Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: 0tyxdIwp5suue3gm0UYlbImiRpbZKaCKDQeh+ct7mTE=
Subject key identifier: 8D:8C:E9:32:36:A1:36:7A:28:B5:16:AC:FB:9E:15:08:7C:19:55:AC
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 019F90FE8CA62728CFA088B0FF2F809EABEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 12FF
Signing time: Thu 23 Jul 2026 22:00:28 +0000
Manifest this update: Thu 23 Jul 2026 22:00:28 +0000
Manifest next update: Fri 24 Jul 2026 22:00:28 +0000
Files and hashes: 1: 4DavIRBSgZJRou5_5pXE0gpp9TU.roa (hash: S+MQh3x3BbVlY1FrerJ280vTss7JYvL8Z4S9DdFZKIM=)
2: VcOcd84KQjkoZhDL-2G9Bu1Nsrg.roa (hash: r5/pQOXKpUYtcCqvwsl8tV8NEiMQb4SPmxXSKYvWd28=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: nVTbxG84zJKsR6+qmW4cwW9Etlu2su/Jv2gBTUYZMiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:8c:a6:27:28:cf:a0:88:b0:ff:2f:80:9e:ab:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Jul 23 22:00:28 2026 GMT
Not After : Jul 24 22:00:28 2026 GMT
Subject: CN=8d8ce93236a1367a28b516acfb9e15087c1955ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0f:37:49:6a:a4:59:60:a4:b6:1a:d9:df:3f:
af:e9:aa:56:10:a5:69:2d:ec:64:8b:4c:8d:12:e9:
9e:a3:fb:ca:13:a5:7a:54:57:be:c1:fa:f3:04:1e:
47:14:06:81:4d:03:b6:bb:94:c7:22:68:53:57:9e:
36:eb:45:6c:a9:6c:56:f1:66:c4:b7:df:c2:6f:c3:
4c:a3:3b:34:55:b6:fe:12:6d:ef:66:e4:45:73:37:
ce:14:ee:69:ea:ec:ea:dd:8f:99:85:69:34:d2:65:
59:c6:29:4b:41:44:98:f5:10:54:65:2d:1d:ed:e6:
f7:00:07:a5:4c:7a:97:b1:d0:de:12:df:58:f9:1d:
98:bb:e2:58:02:6a:15:ec:2f:c7:9c:98:4a:5a:e8:
12:c0:a5:e1:56:e4:23:ff:41:e0:f0:fc:58:90:14:
65:ee:24:de:48:9b:ce:de:ed:79:8e:bb:c3:d3:ff:
f2:93:51:8f:05:a6:21:9d:40:8a:0a:dd:88:14:27:
d8:78:b8:0d:09:13:6e:b5:2f:6b:a8:3d:61:df:1e:
3e:83:2f:8a:46:e5:03:45:41:ce:20:5b:3a:d1:a3:
9d:7a:fc:b5:72:bc:ae:b5:e6:df:01:b9:1f:9f:21:
21:e2:d0:c6:a6:a5:9d:83:de:2c:1f:de:28:f9:f7:
e9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8C:E9:32:36:A1:36:7A:28:B5:16:AC:FB:9E:15:08:7C:19:55:AC
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cc:20:64:28:81:60:d5:7e:20:aa:0f:f1:fc:49:73:1c:5a:
ab:9d:3c:2b:ce:a7:eb:1e:bd:b3:e7:59:2d:5a:b9:48:83:75:
0c:c1:fe:f3:10:ea:eb:48:f7:e2:48:92:b5:81:94:23:0c:a7:
19:d7:6a:67:44:73:f8:3e:8a:a9:43:e6:bd:37:a0:5d:a2:d4:
50:42:ae:48:ef:67:1d:04:88:d7:cc:e0:81:67:57:de:48:f1:
50:2d:92:d9:8a:30:13:87:f1:80:c0:d3:e8:26:ef:99:b0:b4:
83:6f:36:5e:03:5b:e4:08:75:19:7a:31:c1:79:76:5d:d0:3c:
4b:08:ca:f3:43:d8:6b:65:67:4f:39:81:61:bf:45:66:9d:6e:
37:b7:11:8a:0d:71:9a:78:8d:f9:bc:d0:4d:56:d5:2b:4a:e6:
14:ab:8e:4f:b7:23:ef:6b:12:5d:a3:a3:ab:f9:96:fb:fe:16:
ba:1a:8f:57:60:6b:6e:c5:18:89:95:83:12:33:ac:69:c5:e2:
61:68:49:36:34:84:26:4b:ce:5b:83:49:82:94:1c:89:ab:21:
05:3b:af:52:a0:2f:0d:85:0c:e7:06:7f:1c:66:5c:f0:4a:a3:
28:9f:f9:cc:88:fc:bd:a6:46:b5:3d:6a:fd:b6:5b:11:e7:56:
3d:f5:96:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/oymJyjPoIiw/y+AnqvsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMzBjOGZkMDIwNWVjZjBlZjZiNTZlMDM3ZDU2MjliMTdi
Mjc1ZWUwHhcNMjYwNzIzMjIwMDI4WhcNMjYwNzI0MjIwMDI4WjAzMTEwLwYDVQQD
Eyg4ZDhjZTkzMjM2YTEzNjdhMjhiNTE2YWNmYjllMTUwODdjMTk1NWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg83SWqkWWCkthrZ3z+v6apWEKVp
Lexki0yNEumeo/vKE6V6VFe+wfrzBB5HFAaBTQO2u5THImhTV54260VsqWxW8WbE
t9/Cb8NMozs0Vbb+Em3vZuRFczfOFO5p6uzq3Y+ZhWk00mVZxilLQUSY9RBUZS0d
7eb3AAelTHqXsdDeEt9Y+R2Yu+JYAmoV7C/HnJhKWugSwKXhVuQj/0Hg8PxYkBRl
7iTeSJvO3u15jrvD0//yk1GPBaYhnUCKCt2IFCfYeLgNCRNutS9rqD1h3x4+gy+K
RuUDRUHOIFs60aOdevy1cryutebfAbkfnyEh4tDGpqWdg94sH94o+ffpYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2M6TI2oTZ6KLUWrPueFQh8GVWsMB8GA1UdIwQY
MBaAFLIwyP0CBezw72tW4DfVYpsXsnXuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYTE3OTctNjE2Zi00OTczLWI3NDAt
YzhiNWRmYzVhMTNmLzEvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9jYTE3OTctNjE2Zi00OTczLWI3NDAtYzhiNWRmYzVhMTNm
LzEvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcwgZCiB
YNV+IKoP8fxJcxxaq508K86n6x69s+dZLVq5SIN1DMH+8xDq60j34kiStYGUIwyn
GddqZ0Rz+D6KqUPmvTegXaLUUEKuSO9nHQSI18zggWdX3kjxUC2S2YowE4fxgMDT
6CbvmbC0g282XgNb5Ah1GXoxwXl2XdA8SwjK80PYa2VnTzmBYb9FZp1uN7cRig1x
mniN+bzQTVbVK0rmFKuOT7cj72sSXaOjq/mW+/4WuhqPV2BrbsUYiZWDEjOsacXi
YWhJNjSEJkvOW4NJgpQciashBTuvUqAvDYUM5wZ/HGZc8EqjKJ/5zIj8vaZGtT1q
/bZbEedWPfWWCg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:59 2026 by rpki-client