Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: rA1JrR02Nmi+BkvCaSCWHExeDfxBegEJNpzY3qEuyJc=
Subject key identifier: 7C:8C:B8:44:A4:B0:1C:DD:B7:0D:9E:BD:13:AF:70:B2:02:36:8E:67
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 019E1E35B3145D9B7C7FB54F09F9606DBA98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 123F
Signing time: Tue 12 May 2026 22:01:36 +0000
Manifest this update: Tue 12 May 2026 22:01:36 +0000
Manifest next update: Wed 13 May 2026 22:01:36 +0000
Files and hashes: 1: 4DavIRBSgZJRou5_5pXE0gpp9TU.roa (hash: S+MQh3x3BbVlY1FrerJ280vTss7JYvL8Z4S9DdFZKIM=)
2: VcOcd84KQjkoZhDL-2G9Bu1Nsrg.roa (hash: r5/pQOXKpUYtcCqvwsl8tV8NEiMQb4SPmxXSKYvWd28=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: 64Ev5xgaETyGWzSeMYGKU40NxYYdAyNjBFpTfirQwiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:b3:14:5d:9b:7c:7f:b5:4f:09:f9:60:6d:ba:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: May 12 22:01:36 2026 GMT
Not After : May 13 22:01:36 2026 GMT
Subject: CN=7c8cb844a4b01cddb70d9ebd13af70b202368e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:80:9a:48:fb:fe:c3:61:5a:0f:2e:5f:96:7c:
ce:69:1f:e7:ab:3a:51:7a:9e:b2:2a:7f:0b:36:39:
8b:d8:b3:99:03:cd:ec:c6:e8:48:35:97:e0:0c:26:
fe:58:1a:9e:48:a2:d0:cf:ec:5c:3f:d0:f6:5f:bf:
80:00:43:dd:e5:5d:5d:1a:06:cb:65:ed:30:55:a8:
74:32:35:08:22:0d:e9:8f:f5:9f:ec:9e:0b:bc:b3:
3e:c6:3e:b0:02:76:af:53:6d:98:15:9f:44:e4:fc:
b8:c3:b8:5e:56:52:4a:b6:c3:7d:5a:48:a6:44:c3:
a5:74:4e:dd:62:e6:2a:a5:71:27:aa:cb:ab:20:c7:
35:23:6b:be:34:7e:d3:6c:23:19:b8:fb:70:17:00:
5c:2f:4a:1c:fb:43:3f:1e:43:be:9c:a1:67:00:59:
c7:7a:40:56:51:a4:87:d2:76:0c:fa:8a:c2:ba:b2:
eb:86:63:4d:70:03:db:bb:9c:fe:f9:44:34:3c:68:
8b:48:de:71:c3:58:1f:bb:3d:b1:66:28:61:d2:ed:
04:2f:35:f5:3d:07:c1:1a:00:2b:2e:04:e0:ee:3e:
20:8f:bc:ef:7a:45:1d:1a:a5:a5:f0:0f:80:bb:ea:
58:24:4d:24:cf:06:7d:a5:07:20:2c:90:9a:5b:d7:
dc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8C:B8:44:A4:B0:1C:DD:B7:0D:9E:BD:13:AF:70:B2:02:36:8E:67
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:52:04:bf:ea:78:59:90:a1:76:88:a6:90:79:3e:d9:aa:b4:
c1:4b:a5:5f:a8:cc:85:18:0f:88:84:3f:c7:a7:3d:8a:fb:e4:
26:04:d0:51:c3:6e:36:5e:07:f5:84:d3:bb:8a:f2:85:15:a6:
e1:7d:ec:3b:e9:7d:db:a5:26:53:fd:a5:2b:30:d6:33:5a:cf:
73:93:18:3d:75:8f:35:17:6e:48:a8:d1:5f:b8:c1:26:5f:b9:
4e:d5:df:1a:7a:77:8a:ac:32:77:7d:56:3c:47:9a:db:46:f7:
2e:1c:8e:93:20:a7:51:af:27:14:66:1b:c5:52:4e:cf:d0:21:
99:18:c3:49:ea:11:03:3f:e6:c1:17:92:53:16:e3:a1:3a:c0:
25:19:49:73:2c:17:51:0b:7f:4a:02:58:d5:87:39:c7:83:d1:
63:05:be:92:06:61:ad:00:c1:93:7c:4b:23:69:3f:c5:c7:e8:
ab:16:5b:24:4a:28:59:5a:fd:ce:5b:bd:c9:65:5e:11:2e:a0:
dc:4f:7c:4f:40:9f:90:8c:aa:11:da:b5:22:56:30:1d:f2:c0:
32:b7:1f:df:26:84:99:2a:6f:5a:f6:70:e8:bd:59:59:69:c3:
78:f5:7e:1a:ee:df:75:ea:a4:f0:77:6a:61:51:5a:43:99:c5:
6a:03:99:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:26:23 2026 by rpki-client