Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
File: SjUhO60WmUgIOMBVgPB44kHetYo.mft (raw, json)
Hash identifier: fdTfOFdUGDhdjNgJx/7PlUjrREGGTwydmM9cr2r0/Jw=
Subject key identifier: 2D:D9:9E:35:F9:1D:C0:48:D7:9E:58:2D:89:87:97:47:29:3D:E8:A6
Authority key identifier: 4A:35:21:3B:AD:16:99:48:08:38:C0:55:80:F0:78:E2:41:DE:B5:8A
Certificate issuer: /CN=4a35213bad1699480838c05580f078e241deb58a
Certificate serial: 019F93C93DAE30FBA8E339BD62F9B0AE0553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
Manifest number: D7
Signing time: Fri 24 Jul 2026 11:01:06 +0000
Manifest this update: Fri 24 Jul 2026 11:01:06 +0000
Manifest next update: Sat 25 Jul 2026 11:01:06 +0000
Files and hashes: 1: SjUhO60WmUgIOMBVgPB44kHetYo.crl (hash: ZDkUJzZustzaCwrsekZCepsMq3GQD5DHrNdaizxYLEM=)
2: V1EGIfr7BvBMfahUaU4NVnlqdEQ.roa (hash: JrfQTYX7TC++GoVkr1xgTObKGu86dQxHF4+9hinDHN8=)
3: e_PoDcp11oHj3X7XTipT_OU4OPQ.roa (hash: +Lh+HAKbeHouZEc3ttgnD9FzVZd95ZF99HpVIGLvd0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:3d:ae:30:fb:a8:e3:39:bd:62:f9:b0:ae:05:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a35213bad1699480838c05580f078e241deb58a
Validity
Not Before: Jul 24 11:01:06 2026 GMT
Not After : Jul 25 11:01:06 2026 GMT
Subject: CN=2dd99e35f91dc048d79e582d89879747293de8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:84:a2:df:fa:49:9f:5c:08:72:e8:b7:53:1e:
18:a6:1b:a1:3b:9a:21:15:a6:ec:3d:1d:5c:13:89:
78:d0:c7:fc:99:e1:a3:11:0a:36:8f:61:34:7c:ab:
fe:0b:3a:b1:69:6b:5d:b5:db:0f:a4:81:70:cb:8a:
b4:71:7b:80:1d:22:6d:4b:d8:85:64:56:7f:19:01:
34:d6:d8:ed:0b:85:b7:a8:ff:33:02:5c:a9:21:7c:
92:12:14:3d:a0:ca:7a:f3:c5:35:f8:0d:88:7d:b4:
c9:e3:00:f7:86:f6:23:02:d1:0b:c1:11:fa:8d:8b:
1e:e3:de:f3:e3:5a:7d:6d:a1:a0:67:75:c0:23:99:
85:29:ac:12:ce:a9:ae:e7:7c:bc:af:6b:b6:8b:0e:
1a:0f:75:a3:7d:96:1c:d2:f5:a4:fb:e5:45:96:4b:
6f:56:a7:03:69:3d:14:7f:f6:df:ba:83:26:34:a0:
3c:67:39:b3:44:c1:53:a2:a3:a5:48:2d:5f:80:19:
d1:fa:c8:a3:11:15:d0:e6:b3:07:aa:1a:10:c8:9b:
cc:08:41:57:ee:7a:fd:87:33:0b:25:e3:92:7d:c5:
d5:2c:53:30:b4:38:01:f6:d4:9a:2a:e7:d2:a7:16:
29:75:b6:a3:21:b8:af:26:ca:04:4e:33:01:77:78:
e0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D9:9E:35:F9:1D:C0:48:D7:9E:58:2D:89:87:97:47:29:3D:E8:A6
X509v3 Authority Key Identifier:
keyid:4A:35:21:3B:AD:16:99:48:08:38:C0:55:80:F0:78:E2:41:DE:B5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e9:df:ff:ac:5f:fd:d2:e1:af:7b:6f:31:4d:a6:ca:e7:2e:
07:29:bf:a2:d3:5c:7d:31:da:73:be:11:13:a1:72:d0:35:a4:
c6:90:ee:2b:57:55:3f:82:93:32:f8:c5:6f:16:2a:66:b8:14:
3a:d7:f3:02:d5:58:fa:f5:50:c1:d9:93:6c:63:07:6e:06:a4:
3a:bb:fa:98:4f:20:f2:87:31:2e:44:c0:16:32:e9:eb:40:f0:
66:cd:7a:b8:38:cd:c2:1a:5a:40:d6:81:29:0a:27:88:e5:57:
eb:ce:7e:d9:b5:67:61:c2:49:ab:82:bd:b5:22:44:c2:19:35:
e5:69:f7:fa:29:8e:a8:4d:76:22:91:54:00:ea:c8:41:85:4c:
1c:f8:8e:70:ac:10:6c:17:35:1d:a2:55:3a:80:1f:f8:a0:af:
fd:78:70:1d:d0:e5:a6:62:d5:d6:20:03:a0:f7:1b:96:91:e5:
09:b1:be:c6:5c:d1:60:a7:c0:53:87:07:52:90:5f:3b:d5:49:
56:b5:f6:5c:7b:dd:9e:7b:fc:fc:67:e8:45:2d:96:99:cc:e9:
e5:57:38:50:5b:23:7c:7e:71:0f:07:95:65:8a:e9:81:e5:74:
3a:24:8e:9e:8f:df:8c:16:15:e9:de:b0:ff:1b:55:e4:08:61:
52:ee:83:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:50:42 2026 by rpki-client