Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
File: sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft (raw, json)
Hash identifier: A8pzBShR0O9bd0MOk5FTQsNKuLnk6iqCyoB4ljzeg6o=
Subject key identifier: 5A:42:1F:C7:C6:06:67:88:B3:18:2C:C4:EF:50:95:07:1F:4D:CD:0F
Authority key identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
Certificate issuer: /CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Certificate serial: 019D284DE977F0D497401F9E55A947D59487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 04:01:27 +0000
Manifest this update: Thu 26 Mar 2026 04:01:27 +0000
Manifest next update: Fri 27 Mar 2026 04:01:27 +0000
Files and hashes: 1: J8WfogeIpk1UKcHSO8WrjdEFqSM.roa (hash: PzzkgqrS9E4dkHoOcT2At52JZ2wJfpowp9BIjzEgVJE=)
2: sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl (hash: cBzrHYRBlXF0OgCC1stRAAtgbBXACliq55OvHNcKTYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:e9:77:f0:d4:97:40:1f:9e:55:a9:47:d5:94:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Validity
Not Before: Mar 26 04:01:27 2026 GMT
Not After : Mar 27 04:01:27 2026 GMT
Subject: CN=5a421fc7c6066788b3182cc4ef5095071f4dcd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:53:8c:5d:36:32:ec:e6:27:75:33:71:b3:3e:
c6:db:9a:dc:9b:ef:00:b1:38:4a:11:23:13:a7:65:
44:7d:1d:f8:6c:95:1f:43:3b:48:c8:2b:53:6a:bb:
26:e7:5e:ef:99:4b:36:6e:9b:1c:62:09:46:67:27:
a3:40:bb:72:ad:43:e7:69:36:47:93:20:d9:14:79:
3d:ca:08:11:90:ca:7d:8b:f3:71:49:90:43:80:c7:
82:5f:29:bc:4b:60:54:81:cb:be:46:db:ab:96:f1:
9d:98:3c:40:49:63:32:b0:09:1a:eb:e2:ea:ad:22:
5d:e8:fc:86:f7:cc:20:84:fc:d3:3b:b2:bd:1c:ba:
e6:e1:a9:af:c7:b0:09:5a:6a:e3:9d:42:99:28:f6:
28:08:93:de:1e:6d:03:8a:67:7e:c1:fa:a2:a7:18:
27:d0:d1:26:d1:02:98:e5:19:2d:3e:34:68:47:2b:
4c:b1:52:b6:64:e6:81:cb:be:98:0e:ac:35:ec:14:
d2:91:80:a1:ff:9c:b7:1a:bc:34:1e:76:ea:08:2d:
29:38:7f:65:4f:00:f1:e9:ab:9b:7d:50:93:7a:1f:
ba:b4:02:83:59:43:e6:e7:fb:99:23:ca:12:a0:2d:
e1:9c:98:af:cb:d4:7c:d9:46:87:d6:be:94:a0:af:
4b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:42:1F:C7:C6:06:67:88:B3:18:2C:C4:EF:50:95:07:1F:4D:CD:0F
X509v3 Authority Key Identifier:
keyid:B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:43:99:ed:cb:2a:b5:1c:37:e3:c6:a6:35:50:38:ef:96:8e:
b5:9e:69:5e:70:89:19:7a:a9:e3:c9:8e:5b:01:3a:f0:46:24:
54:f4:68:69:3e:c3:15:fd:5e:bd:35:9f:78:3a:2f:5c:82:49:
a5:38:40:0f:04:91:61:1c:01:ea:bd:0d:81:9a:3b:88:9b:78:
a9:93:13:cf:f2:a2:46:f4:c6:64:da:af:0e:1a:59:3d:47:98:
00:63:c4:e0:d8:b7:a8:8b:d7:aa:c0:5b:ce:50:ff:72:ea:f6:
74:f6:2e:ec:2c:a0:cc:ba:d3:dc:7d:33:2f:d9:32:24:16:4b:
06:cf:e0:b5:45:57:5c:0d:8b:0a:0d:43:02:92:e2:52:0b:d3:
5f:8a:49:d9:2c:7a:c3:d9:91:46:1f:9e:04:4e:a4:0a:3a:40:
0a:9a:40:0d:f5:c0:32:96:8b:80:9e:ce:d3:fe:e7:0e:2d:67:
a7:52:b6:59:86:0a:c4:85:b1:1f:e6:4a:d0:c5:af:10:40:15:
82:2a:a9:16:26:fb:2b:85:65:06:b1:53:04:60:41:d4:30:77:
0e:54:be:69:54:98:a7:1d:d1:16:f9:f6:de:c5:95:b8:81:a3:
60:79:17:2a:9c:9f:e1:a0:2d:ff:83:21:03:c4:3d:42:8a:e4:
bb:66:ac:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:16:54 2026 by rpki-client