Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
File: sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft (raw, json)
Hash identifier: g/W9xByXCUvrXRli4K62Ikfw3EnDEpjyd6hVg4yOhak=
Subject key identifier: BD:D3:F6:32:62:8A:FC:A0:29:B7:0F:FE:A4:28:EC:4C:EF:81:0D:0A
Authority key identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
Certificate issuer: /CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Certificate serial: 019F9436B9C647E049D3D95BF7E69B076533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 13:00:42 +0000
Manifest this update: Fri 24 Jul 2026 13:00:42 +0000
Manifest next update: Sat 25 Jul 2026 13:00:42 +0000
Files and hashes: 1: J8WfogeIpk1UKcHSO8WrjdEFqSM.roa (hash: PzzkgqrS9E4dkHoOcT2At52JZ2wJfpowp9BIjzEgVJE=)
2: sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl (hash: +S+JfBYD9jz9QE0V+MdacY7siwBvhPxTxkt98weOTwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:b9:c6:47:e0:49:d3:d9:5b:f7:e6:9b:07:65:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Validity
Not Before: Jul 24 13:00:42 2026 GMT
Not After : Jul 25 13:00:42 2026 GMT
Subject: CN=bdd3f632628afca029b70ffea428ec4cef810d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c7:c5:df:d8:e0:70:71:df:71:ef:ba:63:0c:
21:e6:50:f1:9b:f4:44:5e:b1:f9:ed:f2:d2:dc:c0:
fd:36:32:f8:ac:e3:85:ce:84:c6:c1:5c:da:1d:e9:
45:79:e5:ee:6e:46:05:bb:d7:7f:b5:51:b7:b5:33:
55:fe:db:66:a1:df:59:27:f7:f3:90:00:d1:39:0d:
8b:bf:0f:2a:4a:0a:26:73:e9:cd:7d:73:bf:ab:b8:
0b:8b:14:51:56:da:7b:26:64:8d:1b:00:27:e2:4e:
72:49:2c:1c:2a:bb:a1:37:c3:e8:fb:30:a4:c9:03:
e1:b0:32:57:c9:a7:f1:84:c3:a2:a4:a9:30:94:e6:
0f:2b:10:1b:cb:7c:6a:1f:63:05:05:61:42:d0:63:
4a:1e:8e:60:db:93:e3:16:28:bd:66:24:8c:9f:71:
83:08:f3:69:d8:65:88:a1:2e:10:92:61:ea:32:2c:
8b:46:a0:bc:32:31:46:5f:b7:a5:e0:92:d3:ff:7b:
83:22:a6:f7:14:84:b0:44:22:11:d9:70:31:25:9d:
b2:d2:f0:52:44:3c:74:06:22:a5:25:9a:ed:bb:63:
29:10:50:62:14:46:a7:90:01:26:f0:92:ff:a2:8e:
7e:02:1b:1b:a9:60:76:26:01:08:4c:97:75:22:ce:
20:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D3:F6:32:62:8A:FC:A0:29:B7:0F:FE:A4:28:EC:4C:EF:81:0D:0A
X509v3 Authority Key Identifier:
keyid:B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:bc:76:90:d3:54:b0:2a:45:79:4c:2c:6e:72:00:bd:b5:e4:
a9:cb:9b:9a:fb:c1:05:83:49:82:82:71:5b:7e:be:76:81:6a:
b0:19:a6:55:bd:28:c5:98:39:be:28:07:a8:c7:2d:5c:61:32:
90:7f:ce:22:4a:be:b5:a5:18:21:28:3c:1e:9e:11:b9:07:54:
67:bd:8b:aa:c0:50:ca:d5:f6:da:d6:f8:a8:43:21:19:2f:90:
48:cc:12:95:7d:21:ca:71:66:28:26:d6:14:6b:34:6b:72:1a:
1d:f6:bb:40:00:75:53:73:56:12:91:b1:89:7a:16:25:20:4c:
0d:ea:ff:53:b2:b3:b0:42:a1:0e:8d:22:88:3e:f7:0c:ee:10:
79:da:f8:a6:4f:59:d2:88:fe:84:72:0e:d0:2b:9a:a9:1a:b3:
2a:3e:bb:06:a4:2b:f2:53:38:ab:f3:eb:ff:1b:55:f9:db:5c:
e5:f5:a3:04:cd:81:76:d7:8b:7a:62:ee:58:92:14:57:3f:d0:
1e:a3:e2:c2:61:16:73:22:ba:2b:51:06:c3:33:4a:04:96:91:
a2:52:96:2e:a5:aa:50:91:77:17:f0:e5:51:20:8d:5a:84:57:
b5:c8:84:5b:e4:88:5b:d2:52:50:90:75:a7:fa:42:41:e7:67:
41:43:21:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:18:42 2026 by rpki-client