Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
File: sj64SeC2lA5P9UfeC0GwA_nhEFw.mft (raw, json)
Hash identifier: W2HLofAG65Muwm42rKaYC8zJr9QpvzdTRSfpCpTSshc=
Subject key identifier: 04:BE:FF:ED:66:5A:3C:29:7C:B1:3A:5E:AE:36:93:62:99:5B:C8:9D
Authority key identifier: B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C
Certificate issuer: /CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
Certificate serial: 019D265EEE2CCBCE610A0429AD39F5A04939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
Manifest number: 0BF1
Signing time: Wed 25 Mar 2026 19:00:48 +0000
Manifest this update: Wed 25 Mar 2026 19:00:48 +0000
Manifest next update: Thu 26 Mar 2026 19:00:48 +0000
Files and hashes: 1: 2zzlpKPODdf8hF4555DoYKgQ_0Q.roa (hash: sdARz4Jh+abp/1GTc1LjA7oFLnqDLJUlfwULONlwmOM=)
2: Uz9TM-baJ3XQHq98E4_sczvBhQU.roa (hash: rSZ//pyykhfyoXS+8XiZOdmRQameb6KqxCKCpnB3YUw=)
3: aZFOkLjs0r0-rRh1vdE-DfBMgvw.roa (hash: 59/7mJvpFngGfl1MeWjTYVHHdedKaNfpchig8vCqutM=)
4: sj64SeC2lA5P9UfeC0GwA_nhEFw.crl (hash: 43LSDqgR3qK0Bzq1fkApHDEJuxyUKJvHeidEcoqmiGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:ee:2c:cb:ce:61:0a:04:29:ad:39:f5:a0:49:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
Validity
Not Before: Mar 25 19:00:48 2026 GMT
Not After : Mar 26 19:00:48 2026 GMT
Subject: CN=04beffed665a3c297cb13a5eae369362995bc89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:ec:ca:db:ab:94:de:e3:2e:97:36:f6:42:
8f:8c:74:69:02:4b:f2:8f:a6:61:0d:dc:b8:3d:f0:
b7:3f:33:d6:8e:78:8f:14:bf:13:f3:ba:70:24:ee:
a8:4e:98:6b:5e:91:95:39:42:73:7b:d5:c2:55:41:
93:2a:b7:9a:6b:48:22:37:77:9d:1d:c4:6c:cf:55:
e3:a5:bd:99:f5:85:fd:dc:e4:ef:06:45:db:0f:56:
de:6f:14:85:da:88:30:df:da:ee:2e:93:ec:ca:aa:
57:9c:ab:13:eb:15:e3:a3:58:d4:41:a4:28:89:cc:
61:bb:7f:70:a6:cd:a1:28:86:57:48:1a:cc:ec:ad:
cb:b4:fa:00:06:4c:29:38:07:3c:b9:e4:aa:28:11:
41:d7:76:3e:b6:1e:67:28:f7:25:5d:98:f6:4b:87:
0f:51:ee:1a:06:01:0d:9a:92:c7:bc:8c:0a:4f:2f:
e0:95:00:87:dd:b8:28:f3:15:17:a6:97:8c:15:a4:
d1:a7:b1:f3:08:a1:34:92:e7:20:b4:28:88:35:c3:
03:c7:35:5a:ce:75:0d:34:d5:ad:ba:22:73:d1:62:
98:48:fc:64:29:67:27:3a:fc:77:fe:d0:11:9e:37:
ec:23:cb:d2:90:3a:d8:5b:74:45:62:a1:fe:29:ae:
22:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BE:FF:ED:66:5A:3C:29:7C:B1:3A:5E:AE:36:93:62:99:5B:C8:9D
X509v3 Authority Key Identifier:
keyid:B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:de:62:1a:ea:70:84:3f:48:15:44:0a:cb:72:94:a7:53:fd:
3f:ae:0c:3b:49:12:27:3a:da:8c:c7:2f:65:42:3f:ff:15:c9:
7b:1c:84:77:71:47:e9:ea:a1:ca:d5:2b:f4:6a:db:ab:b0:d5:
15:19:67:64:c1:b0:95:a6:31:05:9e:ad:b4:6a:db:2d:27:ff:
2a:0f:cb:d8:d2:94:15:38:51:0b:ff:2a:79:0d:ac:b0:40:e9:
d0:aa:87:fd:c7:77:23:a3:21:4e:57:17:b5:6a:6f:c2:98:a9:
3a:0e:24:27:69:01:29:cf:f7:8d:64:cf:44:61:ce:1b:59:46:
50:c8:b6:d2:f5:9e:e5:22:26:94:a9:93:bd:86:99:4f:c5:07:
65:fc:1b:93:a9:66:5c:aa:60:b2:5e:a2:bb:7c:58:64:0f:a7:
f1:c1:ca:2d:70:2c:da:34:7f:7d:d2:4a:db:69:3c:c5:9c:20:
4a:ea:1f:1c:a3:8b:e0:58:20:15:b9:49:1b:1a:d6:12:4c:25:
d7:e1:08:f3:fc:8c:eb:c9:63:01:f6:cb:7a:3b:32:82:9a:07:
9b:e5:90:4e:92:7b:12:46:10:9b:cb:d7:39:38:a5:f7:71:5a:
6d:7e:a8:65:77:cb:e6:ba:ca:38:d8:5c:ac:39:13:19:80:79:
85:56:f3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:56 2026 by rpki-client