Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
File: sjQvyZcw8qNNCe5LXukheHVs1NE.mft (raw, json)
Hash identifier: o1jj9mWoiwJU3dHGBdE3wfiHw3s+DY64VHFJXwrH+bM=
Subject key identifier: C2:AD:07:D2:84:45:42:8D:15:68:8F:C1:46:44:5C:86:27:E2:71:81
Authority key identifier: B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
Certificate issuer: /CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Certificate serial: 019D28F26D33C818D82E95D7B5998CAF211F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
Manifest number: 0933
Signing time: Thu 26 Mar 2026 07:01:09 +0000
Manifest this update: Thu 26 Mar 2026 07:01:09 +0000
Manifest next update: Fri 27 Mar 2026 07:01:09 +0000
Files and hashes: 1: sjQvyZcw8qNNCe5LXukheHVs1NE.crl (hash: BkYFqCfu+yx6aYb2Touv8p64zAzUVt2j8H/EmyW6XP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:6d:33:c8:18:d8:2e:95:d7:b5:99:8c:af:21:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Validity
Not Before: Mar 26 07:01:09 2026 GMT
Not After : Mar 27 07:01:09 2026 GMT
Subject: CN=c2ad07d28445428d15688fc146445c8627e27181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:24:bd:e6:ef:45:8c:d3:6f:77:d4:20:e9:34:
b2:f2:67:d8:6f:91:73:9b:54:ba:0f:a1:f5:16:a2:
a6:8f:73:aa:13:83:52:a0:80:fe:de:b4:70:91:4b:
35:26:2a:4e:8c:c7:5b:00:cb:fd:c4:8a:d9:aa:14:
dc:18:b7:73:54:60:b5:28:29:e0:0c:34:4f:b9:50:
83:69:83:e7:03:48:f6:38:5e:3d:48:51:97:c3:97:
72:6f:e0:c0:f4:bf:7b:a5:2c:9e:f7:d2:aa:0d:24:
7a:18:e6:2c:05:75:71:70:4e:e2:46:c3:1f:86:81:
c7:92:cb:9a:a0:d7:f6:65:d0:cc:53:11:31:51:47:
f2:5c:70:d0:ec:38:48:b8:3f:2c:be:be:35:c0:a0:
8c:b0:24:a3:da:72:cf:e1:41:62:1a:f7:d3:a7:69:
7b:ea:86:74:b6:46:5a:99:37:64:17:27:67:e8:b4:
19:02:ce:ad:39:57:23:d5:7e:c7:da:e1:04:71:9a:
3c:48:12:5e:43:7f:95:66:b7:23:b7:14:b8:05:7e:
a1:d1:e8:f7:bf:59:0d:98:dc:d7:a3:35:60:3a:04:
fb:18:d5:8c:5f:70:41:a5:bc:99:bf:2c:ce:e5:c2:
17:5d:62:07:35:75:69:69:ba:01:63:cd:95:5f:2b:
e6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AD:07:D2:84:45:42:8D:15:68:8F:C1:46:44:5C:86:27:E2:71:81
X509v3 Authority Key Identifier:
keyid:B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:87:9b:33:2f:a2:66:30:45:6c:00:76:b3:3e:1c:b4:9f:06:
06:cf:9d:14:81:52:d9:fc:b4:b1:34:c4:d6:fa:5a:53:0d:9a:
83:e2:f6:9e:b5:de:14:53:b9:d6:b3:2a:d1:84:5a:00:14:8d:
8c:9e:28:82:80:e1:a9:ef:2d:88:3e:35:b9:96:a9:07:c7:f1:
7f:3e:b3:57:be:7f:0b:47:20:30:f8:86:df:96:9a:11:33:6f:
1f:a2:8c:ef:9d:36:68:d2:43:c5:6d:15:b8:94:2c:a4:c8:89:
53:24:31:9b:d6:64:a6:06:51:a3:bf:2a:3d:c2:6d:b6:10:34:
02:2c:3c:2a:4e:6e:b9:e6:78:17:a6:41:df:2e:e9:6b:f5:6d:
a9:85:2c:a0:7c:dd:19:5c:06:d4:e9:44:60:be:2b:21:55:06:
d0:d9:f3:ac:d7:b5:17:b2:3b:f9:28:01:2a:e9:14:76:d3:cc:
24:45:6f:a0:bb:ef:a8:f0:e5:ea:b2:ec:9a:8c:cb:46:d6:85:
fa:c5:83:da:cf:00:93:f3:cf:61:72:b3:0b:2f:71:07:f6:dc:
b8:63:00:d6:8b:e1:d0:32:6f:5e:b7:08:d4:d0:ff:9f:fa:ad:
84:20:ab:50:a6:80:5f:cf:05:aa:90:2f:96:28:78:dd:01:fd:
fd:63:a9:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8m0zyBjYLpXXtZmMryEfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMzQyZmM5OTczMGYyYTM0ZDA5ZWU0YjVlZTkyMTc4NzU2
Y2Q0ZDEwHhcNMjYwMzI2MDcwMTA5WhcNMjYwMzI3MDcwMTA5WjAzMTEwLwYDVQQD
EyhjMmFkMDdkMjg0NDU0MjhkMTU2ODhmYzE0NjQ0NWM4NjI3ZTI3MTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSS95u9FjNNvd9Qg6TSy8mfYb5Fz
m1S6D6H1FqKmj3OqE4NSoID+3rRwkUs1JipOjMdbAMv9xIrZqhTcGLdzVGC1KCng
DDRPuVCDaYPnA0j2OF49SFGXw5dyb+DA9L97pSye99KqDSR6GOYsBXVxcE7iRsMf
hoHHksuaoNf2ZdDMUxExUUfyXHDQ7DhIuD8svr41wKCMsCSj2nLP4UFiGvfTp2l7
6oZ0tkZamTdkFydn6LQZAs6tOVcj1X7H2uEEcZo8SBJeQ3+VZrcjtxS4BX6h0ej3
v1kNmNzXozVgOgT7GNWMX3BBpbyZvyzO5cIXXWIHNXVpaboBY82VXyvm7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKtB9KERUKNFWiPwUZEXIYn4nGBMB8GA1UdIwQY
MBaAFLI0L8mXMPKjTQnuS17pIXh1bNTRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2pRdnlaY3c4cU5OQ2U1TFh1a2hlSFZzMU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi81ODRjMGQtODg1Yy00NGEwLTliZWYt
N2E4ZTM4OTIwMjUwLzEvc2pRdnlaY3c4cU5OQ2U1TFh1a2hlSFZzMU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi81ODRjMGQtODg1Yy00NGEwLTliZWYtN2E4ZTM4OTIwMjUw
LzEvc2pRdnlaY3c4cU5OQ2U1TFh1a2hlSFZzMU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHoebMy+i
ZjBFbAB2sz4ctJ8GBs+dFIFS2fy0sTTE1vpaUw2ag+L2nrXeFFO51rMq0YRaABSN
jJ4ogoDhqe8tiD41uZapB8fxfz6zV75/C0cgMPiG35aaETNvH6KM7502aNJDxW0V
uJQspMiJUyQxm9ZkpgZRo78qPcJtthA0Aiw8Kk5uueZ4F6ZB3y7pa/VtqYUsoHzd
GVwG1OlEYL4rIVUG0NnzrNe1F7I7+SgBKukUdtPMJEVvoLvvqPDl6rLsmozLRtaF
+sWD2s8Ak/PPYXKzCy9xB/bcuGMA1ovh0DJvXrcI1ND/n/qthCCrUKaAX88FqpAv
lih43QH9/WOpug==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:30 2026 by rpki-client