Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
File: SjUhO60WmUgIOMBVgPB44kHetYo.mft (raw, json)
Hash identifier: YRJwejMCTln7ullQBDMm3HRkdlWa6MJBUjEjpRWVE/M=
Subject key identifier: 81:94:6B:01:B6:42:FD:5D:18:62:B2:B6:B3:F6:AA:DC:0A:DF:65:A8
Authority key identifier: 4A:35:21:3B:AD:16:99:48:08:38:C0:55:80:F0:78:E2:41:DE:B5:8A
Certificate issuer: /CN=4a35213bad1699480838c05580f078e241deb58a
Certificate serial: 019E1F11357F027E7BCAB5FC7626727B79DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
Manifest number: 16
Signing time: Wed 13 May 2026 02:01:21 +0000
Manifest this update: Wed 13 May 2026 02:01:21 +0000
Manifest next update: Thu 14 May 2026 02:01:21 +0000
Files and hashes: 1: SjUhO60WmUgIOMBVgPB44kHetYo.crl (hash: JyeHPc4HysBFWGQsHqUzWMz4vkQqSaIMESWEzWUs5Lw=)
2: V1EGIfr7BvBMfahUaU4NVnlqdEQ.roa (hash: JrfQTYX7TC++GoVkr1xgTObKGu86dQxHF4+9hinDHN8=)
3: e_PoDcp11oHj3X7XTipT_OU4OPQ.roa (hash: +Lh+HAKbeHouZEc3ttgnD9FzVZd95ZF99HpVIGLvd0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:35:7f:02:7e:7b:ca:b5:fc:76:26:72:7b:79:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a35213bad1699480838c05580f078e241deb58a
Validity
Not Before: May 13 02:01:21 2026 GMT
Not After : May 14 02:01:21 2026 GMT
Subject: CN=81946b01b642fd5d1862b2b6b3f6aadc0adf65a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a8:44:a1:84:b1:6b:f5:9a:f8:32:17:5c:77:
63:01:7e:df:1e:4e:88:57:d4:3c:31:9b:4a:28:f8:
8a:3b:d4:ea:5f:73:03:d8:98:06:9c:f2:5f:61:ce:
3c:68:67:f7:55:5c:ab:dd:45:59:00:84:f2:01:0d:
50:db:9f:d8:c0:6a:a2:7c:e0:b0:0b:19:c9:2c:0e:
de:c1:50:6f:d5:df:2f:68:d9:e1:63:c2:1f:19:c8:
1d:95:92:dc:cf:d6:92:33:bd:fd:85:8a:62:50:7d:
da:91:4f:b9:0e:ed:44:c8:26:5a:68:ab:54:e4:86:
ca:c6:49:63:bf:e1:a5:8b:b3:be:56:11:ba:6f:29:
88:e7:f8:c6:52:fd:b7:6e:66:23:fb:70:58:34:4e:
f3:c1:a7:8b:d7:1d:aa:4f:49:dd:9d:ed:37:48:40:
c1:7b:2d:a2:3c:9c:0e:d8:60:93:fc:82:42:6e:79:
d4:58:e4:84:06:fb:07:0b:00:bd:05:0f:ac:ee:b2:
8c:36:5c:de:76:da:0c:aa:fe:ec:24:91:4f:d8:d8:
3d:29:c0:d7:23:5c:70:70:96:2c:7a:78:c1:3e:22:
24:9c:10:4c:58:bd:37:82:21:64:62:80:43:17:fd:
32:4b:42:4e:85:48:3a:ea:66:39:19:5a:05:a2:3b:
57:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:94:6B:01:B6:42:FD:5D:18:62:B2:B6:B3:F6:AA:DC:0A:DF:65:A8
X509v3 Authority Key Identifier:
keyid:4A:35:21:3B:AD:16:99:48:08:38:C0:55:80:F0:78:E2:41:DE:B5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:41:8f:48:50:56:a6:6f:3e:db:ff:c2:e8:fc:43:03:cc:7a:
3d:eb:fc:59:f5:a2:c1:31:a9:c9:92:f6:67:e0:91:bc:77:d6:
4e:65:77:cc:35:1b:5c:ab:4f:8c:db:a8:31:05:1c:27:67:ee:
b9:0a:de:23:e3:bf:87:e5:b2:71:64:59:ed:e4:bf:36:a3:dc:
cc:03:19:7d:dd:69:92:fb:2c:9c:2e:a7:f6:eb:64:9e:38:7c:
50:7e:14:71:ad:3e:04:20:42:8d:3a:18:1a:b6:17:a8:3d:ae:
4e:d4:6f:5d:ed:5c:73:8e:b6:13:f6:69:19:bf:40:5d:97:f9:
09:11:89:6a:43:96:6b:62:ef:43:8d:b1:2e:21:9f:2a:5e:05:
9a:07:70:5d:23:5a:63:f3:0e:5b:61:26:8a:a3:5b:f3:91:82:
1b:1a:8a:fb:41:1e:67:ba:2b:e8:c9:6c:45:68:a1:95:a4:aa:
9b:a2:a7:e2:89:c4:4f:1e:42:1c:b8:30:48:cf:8f:58:6f:bd:
e0:d6:00:61:77:86:f1:8f:37:5e:9b:d0:ac:98:83:77:c6:e4:
4b:aa:e0:07:d9:07:8e:ab:1c:34:d6:54:17:4c:f6:e1:98:67:
71:3f:5c:6f:a5:01:57:a4:f2:d9:8e:b7:a6:72:21:15:93:04:
34:93:de:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:13 2026 by rpki-client