Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
File: sjby5CUi6Y03a-OKieXdUau_eZY.mft (raw, json)
Hash identifier: ih1JMDXj7fUKQaztxaTLJvCDnuThPnyFKJZK+tYruK8=
Subject key identifier: 08:D0:F4:07:11:5A:70:09:9E:D8:A8:07:15:60:D2:CC:19:89:EB:47
Authority key identifier: B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
Certificate issuer: /CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Certificate serial: 019D382EA95062C50A1926708601CCA2209B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 06:01:15 +0000
Manifest this update: Sun 29 Mar 2026 06:01:15 +0000
Manifest next update: Mon 30 Mar 2026 06:01:15 +0000
Files and hashes: 1: BQSGEx3nMb3rW3Le5hymWyu8-YU.roa (hash: S7mWCQBW//r+Jv4L1fzMRolM2RhYHtuAZtqku2trt+E=)
2: _JF8Eg2LajBMQ-wk536FOe9jq_A.roa (hash: n3KkRLrkwjt5uz08CMrAQjO1W+ar0ekBVWg2d9z/IMg=)
3: oX6Il5fRV1X5jAgqxERBXvUP_Tw.roa (hash: XUq2WuxGzyAj/pRWgnx4uOuNcbSM05FoBf026KrRFWM=)
4: sjby5CUi6Y03a-OKieXdUau_eZY.crl (hash: 4TezMAK7AvaNPLX5S57Oty7Ee3elSesqoFoErBXjhSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:a9:50:62:c5:0a:19:26:70:86:01:cc:a2:20:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Validity
Not Before: Mar 29 06:01:15 2026 GMT
Not After : Mar 30 06:01:15 2026 GMT
Subject: CN=08d0f407115a70099ed8a8071560d2cc1989eb47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0c:9d:41:83:11:01:c1:d1:e2:06:98:a3:39:
ae:8e:36:5a:d4:b0:a3:0d:2e:bc:7d:14:50:9a:b2:
fc:e7:7a:50:19:76:8c:99:d1:e0:98:08:90:80:da:
f0:05:c2:8d:95:08:ac:a9:41:4f:44:79:38:fa:c7:
88:62:b0:51:3b:85:5d:ec:9e:c1:ab:2a:4f:10:cb:
d0:2f:c3:43:ba:7c:59:cb:0f:49:93:69:43:25:0b:
7b:1b:46:e9:f2:84:4c:a8:6f:09:9d:02:35:be:d2:
16:0b:e0:84:bf:4e:b6:4d:1d:70:ba:88:31:02:09:
58:df:19:1c:bf:20:7c:b4:a8:f6:55:1d:16:54:e4:
1e:3e:5c:bc:1f:34:df:14:76:86:54:4b:b6:51:f2:
74:02:6d:b3:22:09:d2:1a:ac:f2:4f:0c:a8:60:13:
04:a3:d2:fd:3a:c5:d2:df:1a:75:71:c4:13:19:11:
57:4a:a3:3f:ed:da:7e:f9:61:a4:5a:cb:c9:55:da:
74:7b:a9:0e:15:86:52:41:8e:65:17:33:2d:c1:25:
10:a5:0f:bd:7e:bc:e9:ab:e5:b0:90:18:83:7f:b2:
79:5c:26:bc:d8:7e:56:89:6d:fd:c4:1e:9a:de:5b:
34:a6:58:e1:78:51:4a:bc:7b:56:29:a7:7c:59:5c:
70:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D0:F4:07:11:5A:70:09:9E:D8:A8:07:15:60:D2:CC:19:89:EB:47
X509v3 Authority Key Identifier:
keyid:B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ed:23:14:c9:50:90:4e:f2:c7:1a:23:a2:ed:15:6a:dc:ef:
c7:18:bd:13:f0:3b:5e:6c:c7:b7:dd:a6:39:22:63:3f:f5:a5:
ef:2b:0d:94:c7:71:e0:40:fa:71:ca:85:62:de:5b:3b:b1:38:
3c:10:13:83:08:d6:e2:67:77:a6:08:d6:bd:9e:63:17:40:ca:
d0:32:70:95:cf:cb:af:ee:a7:37:e2:b1:a3:0a:af:41:2c:29:
72:f0:1b:ec:55:fc:95:cd:d2:ff:2d:cc:a4:a1:3d:cf:4a:fd:
22:17:8b:59:a6:d3:fc:19:52:54:30:3b:b0:d9:c0:a0:cd:62:
10:cc:6b:b7:92:c5:ec:10:30:de:53:30:03:71:24:cd:b5:fb:
29:9d:7b:0d:33:22:c8:91:a7:02:bb:69:84:77:40:67:49:a0:
0f:04:88:f0:74:34:a2:28:33:67:2c:e1:1b:6b:67:88:f6:3c:
71:cc:38:92:e0:ed:c3:c5:01:d7:26:bd:89:8f:d7:28:dd:42:
61:d6:7c:74:c8:45:38:98:db:4c:ee:5d:89:0b:52:12:04:97:
2a:6a:70:cd:5d:2b:ee:fa:2a:ed:84:80:78:27:9a:e7:ce:2e:
92:68:8c:49:d8:d0:72:95:99:b4:01:a5:b8:24:53:81:be:9a:
a9:10:ff:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:08 2026 by rpki-client