Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
File: sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft (raw, json)
Hash identifier: hYL5sGeTsW7SVz5eeIvuKv4IQCAaVVclFLx/nqKvq84=
Subject key identifier: 88:B8:4E:09:2A:5F:45:3F:8E:32:89:94:42:82:10:61:EB:3B:0E:27
Authority key identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
Certificate issuer: /CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Certificate serial: 01A1355A46A33E63D781CC82AB3DD4B33BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
Manifest number: 1AA2
Signing time: Tue 13 Oct 2026 13:01:10 +0000
Manifest this update: Tue 13 Oct 2026 13:01:10 +0000
Manifest next update: Wed 14 Oct 2026 13:01:10 +0000
Files and hashes: 1: J8WfogeIpk1UKcHSO8WrjdEFqSM.roa (hash: PzzkgqrS9E4dkHoOcT2At52JZ2wJfpowp9BIjzEgVJE=)
2: sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl (hash: GpUeGQPbbin/6QvqN7sZSjKVyGoGkwrr8KI1i2bAuag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:5a:46:a3:3e:63:d7:81:cc:82:ab:3d:d4:b3:3b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Validity
Not Before: Oct 13 13:01:10 2026 GMT
Not After : Oct 14 13:01:10 2026 GMT
Subject: CN=88b84e092a5f453f8e32899442821061eb3b0e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0a:20:14:43:64:36:e8:b2:ce:b0:4f:a6:41:
d1:ef:c3:c6:ad:d3:2b:ad:98:c9:04:a6:d4:dc:52:
25:56:ca:2f:3f:ef:ac:26:e5:08:b3:18:cb:fc:fc:
e9:1e:df:6a:00:7e:41:b8:cc:ac:c4:fd:22:a3:44:
5b:e2:1f:e5:e7:54:b2:fb:d1:fd:ce:2c:6b:7f:88:
ed:2b:4b:9d:b7:43:97:f3:14:70:d3:96:49:6f:ed:
c9:04:0f:91:11:84:9c:4b:78:80:c9:a8:4a:33:7c:
ee:6a:57:db:33:b3:50:48:cb:43:fc:a4:5a:da:87:
7d:4d:34:70:26:de:08:08:7e:fb:7a:9f:09:44:4e:
1f:b2:23:18:f4:ab:e5:57:52:84:a9:ff:ba:4f:12:
53:7a:bb:bc:e4:c5:8e:4c:ae:0f:bc:5e:c7:a2:2a:
70:3d:9e:b6:9d:c2:34:49:7a:57:93:df:e6:2c:20:
0e:bf:99:36:7b:e0:6e:fa:d6:22:91:f9:88:3a:10:
67:a0:50:94:81:1c:aa:b1:54:a8:85:78:c2:db:11:
40:bf:a3:10:8c:5c:00:39:dc:6d:00:46:0e:df:0f:
25:32:93:cb:9f:2b:f2:f1:41:3d:d2:56:33:84:c6:
d2:94:0e:a3:62:9f:c6:b0:58:09:37:6c:29:62:ea:
54:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B8:4E:09:2A:5F:45:3F:8E:32:89:94:42:82:10:61:EB:3B:0E:27
X509v3 Authority Key Identifier:
keyid:B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c1:72:20:ec:e8:f9:5e:26:16:c0:1c:be:ce:ea:98:85:ac:
ae:dd:c5:f2:64:c4:1e:26:9a:65:c2:4d:a1:04:52:17:37:bb:
