Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft
File: SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft (raw, json)
Hash identifier: 1u8gNAPjAI4FTgav3WkzHFvPEqwoTT/3LTPgEe/WQ9U=
Subject key identifier: 2A:E2:7B:19:7E:9B:6C:CB:07:53:E8:51:6B:09:9A:6C:18:90:0A:22
Authority key identifier: 48:94:9D:3C:87:35:03:DB:D2:96:BD:A6:0E:B7:77:BC:54:1D:51:4E
Certificate issuer: /CN=48949d3c873503dbd296bda60eb777bc541d514e
Certificate serial: 019D39E5482946C05469D608A66976C13231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft
Manifest number: 064B
Signing time: Sun 29 Mar 2026 14:00:20 +0000
Manifest this update: Sun 29 Mar 2026 14:00:20 +0000
Manifest next update: Mon 30 Mar 2026 14:00:20 +0000
Files and hashes: 1: SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl (hash: 94Y03RrsXnthO1ejOkXfUkt9Rv84kIVCnjQKOG8v3js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:48:29:46:c0:54:69:d6:08:a6:69:76:c1:32:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48949d3c873503dbd296bda60eb777bc541d514e
Validity
Not Before: Mar 29 14:00:20 2026 GMT
Not After : Mar 30 14:00:20 2026 GMT
Subject: CN=2ae27b197e9b6ccb0753e8516b099a6c18900a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:d4:df:4e:29:38:61:c4:e1:c1:05:8d:cc:
e4:7c:64:33:9c:6f:c7:eb:42:bd:76:20:39:e8:a6:
a7:ad:87:32:4b:86:32:c3:cb:3d:9e:6f:4f:ea:cd:
ca:60:1b:65:a2:88:5f:84:fa:c5:25:a8:d3:b1:60:
fc:09:b6:2b:9f:3b:54:bf:49:d7:a9:48:b2:83:0f:
4e:e6:26:d9:6d:72:fe:b6:a6:26:2a:77:6e:89:56:
21:aa:34:5d:1b:95:6b:a0:39:4d:70:80:15:99:d1:
0c:cf:f2:b3:cb:5e:b5:de:72:3d:3b:10:3f:73:de:
c9:66:e7:30:00:dd:c2:4f:3f:1c:33:7e:4e:5c:06:
e8:f0:81:ed:12:1a:1a:10:8e:35:a6:32:2f:8c:f7:
49:31:2e:7a:14:2a:48:8e:7c:2c:8e:7d:ae:ef:69:
65:f0:23:a7:14:da:80:0a:de:32:ee:57:f9:e6:8b:
3b:2d:0d:b2:14:23:05:77:a1:9e:24:99:bf:16:fc:
b6:4b:af:16:89:ae:de:42:d8:cc:00:c9:b3:ff:0f:
7c:bb:77:55:bc:15:41:f8:a5:4b:b9:5c:26:3c:90:
d6:16:cc:47:fd:5f:a5:e1:34:ff:43:a6:16:08:98:
25:dd:2f:0c:0c:3b:ce:99:ba:03:64:7e:22:d1:ae:
ec:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E2:7B:19:7E:9B:6C:CB:07:53:E8:51:6B:09:9A:6C:18:90:0A:22
X509v3 Authority Key Identifier:
keyid:48:94:9D:3C:87:35:03:DB:D2:96:BD:A6:0E:B7:77:BC:54:1D:51:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:71:fb:6d:8d:1f:09:5d:82:36:15:8b:0c:ff:0c:ff:5c:06:
57:4d:5f:0c:91:35:be:1a:a2:54:cc:1c:e7:36:e3:c2:ae:33:
