Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
File: SjUhO60WmUgIOMBVgPB44kHetYo.mft (raw, json)
Hash identifier: eUGB0+Rvr72nwMiz+5ONbmII8f530kM78Iy0taxzylo=
Subject key identifier: 1F:24:AE:F0:0F:2E:F9:71:1C:21:23:2B:81:81:9D:A8:18:93:3C:B6
Authority key identifier: 4A:35:21:3B:AD:16:99:48:08:38:C0:55:80:F0:78:E2:41:DE:B5:8A
Certificate issuer: /CN=4a35213bad1699480838c05580f078e241deb58a
Certificate serial: 01A1238B1EF5B5864AB3FB00E47E3595DA4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
Manifest number: 01A6
Signing time: Sat 10 Oct 2026 02:01:22 +0000
Manifest this update: Sat 10 Oct 2026 02:01:22 +0000
Manifest next update: Sun 11 Oct 2026 02:01:22 +0000
Files and hashes: 1: SjUhO60WmUgIOMBVgPB44kHetYo.crl (hash: fp686u+X6REkcVED4jIl4/GVxBGcbT0qhL3FTyCM8PA=)
2: V1EGIfr7BvBMfahUaU4NVnlqdEQ.roa (hash: JrfQTYX7TC++GoVkr1xgTObKGu86dQxHF4+9hinDHN8=)
3: e_PoDcp11oHj3X7XTipT_OU4OPQ.roa (hash: +Lh+HAKbeHouZEc3ttgnD9FzVZd95ZF99HpVIGLvd0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:8b:1e:f5:b5:86:4a:b3:fb:00:e4:7e:35:95:da:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a35213bad1699480838c05580f078e241deb58a
Validity
Not Before: Oct 10 02:01:22 2026 GMT
Not After : Oct 11 02:01:22 2026 GMT
Subject: CN=1f24aef00f2ef9711c21232b81819da818933cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:a4:58:ed:63:fb:03:6b:2b:a4:ae:74:0a:
ae:ee:86:8b:88:30:57:58:0d:32:dc:c4:3c:a4:5d:
db:87:1c:77:88:96:90:9c:dc:f3:3f:b8:93:bc:34:
be:47:41:b2:30:85:71:1f:dd:46:76:1f:57:e8:59:
c3:4f:94:d6:00:01:30:42:25:21:de:b3:ee:e5:94:
2b:1c:83:7d:8d:a7:34:3b:66:cd:7e:7e:07:85:c1:
46:ea:9b:73:9a:e6:d7:7e:b9:eb:e1:1e:ac:02:1b:
c9:eb:15:f4:4a:e6:9f:9f:81:9a:b2:27:f7:51:34:
83:c3:e7:4d:a0:c1:3d:45:6b:e3:55:0a:6f:97:32:
02:21:e9:eb:7a:1c:bd:d2:15:d7:da:8a:c3:c9:8e:
12:9c:86:c2:ee:36:0d:a6:10:26:17:fc:38:9a:d0:
c1:23:c5:c0:44:48:bc:8a:6b:3b:bd:71:96:ba:44:
27:e5:70:3c:f0:e4:b1:f8:03:81:0b:d5:37:16:73:
67:21:b0:db:98:ba:11:ac:f2:fc:0a:f3:22:53:d0:
a8:e2:65:cd:ec:7d:70:f6:e2:f4:69:ec:75:14:5e:
98:7e:98:cd:c8:e1:53:fd:35:a8:00:6d:fe:f4:80:
cd:9a:43:b2:ca:cd:85:96:26:e3:ff:88:d3:f9:a7:
4e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:24:AE:F0:0F:2E:F9:71:1C:21:23:2B:81:81:9D:A8:18:93:3C:B6
X509v3 Authority Key Identifier:
keyid:4A:35:21:3B:AD:16:99:48:08:38:C0:55:80:F0:78:E2:41:DE:B5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2d:b4:db:4f:e4:39:36:e7:2b:6e:03:35:24:41:8a:eb:5e:
