Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: zyBIioocomcw4DiQamwOy5O3FS+rxKTqj6nUfsHjd9I=
Subject key identifier: 16:F9:5A:CF:CF:B8:4A:C8:BB:2F:6B:24:D9:F4:00:44:3B:82:02:9B
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 019D27039912F9C6D122FEA6FC5773A9415E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 11BF
Signing time: Wed 25 Mar 2026 22:00:40 +0000
Manifest this update: Wed 25 Mar 2026 22:00:40 +0000
Manifest next update: Thu 26 Mar 2026 22:00:40 +0000
Files and hashes: 1: 4DavIRBSgZJRou5_5pXE0gpp9TU.roa (hash: S+MQh3x3BbVlY1FrerJ280vTss7JYvL8Z4S9DdFZKIM=)
2: VcOcd84KQjkoZhDL-2G9Bu1Nsrg.roa (hash: r5/pQOXKpUYtcCqvwsl8tV8NEiMQb4SPmxXSKYvWd28=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: dXzCLC3FWLSXBTOegMbu5bZlfGwT9PIUgRdlwtMZkp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:99:12:f9:c6:d1:22:fe:a6:fc:57:73:a9:41:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Mar 25 22:00:40 2026 GMT
Not After : Mar 26 22:00:40 2026 GMT
Subject: CN=16f95acfcfb84ac8bb2f6b24d9f400443b82029b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ff:41:04:65:4d:3e:4b:9a:b8:ca:bc:73:6c:
f0:bc:5c:24:ae:5e:03:da:bd:8d:f8:9f:60:55:fc:
b2:ca:82:3c:4d:00:eb:34:3c:7b:52:2c:96:c0:35:
b2:4b:9b:85:f3:b5:57:54:25:e2:06:d4:1c:bc:4c:
2a:56:81:bf:e4:ee:a2:05:55:4f:c9:9a:fb:3a:1b:
b8:c9:40:89:ff:b0:6b:25:3f:b4:f3:29:d4:b2:b3:
f3:92:a4:73:3c:f4:f4:2f:d3:e2:6a:ad:8a:5f:61:
0c:e3:d2:45:ba:a7:c5:43:6a:f9:89:aa:a7:68:50:
ce:94:0a:47:64:88:d7:a8:20:38:2a:ea:63:76:d9:
3d:61:78:c6:a2:ea:48:ee:61:67:02:35:25:ba:02:
c4:b2:c5:5d:57:cd:b5:45:66:78:73:3d:4d:fb:88:
42:ba:e3:12:7f:87:ba:7d:44:d0:9c:4d:f6:52:7d:
cf:cb:a0:79:de:b7:79:e9:6a:8c:d6:6f:7e:36:7c:
f1:2d:90:32:a3:2d:2e:ea:45:b8:8f:5a:05:26:0f:
fe:3f:1c:74:a0:4b:ad:dd:77:54:16:39:4f:41:c9:
3a:03:01:78:97:5e:4d:c2:bc:db:bc:db:06:be:f0:
09:dc:5a:8d:d2:95:12:d5:73:f5:61:7c:2b:95:86:
44:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F9:5A:CF:CF:B8:4A:C8:BB:2F:6B:24:D9:F4:00:44:3B:82:02:9B
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9a:49:d6:a2:aa:d6:85:fc:25:44:a1:c9:04:a7:93:d2:c3:
45:fb:48:04:d0:46:dc:0f:6a:dd:fc:16:00:00:b3:f0:21:ca:
5e:d7:bb:a2:db:be:9c:13:92:f7:a0:39:e6:db:e0:ce:28:fc:
ba:75:41:1e:d8:d0:29:f4:3e:cd:af:42:6c:d0:82:bd:3b:3b:
e6:e5:67:7f:d7:bc:4e:1a:09:f5:06:20:b4:ce:b8:90:0d:5c:
12:c4:4d:d6:be:c3:85:7e:2a:89:55:20:a1:25:5e:41:63:77:
84:6b:54:26:44:ef:8c:d9:ea:0e:d3:7b:6a:f8:d9:02:e1:a7:
e9:9c:3b:64:d3:cc:a4:78:c8:cb:3d:a9:aa:26:a7:55:c5:c1:
ae:18:b2:cb:9e:95:a3:61:ec:4e:d9:ba:1f:59:36:f2:66:b4:
1a:19:b0:4d:06:78:d7:28:a6:9c:85:2d:82:c0:39:98:09:93:
b4:04:f6:d0:2a:d5:96:84:b8:43:5c:69:83:0b:2d:15:2c:0c:
d5:7e:b8:8b:d3:34:ef:03:f7:da:89:92:77:8f:4b:69:7b:17:
ec:d2:f1:7a:06:16:31:a7:14:8f:b3:93:a7:99:5a:28:bb:a1:
34:d9:10:cb:0a:fe:0d:c3:2a:9e:94:79:f3:6f:12:f1:7d:d3:
a4:09:43:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:36 2026 by rpki-client