df:3f:5a:07:ac:e8:89:67:1b:33:b1:75:b4:bf:1f:8d:e8:38:
99:a9:6a:60:f2:11:36:7e:14:c4:95:8c:42:f4:31:b4:9d:7b:
57:0c:36:3d:07:cd:2a:58:df:ea:54:55:3e:1a:24:9c:21:1f:
27:27:a7:fd:d5:e2:ee:32:6c:e5:7d:de:25:52:7b:d3:26:d4:
1f:21:13:77:ce:13:cc:d5:16:3b:f5:a3:f4:95:3f:e2:b3:70:
b6:18:2b:e6:4d:ee:18:0e:8b:ba:a6:fc:24:e8:a2:8f:c2:dc:
0d:18:93:af:38:28:e8:8b:13:ae:fa:e6:f9:38:e1:88:02:1d:
47:29:eb:68:06:75:6a:5b:af:d5:9c:a4:19:cc:91:3e:bb:75:
22:16:26:b8:66:4c:a3:f2:46:82:ef:b0:95:ec:38:66:2b:19:
45:f9:36:96:68:16:92:ec:f3:dd:ec:9e:63:8d:5e:31:2d:25:
00:93:f8:eb:f0:c0:0a:32:2b:ac:23:4f:c0:1a:36:6f:1b:4f:
31:86:16:fb:0b:9d:fb:3f:7f:65:50:5f:6e:93:34:08:69:1f:
df:39:31:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055UgpRsBUadYIpml2wTIxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4OTQ5ZDNjODczNTAzZGJkMjk2YmRhNjBlYjc3N2JjNTQx
ZDUxNGUwHhcNMjYwMzI5MTQwMDIwWhcNMjYwMzMwMTQwMDIwWjAzMTEwLwYDVQQD
EygyYWUyN2IxOTdlOWI2Y2NiMDc1M2U4NTE2YjA5OWE2YzE4OTAwYTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqbU304pOGHE4cEFjczkfGQznG/H
60K9diA56KanrYcyS4Yyw8s9nm9P6s3KYBtloohfhPrFJajTsWD8CbYrnztUv0nX
qUiygw9O5ibZbXL+tqYmKnduiVYhqjRdG5VroDlNcIAVmdEMz/Kzy1613nI9OxA/
c97JZucwAN3CTz8cM35OXAbo8IHtEhoaEI41pjIvjPdJMS56FCpIjnwsjn2u72ll
8COnFNqACt4y7lf55os7LQ2yFCMFd6GeJJm/Fvy2S68Wia7eQtjMAMmz/w98u3dV
vBVB+KVLuVwmPJDWFsxH/V+l4TT/Q6YWCJgl3S8MDDvOmboDZH4i0a7stQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCriexl+m2zLB1PoUWsJmmwYkAoiMB8GA1UdIwQY
MBaAFEiUnTyHNQPb0pa9pg63d7xUHVFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0pTZFBJYzFBOXZTbHIybURyZDN2RlFkVVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lNGU2MzctNzI5Yi00N2JlLWEwYWIt
NTM0OTYyMDE5NDYwLzEvU0pTZFBJYzFBOXZTbHIybURyZDN2RlFkVVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lNGU2MzctNzI5Yi00N2JlLWEwYWItNTM0OTYyMDE5NDYw
LzEvU0pTZFBJYzFBOXZTbHIybURyZDN2RlFkVVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB3H7bY0f
CV2CNhWLDP8M/1wGV01fDJE1vhqiVMwc5zbjwq4z3z9aB6zoiWcbM7F1tL8fjeg4
malqYPIRNn4UxJWMQvQxtJ17Vww2PQfNKljf6lRVPhoknCEfJyen/dXi7jJs5X3e
JVJ70ybUHyETd84TzNUWO/Wj9JU/4rNwthgr5k3uGA6Luqb8JOiij8LcDRiTrzgo
6IsTrvrm+TjhiAIdRynraAZ1aluv1ZykGcyRPrt1IhYmuGZMo/JGgu+wlew4ZisZ
Rfk2lmgWkuzz3eyeY41eMS0lAJP46/DACjIrrCNPwBo2bxtPMYYW+wud+z9/ZVBf
bpM0CGkf3zkxUA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:21:54 2026 by rpki-client