Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
File: sjby5CUi6Y03a-OKieXdUau_eZY.mft (raw, json)
Hash identifier: c4LKj06OpBj9vyQf+NMvN0hF2M9CRM5s3E+3IyygfrE=
Subject key identifier: B3:78:F8:AF:DA:D2:9A:38:18:A6:D3:A9:A8:3D:29:71:06:B6:35:E7
Authority key identifier: B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
Certificate issuer: /CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Certificate serial: 01A08DC4D38FEF018D2DDFBDA1FB1B89EB66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
Manifest number: 1A4C
Signing time: Fri 11 Sep 2026 00:01:21 +0000
Manifest this update: Fri 11 Sep 2026 00:01:21 +0000
Manifest next update: Sat 12 Sep 2026 00:01:21 +0000
Files and hashes: 1: BQSGEx3nMb3rW3Le5hymWyu8-YU.roa (hash: S7mWCQBW//r+Jv4L1fzMRolM2RhYHtuAZtqku2trt+E=)
2: _JF8Eg2LajBMQ-wk536FOe9jq_A.roa (hash: n3KkRLrkwjt5uz08CMrAQjO1W+ar0ekBVWg2d9z/IMg=)
3: oX6Il5fRV1X5jAgqxERBXvUP_Tw.roa (hash: XUq2WuxGzyAj/pRWgnx4uOuNcbSM05FoBf026KrRFWM=)
4: sjby5CUi6Y03a-OKieXdUau_eZY.crl (hash: MtucMAdeRcnRiyyjQwXRtnqxILv6OAa+ZCQJA3CD+WI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:c4:d3:8f:ef:01:8d:2d:df:bd:a1:fb:1b:89:eb:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Validity
Not Before: Sep 11 00:01:21 2026 GMT
Not After : Sep 12 00:01:21 2026 GMT
Subject: CN=b378f8afdad29a3818a6d3a9a83d297106b635e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:75:a6:1b:a9:29:f3:84:c9:5d:18:cf:c7:54:
fa:d8:0c:1e:8b:e9:a4:3f:28:de:14:fb:92:e3:25:
80:d5:c0:c7:15:0b:f9:0f:62:8b:e3:1b:90:a8:40:
bb:dc:ff:cc:06:63:10:56:74:11:fd:10:4c:b5:97:
07:cf:01:cc:34:00:77:ad:ff:17:e1:84:be:17:6d:
1d:b2:8a:4f:55:be:aa:ac:40:6c:20:f7:f1:c7:8e:
84:a0:d9:42:78:9c:c4:86:f9:d6:bb:06:b9:53:1f:
10:bd:67:2d:8a:fc:f5:5b:25:31:4d:24:2f:85:fe:
f3:35:cf:f3:93:94:4b:73:e4:64:f6:f1:a1:1b:bf:
fa:57:d8:74:9e:ce:7e:d5:79:d4:d2:f5:15:09:4c:
18:bf:8a:7b:96:6b:a6:91:dc:0f:d0:3d:95:c3:ff:
fe:6b:e5:c5:95:a8:e1:f0:81:39:62:8b:11:e0:47:
25:06:e7:b0:fc:ea:e2:f9:a9:c4:bd:d4:03:27:65:
0f:61:90:20:44:d5:ed:52:68:0c:a5:00:77:7f:00:
b8:d7:4c:b6:c1:d1:d6:ae:b6:f3:8c:f0:fb:d0:38:
c7:94:d1:b3:2d:f3:45:66:95:9b:fd:5a:6b:8a:cc:
cc:f9:68:7d:62:3d:7d:5d:26:ad:6a:f4:bd:a1:87:
32:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:78:F8:AF:DA:D2:9A:38:18:A6:D3:A9:A8:3D:29:71:06:B6:35:E7
X509v3 Authority Key Identifier:
keyid:B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7f:10:d7:8c:48:bb:9c:bd:87:3c:0f:36:03:bf:f5:09:95:
ce:d4:be:7b:76:46:00:b0:26:3a:78:23:0c:41:11:aa:d3:7d:
69:28:7a:5f:2f:77:0e:5d:88:a6:85:26:8d:c1:c0:d0:21:33:
6d:e7:95:d6:65:32:6a:bb:ae:35:4e:a8:56:5c:70:fa:bb:87:
2c:92:23:a9:eb:57:c7:27:dc:47:1f:d1:8d:56:d0:08:3e:25:
07:fa:a4:39:75:65:77:2d:9d:59:4c:95:af:a5:33:e7:63:e8:
d7:23:8d:ed:c4:6c:8e:da:32:7d:c5:04:3d:34:41:d8:d2:7a:
6e:6c:c6:8f:39:ca:55:45:c1:65:ea:d8:bf:be:f6:44:a6:90:
33:1d:7c:4e:49:05:6f:e8:a4:97:41:02:55:ca:17:fb:36:83:
10:eb:bb:05:41:10:b7:71:89:18:ee:1c:d9:28:1b:df:fe:0b:
bb:23:ad:4a:98:c3:b3:c7:e0:c8:ec:b6:a0:3b:50:72:42:ac:
55:db:68:30:c7:ae:08:ef:7b:be:db:41:0e:82:f2:51:a5:98:
33:b1:d9:ef:3a:73:cf:95:14:b4:e9:77:84:71:74:c3:3b:37:
77:8f:e0:23:74:0e:4c:65:dd:52:27:31:94:ef:cd:1b:8e:74:
f0:17:a8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 04:15:08 2026 by rpki-client