Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: T5+LQV0k0qY5yAgnjIBX/LYSEtaFEA/shtu/k9X7K4Q=
Subject key identifier: 9D:B6:76:51:FA:31:9A:40:AA:72:14:64:29:21:9E:70:18:85:C1:40
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 01A0D75FF4092709C31ADA18872BC3AF04DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 13A8
Signing time: Fri 25 Sep 2026 07:03:04 +0000
Manifest this update: Fri 25 Sep 2026 07:03:04 +0000
Manifest next update: Sat 26 Sep 2026 07:03:04 +0000
Files and hashes: 1: 4DavIRBSgZJRou5_5pXE0gpp9TU.roa (hash: S+MQh3x3BbVlY1FrerJ280vTss7JYvL8Z4S9DdFZKIM=)
2: VcOcd84KQjkoZhDL-2G9Bu1Nsrg.roa (hash: r5/pQOXKpUYtcCqvwsl8tV8NEiMQb4SPmxXSKYvWd28=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: qSMf6lv5TjAZeAfYHKK3gMyd8TOsP46+UEM1b8V3BAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:5f:f4:09:27:09:c3:1a:da:18:87:2b:c3:af:04:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Sep 25 07:03:04 2026 GMT
Not After : Sep 26 07:03:04 2026 GMT
Subject: CN=9db67651fa319a40aa72146429219e701885c140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2e:4d:32:96:dc:bf:bf:26:58:97:1c:fb:86:
d6:1e:31:4f:13:6d:8f:27:29:88:ca:23:3b:62:6a:
2a:69:68:07:41:67:4a:a5:1e:2c:17:06:82:18:a7:
d7:80:c5:d5:c4:2d:5a:7c:1c:9b:ae:19:68:4c:89:
60:14:05:87:db:5f:a0:d1:4b:ba:13:0c:d4:33:c8:
47:7f:b7:f0:9b:41:81:1c:b2:ec:27:62:b9:59:98:
7a:cc:d6:93:2c:cc:0a:70:dc:0b:73:ab:14:6a:7d:
59:44:20:75:d7:e6:ea:16:0d:b0:98:97:9e:be:8e:
82:2b:07:6a:d2:31:6f:dc:da:df:d6:17:0f:e3:7e:
8b:63:7e:f7:a9:0f:20:3f:92:64:2d:f2:7b:24:21:
19:e8:6a:03:43:0e:7f:b2:50:1a:4e:d5:f4:ac:68:
f2:9b:d1:a6:b3:97:49:51:9a:37:4f:79:da:cb:27:
43:58:be:23:29:e3:0a:91:b5:10:05:ca:89:8a:8d:
03:fa:e6:b3:8f:14:46:39:b1:77:5a:19:d7:47:9f:
31:c4:dc:56:e2:96:85:61:d8:6e:47:be:42:aa:f5:
0f:3d:69:5e:b0:21:fb:b3:b7:4b:56:39:a4:7e:98:
ba:56:fc:a5:9e:40:6f:c9:61:0f:cb:51:d0:01:9e:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B6:76:51:FA:31:9A:40:AA:72:14:64:29:21:9E:70:18:85:C1:40
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:dc:24:cd:98:fc:70:67:91:0c:af:40:79:78:35:3f:38:ad:
32:28:9e:57:a5:d7:20:e6:73:08:eb:e7:8b:cf:e2:09:14:c0:
38:11:35:57:8e:5c:94:e3:70:34:9a:6d:23:49:3d:dc:78:d3:
ed:07:8e:71:85:73:97:e0:5e:8b:e5:4b:c5:b3:f2:00:84:19:
d3:9a:98:23:ca:12:e3:d5:de:dd:f1:78:8e:12:dd:c7:e5:6a:
06:0a:cd:2d:0a:ab:fb:f1:61:99:d8:00:5a:85:af:b6:1f:53:
a4:5f:08:85:22:5a:57:48:6a:12:72:51:0a:02:28:02:29:dd:
57:6d:6e:c1:43:00:7d:6e:ab:0e:08:e8:45:f2:e2:e3:9e:05:
75:72:1c:5b:93:a4:12:b2:a9:b5:5e:fd:1e:dc:d1:6e:4f:15:
ed:29:eb:16:f0:1a:74:10:76:d9:e8:01:3d:77:ba:93:39:c7:
da:b1:f7:cb:f0:a2:98:bb:7c:78:0f:55:3f:c6:99:b0:75:92:
b2:6c:41:36:55:d9:5e:a4:46:dd:5f:19:3b:3e:19:6c:a7:31:
ba:ab:e7:8e:65:2c:4c:92:ab:8d:b0:c0:b7:58:46:98:cf:6f:
65:34:dc:6c:fd:2a:8f:21:81:d3:73:cd:63:3e:5f:7b:e6:55:
2c:9f:33:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:31:51 2026 by rpki-client