Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
File: SjQVWNugttuUxVzgbjBv9lGdbvE.mft (raw, json)
Hash identifier: wdej2xZ/VNXiZDR4sycNBF4DlJSK4SDw96UOH+5/MFI=
Subject key identifier: 81:DC:22:43:02:EF:4F:F0:37:DA:11:7B:5D:22:B0:AD:B5:3E:D0:30
Authority key identifier: 4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1
Certificate issuer: /CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1
Certificate serial: 019D2A72E742A7092DF875543DA0401437BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
Manifest number: 0AC0
Signing time: Thu 26 Mar 2026 14:01:06 +0000
Manifest this update: Thu 26 Mar 2026 14:01:06 +0000
Manifest next update: Fri 27 Mar 2026 14:01:06 +0000
Files and hashes: 1: RS_ewMX54hVbpRD6ei0HJL0oRHE.roa (hash: I5QkBNTE69fpfHSb13XFTFHNBBve1NDU9UJ/JapJNdQ=)
2: SjQVWNugttuUxVzgbjBv9lGdbvE.crl (hash: 8RusXpH2kp40KVcKuzmPmU5rvdNmKV+xmWOp9zQ2Hdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:e7:42:a7:09:2d:f8:75:54:3d:a0:40:14:37:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1
Validity
Not Before: Mar 26 14:01:06 2026 GMT
Not After : Mar 27 14:01:06 2026 GMT
Subject: CN=81dc224302ef4ff037da117b5d22b0adb53ed030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fb:98:40:8c:62:bb:ea:3b:3c:4a:b5:4b:80:
55:87:6b:e7:16:12:51:20:19:e2:5c:42:4e:4f:db:
7b:39:bc:bf:32:4b:9b:83:e9:67:f3:80:e8:a3:d1:
61:32:4d:2b:0b:80:61:2e:b8:9c:15:d1:18:45:e3:
c7:f4:3b:2d:d1:68:08:6f:24:94:31:cc:66:de:52:
29:b1:41:e2:1a:9a:49:d2:39:e7:bc:81:d6:95:88:
17:4e:a3:a7:20:69:01:e0:28:16:01:59:19:22:b7:
e1:f9:9a:3a:4b:09:19:e5:19:ca:c2:ee:cc:e3:1d:
7c:7d:cf:de:78:b7:f3:25:e4:e9:d5:3c:15:05:6f:
95:e9:99:2c:60:68:9a:e5:63:f7:9b:72:9a:fd:6f:
7e:09:9c:71:c0:7e:f6:aa:fb:22:34:3e:15:b8:a3:
59:26:5e:72:eb:c8:74:97:1f:85:d2:63:6d:36:31:
21:88:44:6e:8b:61:4e:11:64:3e:b9:00:0e:d9:11:
87:ce:4c:63:2e:21:ba:eb:55:09:8d:77:0b:7f:9a:
29:99:d5:a1:07:ae:6c:bc:65:e3:6a:79:db:f4:6b:
1d:22:51:c0:6b:79:0b:63:8b:ad:ba:83:48:24:01:
0c:b7:34:3d:bb:e0:c2:67:16:0a:34:7e:aa:d4:e6:
0a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DC:22:43:02:EF:4F:F0:37:DA:11:7B:5D:22:B0:AD:B5:3E:D0:30
X509v3 Authority Key Identifier:
keyid:4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7d:68:bf:4e:28:64:92:21:e2:37:e1:75:d2:fd:22:53:c1:
7d:26:df:57:c9:bc:17:07:29:43:b3:63:36:63:97:9d:db:02:
17:5e:bb:db:4c:31:8b:33:69:65:d4:87:f7:40:ef:4b:b5:c0:
0a:a1:38:0c:af:bc:48:6d:23:3b:07:58:d3:0b:c1:07:7a:b7:
d6:86:26:ea:e0:d7:13:40:dd:31:a4:5b:2c:81:3f:86:3e:89:
e0:f1:00:20:b6:1c:5e:e6:b5:57:b7:f2:a1:a6:72:21:fd:76:
83:f7:9e:0a:ba:ab:f0:48:f5:ca:72:95:a2:63:9a:a0:33:6a:
d1:f9:d2:63:37:f0:5d:9c:28:70:3a:bc:52:1d:db:1d:1a:9b:
ec:24:14:60:86:10:2a:10:37:4c:57:52:f2:ef:f8:57:b0:2b:
91:71:3c:b3:b8:cc:11:8c:c5:72:79:5b:62:4d:86:05:a3:61:
45:48:8f:3e:16:61:0b:d2:2c:1c:7c:f7:a8:ed:3f:fc:43:0c:
ed:88:3b:c5:00:38:76:51:b4:90:2e:9b:4f:42:1d:91:a7:9c:
42:d3:89:40:da:7e:27:d0:f1:9a:36:56:71:65:7d:55:3d:5f:
30:68:d6:c1:35:e5:21:23:1c:c1:cd:b9:34:a7:6b:76:dc:b2:
3a:2c:b7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:10 2026 by rpki-client