Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
File: sj64SeC2lA5P9UfeC0GwA_nhEFw.mft (raw, json)
Hash identifier: aE2IGIdX8rhkhipSbqwhK4H+yWgedF5YRtjHue1OKFI=
Subject key identifier: 2F:2D:DA:83:62:E1:3D:71:F3:AA:19:F3:0D:AE:DB:95:39:85:BB:7D
Authority key identifier: B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C
Certificate issuer: /CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
Certificate serial: 019E1D906C72FF9047FBA9B1D3F7D2CDD740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
Manifest number: 0C71
Signing time: Tue 12 May 2026 19:01:04 +0000
Manifest this update: Tue 12 May 2026 19:01:04 +0000
Manifest next update: Wed 13 May 2026 19:01:04 +0000
Files and hashes: 1: 2zzlpKPODdf8hF4555DoYKgQ_0Q.roa (hash: sdARz4Jh+abp/1GTc1LjA7oFLnqDLJUlfwULONlwmOM=)
2: Uz9TM-baJ3XQHq98E4_sczvBhQU.roa (hash: rSZ//pyykhfyoXS+8XiZOdmRQameb6KqxCKCpnB3YUw=)
3: aZFOkLjs0r0-rRh1vdE-DfBMgvw.roa (hash: 59/7mJvpFngGfl1MeWjTYVHHdedKaNfpchig8vCqutM=)
4: sj64SeC2lA5P9UfeC0GwA_nhEFw.crl (hash: LLk7DSQ5IvGS+SC5k2F9YTk/zyILGa4A8uv9V4agrnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:6c:72:ff:90:47:fb:a9:b1:d3:f7:d2:cd:d7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
Validity
Not Before: May 12 19:01:04 2026 GMT
Not After : May 13 19:01:04 2026 GMT
Subject: CN=2f2dda8362e13d71f3aa19f30daedb953985bb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c9:a5:a3:a8:74:77:86:0f:d9:c9:97:a9:ef:
d2:81:e3:00:12:c6:32:be:6c:b8:31:f2:14:2a:5d:
e2:0a:45:2e:c8:1c:af:f7:f4:90:c1:45:bb:fe:42:
62:2d:46:cb:a1:a9:52:de:a2:ca:e0:13:27:8c:6d:
0d:1e:4c:38:47:53:8e:e6:27:02:99:20:8d:78:63:
d4:6c:cc:8b:0d:4c:89:7c:64:c5:fb:f5:49:ee:6a:
91:86:44:64:a5:ef:2b:a8:5d:65:71:ad:dc:84:ac:
ef:87:c8:96:24:1e:90:46:30:9c:e6:78:9d:9a:f4:
d2:58:65:50:22:62:1b:7e:08:ab:38:75:b9:55:a9:
4d:2f:c6:7d:7a:22:74:4f:71:28:71:8d:22:64:90:
6c:18:04:53:f1:63:73:ec:e2:a6:e7:09:5a:f9:18:
17:1a:d3:6e:95:1d:3c:9c:af:e1:a0:e5:a5:0a:c7:
34:fb:d5:4a:3b:1f:5a:90:fd:95:e0:ff:b6:75:d5:
74:d5:42:d5:fc:1d:8a:69:e7:ac:8a:6c:19:d7:46:
87:ac:4a:5f:33:b6:fd:66:16:05:dc:bf:0b:d3:67:
c2:61:ce:9f:69:34:50:7c:85:11:59:64:97:ae:ba:
a4:51:e7:dd:e4:04:56:d1:c9:19:9e:3a:aa:73:4f:
91:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2D:DA:83:62:E1:3D:71:F3:AA:19:F3:0D:AE:DB:95:39:85:BB:7D
X509v3 Authority Key Identifier:
keyid:B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:78:8b:94:a8:f2:f8:82:8b:06:6e:5c:33:8b:ae:83:c9:26:
d1:4b:1a:43:ab:9b:e5:06:99:ea:02:b3:9f:42:39:e6:61:5e:
7c:79:38:f0:dd:02:f2:22:9d:f4:52:6a:77:53:f1:05:3c:52:
cf:86:05:4e:c3:74:e3:d1:b0:87:29:5d:52:5a:02:04:a7:1d:
78:03:80:ac:ec:00:72:aa:8e:b3:69:c5:bb:bc:64:39:93:92:
42:f9:b4:5b:7f:21:e3:ce:8a:0d:b7:d2:b0:b3:80:c2:d0:b8:
8e:88:d2:40:63:c2:8b:fb:6e:5d:25:8d:15:ac:a2:9a:45:0c:
b0:ea:58:f8:37:9b:e2:d5:90:b0:93:e5:0d:9a:da:04:1d:cb:
a5:4a:e9:21:90:c9:af:d0:9b:fb:77:d9:94:a1:bb:2d:ea:a5:
7d:4f:01:59:1b:4d:85:72:87:49:e5:aa:1a:14:44:35:ce:44:
80:90:1b:e3:56:79:4e:b4:b2:b7:1e:4f:bd:63:9a:7a:d9:fe:
ea:63:50:50:dd:a9:0a:b5:b7:c5:7d:f0:fd:c4:77:9f:25:0d:
ea:f1:ac:62:b6:0b:b1:4a:68:95:5f:23:5e:bd:cc:24:71:61:
c7:03:3e:1d:26:ee:64:ca:33:8a:bd:62:90:4a:55:05:c0:e2:
a1:4b:9d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:13 2026 by rpki-client