Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: eG7+4eeWvdsExvFoaUumVqYFGRSBTLyeKpWV0AywXwY=
Subject key identifier: CF:25:21:98:C9:F0:8F:0A:26:8C:26:B0:D9:BD:41:E6:ED:BD:9E:2F
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 01A1DE024E5BAF804EDA344C32588BD0A258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 1430
Signing time: Sun 15 Nov 2026 07:00:55 +0000
Manifest this update: Sun 15 Nov 2026 07:00:55 +0000
Manifest next update: Mon 16 Nov 2026 07:00:55 +0000
Files and hashes: 1: 4DavIRBSgZJRou5_5pXE0gpp9TU.roa (hash: S+MQh3x3BbVlY1FrerJ280vTss7JYvL8Z4S9DdFZKIM=)
2: VcOcd84KQjkoZhDL-2G9Bu1Nsrg.roa (hash: r5/pQOXKpUYtcCqvwsl8tV8NEiMQb4SPmxXSKYvWd28=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: 9Wqu7GTDh87o2YrmpLYwUcLgxf0THIT3kUCT9/gL+Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:4e:5b:af:80:4e:da:34:4c:32:58:8b:d0:a2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Nov 15 07:00:55 2026 GMT
Not After : Nov 16 07:00:55 2026 GMT
Subject: CN=cf252198c9f08f0a268c26b0d9bd41e6edbd9e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3f:0e:f4:7f:11:f1:bb:10:d9:bb:8e:d2:57:
1e:37:8e:ce:79:16:e2:4e:83:b6:ee:1d:ef:65:7b:
7d:7b:91:3d:53:ab:84:92:a8:c0:6a:57:d5:1f:d6:
7b:72:33:87:00:e5:34:c2:2a:e2:c4:30:98:15:b0:
b1:f1:35:0d:1d:34:7d:91:64:3b:f5:aa:5d:8f:d6:
68:0a:28:79:99:98:3a:10:1b:69:84:73:44:d6:6c:
e2:57:59:21:ce:4a:c0:49:75:db:52:1d:da:6f:e2:
45:da:c4:f0:21:42:48:3a:79:1e:ee:c8:93:18:c6:
25:8a:26:87:6a:de:ae:27:83:98:4f:e6:31:7d:e0:
2e:c6:16:52:54:39:84:da:47:51:49:d4:00:c7:53:
04:45:62:33:b4:47:a5:49:81:bd:36:88:35:64:9f:
21:e1:ea:46:84:88:df:82:a0:4b:f4:a7:df:de:5f:
47:e3:a4:ab:fc:9d:18:dc:a4:df:98:9e:a4:ce:c9:
2d:1e:35:3d:fd:3f:6d:48:92:72:31:cd:ff:60:2f:
94:27:cf:e6:c8:7c:b5:ff:76:b2:0c:45:c1:25:00:
67:aa:35:60:37:8b:72:c2:10:52:7c:32:b4:d4:44:
e1:e4:c8:bc:85:43:4d:24:26:9f:05:71:78:89:ce:
d4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:25:21:98:C9:F0:8F:0A:26:8C:26:B0:D9:BD:41:E6:ED:BD:9E:2F
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:76:38:ca:c5:fe:a5:cb:df:48:03:cb:a2:dd:f4:a3:2b:3d:
9a:60:35:cb:5d:2a:86:b8:b6:f6:88:da:98:b0:93:75:94:68:
02:9f:8d:99:fb:34:41:9a:20:55:f7:40:3a:a4:b1:af:dd:e4:
d0:99:8f:6b:8c:dc:92:ba:49:da:35:43:e6:bb:f8:18:dd:15:
41:0b:f3:1f:7a:d1:f1:da:20:37:fb:46:de:0c:ce:2d:90:9a:
3b:a6:ef:27:cf:dd:5b:6d:39:e9:e7:cb:8c:79:cc:c4:e6:89:
bc:0c:21:f2:24:6e:cc:5b:cc:d3:14:9c:34:15:77:06:ec:30:
61:7b:0f:57:85:d7:1b:bb:4e:9f:05:45:0c:c0:30:27:b6:d2:
e5:d2:41:c0:3e:64:4a:ad:fa:94:7f:c7:2c:a1:c6:65:e8:27:
19:3f:c1:19:97:10:d8:69:43:91:45:0f:3d:80:33:bb:46:d1:
05:63:af:07:a5:e1:1a:d9:2b:15:25:bf:31:99:88:99:83:42:
b9:56:d5:dd:39:79:bd:8e:29:e4:28:d1:0f:32:54:0f:c9:cc:
59:e0:b1:bd:32:58:fd:73:8e:fb:55:18:4f:39:ae:e8:b2:d1:
7c:36:d3:cd:a4:80:b3:fd:1d:3f:73:3d:ff:86:2c:0c:ce:72:
89:95:d8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:22:42 2026 by rpki-client