57:95:48:0a:7e:40:24:a4:32:bd:6a:d3:16:d3:fd:99:2c:b3:
b6:89:aa:24:5d:15:46:0f:51:f7:5c:e0:ad:f1:1a:c0:d0:a1:
e5:22:62:f9:43:e0:28:65:06:1f:11:a5:76:38:c7:fa:68:01:
0c:9c:85:9e:d6:91:cd:d7:49:a8:b3:15:f3:10:e7:4f:ea:db:
6e:52:de:d7:f0:06:a2:e8:9c:31:db:00:5b:c1:a6:15:2f:44:
c1:4e:38:d5:7c:28:d2:60:32:69:3b:73:ea:e5:82:45:a5:d7:
ec:24:5b:68:e0:3b:88:90:4f:f3:73:82:ac:76:3a:60:d8:75:
ed:d9:c3:67:1f:29:88:70:e5:75:fc:d6:66:de:01:b6:d5:6e:
2a:1a:86:2e:09:75:98:1b:b9:15:8f:7d:94:97:c0:27:59:fb:
e1:3d:3f:3a:da:22:f1:5b:a7:b1:89:4c:2e:8d:44:b8:e2:2a:
cf:4d:05:2b:27:5e:35:60:23:27:4e:74:2c:a9:c8:fd:6e:24:
f3:22:07:93:2c:54:01:67:c6:27:4b:79:3c:6b:44:c3:15:d7:
2e:32:6e:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE1WkajPmPXgcyCqz3UszvrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwOTQ3ODBmZmJiMDZiN2I1N2YwMjE0ZTg0NTUyYjk2NGM1
MDQxZDYwHhcNMjYxMDEzMTMwMTEwWhcNMjYxMDE0MTMwMTEwWjAzMTEwLwYDVQQD
Eyg4OGI4NGUwOTJhNWY0NTNmOGUzMjg5OTQ0MjgyMTA2MWViM2IwZTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwogFENkNuiyzrBPpkHR78PGrdMr
rZjJBKbU3FIlVsovP++sJuUIsxjL/PzpHt9qAH5BuMysxP0io0Rb4h/l51Sy+9H9
zixrf4jtK0udt0OX8xRw05ZJb+3JBA+REYScS3iAyahKM3zualfbM7NQSMtD/KRa
2od9TTRwJt4ICH77ep8JRE4fsiMY9KvlV1KEqf+6TxJTeru85MWOTK4PvF7Hoipw
PZ62ncI0SXpXk9/mLCAOv5k2e+Bu+tYikfmIOhBnoFCUgRyqsVSohXjC2xFAv6MQ
jFwAOdxtAEYO3w8lMpPLnyvy8UE90lYzhMbSlA6jYp/GsFgJN2wpYupUewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIi4TgkqX0U/jjKJlEKCEGHrOw4nMB8GA1UdIwQY
MBaAFLCUeA/7sGt7V/AhToRVK5ZMUEHWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0pSNERfdXdhM3RYOENGT2hGVXJsa3hRUWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82NjgzY2EtYTY4OC00MTQxLWFkNDEt
OGFkZjBkYTIyNTQ1LzEvc0pSNERfdXdhM3RYOENGT2hGVXJsa3hRUWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82NjgzY2EtYTY4OC00MTQxLWFkNDEtOGFkZjBkYTIyNTQ1
LzEvc0pSNERfdXdhM3RYOENGT2hGVXJsa3hRUWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMFyIOzo
+V4mFsAcvs7qmIWsrt3F8mTEHiaaZcJNoQRSFze7V5VICn5AJKQyvWrTFtP9mSyz
tomqJF0VRg9R91zgrfEawNCh5SJi+UPgKGUGHxGldjjH+mgBDJyFntaRzddJqLMV
8xDnT+rbblLe1/AGouicMdsAW8GmFS9EwU441Xwo0mAyaTtz6uWCRaXX7CRbaOA7
iJBP83OCrHY6YNh17dnDZx8piHDldfzWZt4BttVuKhqGLgl1mBu5FY99lJfAJ1n7
4T0/Otoi8VunsYlMLo1EuOIqz00FKydeNWAjJ050LKnI/W4k8yIHkyxUAWfGJ0t5
PGtEwxXXLjJuNQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 16:18:16 2026 by rpki-client