Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
File: sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft (raw, json)
Hash identifier: t4gHCM3dQ5H+iLcKaUru6eKkXoZ1scw+gcbcidNvf3M=
Subject key identifier: 43:0E:DF:8E:C7:13:A8:55:49:E7:65:CA:8B:00:E9:B0:5E:A5:B0:3C
Authority key identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
Certificate issuer: /CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Certificate serial: 019E216D727F8666457131532CB89DBAFFFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 13:01:21 +0000
Manifest this update: Wed 13 May 2026 13:01:21 +0000
Manifest next update: Thu 14 May 2026 13:01:21 +0000
Files and hashes: 1: J8WfogeIpk1UKcHSO8WrjdEFqSM.roa (hash: PzzkgqrS9E4dkHoOcT2At52JZ2wJfpowp9BIjzEgVJE=)
2: sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl (hash: yFJSM1MFzbD/WxLYdUkvSl+wp2ZtknymI7N9KRwSKIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:72:7f:86:66:45:71:31:53:2c:b8:9d:ba:ff:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Validity
Not Before: May 13 13:01:21 2026 GMT
Not After : May 14 13:01:21 2026 GMT
Subject: CN=430edf8ec713a85549e765ca8b00e9b05ea5b03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:15:b9:89:ed:bb:a5:a6:c7:c3:cb:d8:05:
1e:42:d9:ec:46:a1:a1:0c:bf:ce:35:66:32:c3:f1:
32:c0:a5:50:a8:07:0a:e5:3a:b8:7f:1f:50:bb:93:
33:90:f7:36:4d:6b:21:07:d7:6e:76:f7:fb:ab:67:
6e:bd:56:1b:28:08:f9:dc:f0:29:5f:35:db:d9:22:
d5:a0:7e:d2:71:bf:55:b4:4a:b3:e4:b7:01:e4:70:
12:47:62:98:d4:0d:2d:ad:aa:c6:0d:ca:ad:15:ef:
bf:57:c1:5f:ee:a9:83:d8:0a:50:ac:65:1d:b1:8a:
15:29:27:c9:97:00:05:de:47:b8:eb:3b:ca:b0:c9:
72:3a:0a:e7:63:83:6e:ac:54:59:fb:c4:ff:b6:60:
0a:37:94:31:5d:a3:59:69:ce:31:17:dd:f9:f6:b9:
1a:78:f2:dc:0a:97:5e:49:f7:a5:ec:16:eb:88:f9:
83:e3:e2:81:f1:7d:f1:b2:57:33:2d:6e:79:bb:6c:
16:3b:2c:33:84:c4:d4:31:e6:7b:e5:99:41:95:2b:
77:57:78:87:73:72:7b:42:32:11:74:1c:9d:70:62:
f9:b1:b9:6b:ae:d9:83:e0:4f:7d:55:2e:5f:29:5e:
44:be:d9:25:e9:89:0b:14:82:77:e1:d4:2d:02:a5:
0c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0E:DF:8E:C7:13:A8:55:49:E7:65:CA:8B:00:E9:B0:5E:A5:B0:3C
X509v3 Authority Key Identifier:
keyid:B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9a:d1:8c:74:41:09:37:8b:77:5b:57:73:32:fd:a0:3c:3a:
61:57:b1:89:91:d3:1f:04:a9:f1:64:cc:a7:46:39:f9:a4:ce:
a4:40:31:3d:f4:10:b4:7a:c3:34:6e:66:5f:9c:5f:20:c7:3f:
c1:14:bc:ea:2c:99:c5:d9:21:27:e9:54:1c:e0:f8:b3:ab:30:
18:02:eb:6d:97:4d:6a:56:51:dd:b4:36:2c:84:b4:77:69:69:
bb:83:35:0e:27:fb:44:26:0d:86:15:c1:7d:c2:77:fe:8c:2a:
4d:56:0b:cf:45:fd:e3:98:d7:b1:77:c4:65:c7:7e:e8:83:b5:
d0:ab:fc:10:a8:dd:40:7f:79:55:81:59:2b:15:c4:d5:6b:20:
33:c5:18:06:93:6d:69:7b:22:81:d1:30:3e:6e:38:ad:f6:55:
8d:b1:31:6e:d6:f4:d4:6b:60:d2:dd:9e:94:10:cc:89:0f:6f:
87:3c:89:af:bd:4f:12:7a:cd:c6:d7:1d:ea:39:45:6d:a3:db:
a3:e2:71:1b:b6:7f:f3:fd:bd:3a:9a:fe:2a:1a:02:20:0e:03:
9b:94:67:55:93:2a:9d:88:af:b3:ff:4c:ff:6e:84:44:5a:e2:
73:43:20:46:3b:6e:61:a5:21:37:05:76:83:ed:a1:7d:db:c3:
07:1f:68:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:20:43 2026 by rpki-client