86:56:3a:4c:f5:62:bd:a0:61:90:9e:
51:07:0c:c0:a4:13:3a:76:51:e6:93:71:f9:60:87:68:e1:3d:
1b:82:cd:1c:a6:49:be:96:c7:3f:08:7f:e9:ce:87:fb:6e:4e:
7c:7c:69:11:64:ad:61:b0:5e:c1:1e:33:c1:ad:6d:72:5b:c5:
4f:51:7c:01:d5:83:9c:e5:50:2c:a8:bb:1d:87:a8:8f:17:cf:
e2:8d:2f:cb:04:8e:93:fc:fe:d5:61:a6:69:45:aa:14:24:3c:
a1:38:7a:25:38:cf:33:b5:5e:4b:a5:d2:ce:59:1c:e8:dc:53:
89:b7:d9:fe:5c:e9:35:3d:94:a9:c4:d5:bb:79:b7:27:f4:ef:
13:14:07:0f:7b:a2:70:c3:d6:d2:14:92:89:5c:9e:41:8a:5e:
1f:17:94:1f:63:ff:2c:0b:57:0e:03:e8:6f:83:08:d2:9c:cc:
fb:92:54:ff:a3:00:6d:59:c3:12:56:b0:92:7e:38:ce:7f:ff:
42:52:20:c6:2b:50:1c:93:87:47:63:83:9e:20:c7:5e:79:b0:
5b:06:bc:c5:0f:71:4d:65:a0:65:a8:42:0a:d4:af:29:81:bd:
93:3d:45:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:45 2026 by rpki-client