6d:ae:78:f2:5c:98:cd:1b:1b:57:b8:3d:83:8b:5d:ba:50:1e:
9a:ae:f8:6b:8c:f5:81:32:2b:c7:97:89:cb:05:37:69:be:bb:
e6:f0:8b:c8:ba:f7:2f:1b:cd:d7:68:32:99:5b:ae:ab:ef:27:
61:aa:59:f4:f5:b5:5b:3c:48:f5:8c:0a:24:cf:fb:67:a6:ae:
47:fb:4a:67:05:d7:56:b1:d2:ea:33:05:40:a2:f2:23:89:59:
a7:62:f4:81:74:13:9e:87:dc:2a:66:d8:81:79:ed:4f:29:20:
c1:43:33:46:2d:7d:ce:3f:b5:ea:16:cb:e6:94:be:83:c2:f8:
3e:d5:b2:98:bc:3f:9e:13:d0:c9:72:04:8d:41:f3:f3:ee:73:
aa:15:44:f1:ea:a7:b3:d7:b2:94:05:21:ad:16:9d:b1:99:1c:
35:f4:c9:5c:63:9e:fa:40:bf:75:92:93:97:7f:13:d1:bd:ef:
10:b5:cd:d5:a7:cd:a5:d8:8d:b3:f1:cf:51:84:31:c0:14:1a:
0d:36:5f:b0:c9:df:f1:94:64:8e:3a:78:88:58:b4:47:62:9a:
2c:77:89:16:ec:6b:81:c9:56:d9:61:83:7f:0c:1f:64:8f:50:
04:4b:08:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEjix71tYZKs/sA5H41ldpLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMzUyMTNiYWQxNjk5NDgwODM4YzA1NTgwZjA3OGUyNDFk
ZWI1OGEwHhcNMjYxMDEwMDIwMTIyWhcNMjYxMDExMDIwMTIyWjAzMTEwLwYDVQQD
EygxZjI0YWVmMDBmMmVmOTcxMWMyMTIzMmI4MTgxOWRhODE4OTMzY2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMykWO1j+wNrK6SudAqu7oaLiDBX
WA0y3MQ8pF3bhxx3iJaQnNzzP7iTvDS+R0GyMIVxH91Gdh9X6FnDT5TWAAEwQiUh
3rPu5ZQrHIN9jac0O2bNfn4HhcFG6ptzmubXfrnr4R6sAhvJ6xX0Suafn4Gasif3
UTSDw+dNoME9RWvjVQpvlzICIenrehy90hXX2orDyY4SnIbC7jYNphAmF/w4mtDB
I8XAREi8ims7vXGWukQn5XA88OSx+AOBC9U3FnNnIbDbmLoRrPL8CvMiU9Co4mXN
7H1w9uL0aex1FF6YfpjNyOFT/TWoAG3+9IDNmkOyys2Flibj/4jT+adOfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8krvAPLvlxHCEjK4GBnagYkzy2MB8GA1UdIwQY
MBaAFEo1ITutFplICDjAVYDweOJB3rWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2pVaE82MFdtVWdJT01CVmdQQjQ0a0hldFlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi83MTJmZTUtZmNjOS00Njk1LWExOTQt
MmZkMzNiMjEwZTc2LzEvU2pVaE82MFdtVWdJT01CVmdQQjQ0a0hldFlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi83MTJmZTUtZmNjOS00Njk1LWExOTQtMmZkMzNiMjEwZTc2
LzEvU2pVaE82MFdtVWdJT01CVmdQQjQ0a0hldFlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgC2020/k
OTbnK24DNSRBiuteba548lyYzRsbV7g9g4tdulAemq74a4z1gTIrx5eJywU3ab67
5vCLyLr3LxvN12gymVuuq+8nYapZ9PW1WzxI9YwKJM/7Z6auR/tKZwXXVrHS6jMF
QKLyI4lZp2L0gXQTnofcKmbYgXntTykgwUMzRi19zj+16hbL5pS+g8L4PtWymLw/
nhPQyXIEjUHz8+5zqhVE8eqns9eylAUhrRadsZkcNfTJXGOe+kC/dZKTl38T0b3v
ELXN1afNpdiNs/HPUYQxwBQaDTZfsMnf8ZRkjjp4iFi0R2KaLHeJFuxrgclW2WGD
fwwfZI9QBEsIMw==
-----END CERTIFICATE-----
Generated at Sat Oct 10 12:49:59 2026 by rpki-client