Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
File: sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft (raw, json)
Hash identifier: r03Ksik9F+pxieFgrZ/NzNbp6EV9nMWgMlcEB2as3GA=
Subject key identifier: 40:C0:B1:B5:EC:33:E4:AD:AE:52:9D:1D:8C:BA:8B:52:8E:A6:37:BD
Authority key identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
Certificate issuer: /CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Certificate serial: 01A10512A84ED631C3D7B1A0F33D3D8FFE9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
Manifest number: 1A89
Signing time: Sun 04 Oct 2026 04:01:11 +0000
Manifest this update: Sun 04 Oct 2026 04:01:11 +0000
Manifest next update: Mon 05 Oct 2026 04:01:11 +0000
Files and hashes: 1: J8WfogeIpk1UKcHSO8WrjdEFqSM.roa (hash: PzzkgqrS9E4dkHoOcT2At52JZ2wJfpowp9BIjzEgVJE=)
2: sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl (hash: iEv1gCj7yb/QNAWvWO9/ure8VwpnVSdRgdF1Vkkzz6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:12:a8:4e:d6:31:c3:d7:b1:a0:f3:3d:3d:8f:fe:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Validity
Not Before: Oct 4 04:01:11 2026 GMT
Not After : Oct 5 04:01:11 2026 GMT
Subject: CN=40c0b1b5ec33e4adae529d1d8cba8b528ea637bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:70:60:bc:df:08:7b:5a:47:a9:1a:14:67:95:
5f:e1:2c:12:8d:57:c1:87:a6:c3:22:f7:b4:ac:7d:
30:d2:96:51:18:c1:5c:40:8d:80:bc:f5:4a:5f:0c:
53:ec:c7:87:6c:7e:d4:7f:43:5a:a8:13:08:93:7d:
59:be:35:a7:09:70:35:b7:4b:e1:d9:fe:20:24:97:
3a:25:94:7b:b8:92:c5:dc:fa:3a:df:3a:a7:47:13:
2d:7d:d3:31:3f:7d:5a:89:de:ce:de:17:53:82:21:
3c:1b:fe:d5:05:1e:f4:2d:15:24:63:33:38:98:73:
eb:50:3f:8a:6f:91:12:65:2b:c0:da:95:4c:0c:70:
eb:28:de:b1:95:ec:e9:76:ff:52:66:b7:c2:51:c6:
a3:78:6a:f0:77:6e:6c:5f:65:c3:f5:62:2b:0a:44:
0a:31:21:28:a3:ab:98:02:66:f3:18:d6:3e:b0:c1:
2c:3d:da:ec:8b:d5:bf:70:96:82:54:03:04:5e:be:
47:3f:eb:e8:7e:3b:cd:87:8b:62:57:b5:45:d9:05:
91:75:57:b2:ef:2a:43:c6:72:f8:b1:0a:62:e2:e0:
d1:5b:87:3f:4a:09:d3:df:af:29:cc:92:a9:87:b6:
1c:8e:b1:54:e8:65:af:cd:38:ee:68:38:bc:5a:27:
e2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C0:B1:B5:EC:33:E4:AD:AE:52:9D:1D:8C:BA:8B:52:8E:A6:37:BD
X509v3 Authority Key Identifier:
keyid:B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7c:bd:2d:6a:a6:8a:8e:35:a7:38:db:b0:6e:51:a2:1b:00:
98:34:9c:a5:a6:5f:bb:7d:83:a5:95:65:8e:5b:1b:8d:38:2d:
c7:cd:95:b4:00:0c:7c:f7:f5:92:c7:db:f3:ec:fe:a0:7b:34:
9f:55:b3:aa:8c:be:b4:ca:71:d6:27:b1:02:48:2d:66:39:1a:
e7:e5:02:c9:53:c6:f5:e4:e3:b4:7d:f2:32:f7:dd:a7:b1:f4:
bd:6f:0c:f5:ef:a5:b4:e8:5d:19:e0:2c:19:e8:7f:e4:28:63:
e6:38:44:92:ca:ab:25:a4:ef:f6:91:56:c8:24:61:0a:be:5a:
61:1f:78:54:32:33:9e:2b:00:f8:ab:f6:ab:6f:a7:95:a9:ae:
17:5a:4d:26:1d:3b:b7:2d:fe:3b:2c:67:90:0c:80:41:22:c2:
15:f8:a8:39:68:82:b2:df:63:d1:f5:69:d6:e9:ba:69:b0:76:
76:d7:47:9c:2e:41:fc:cd:82:3e:ce:7f:fe:28:73:a1:88:43:
ba:30:7e:4b:48:08:38:af:6a:7a:47:7b:b6:62:3a:f4:2b:4d:
e4:79:03:03:08:63:df:de:20:b3:15:f2:1d:7f:68:11:d5:c3:
70:8e:3a:f0:f4:3a:ee:52:79:52:b9:13:ab:25:bf:5c:bb:f8:
94:51:c9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:37:17 2026 by rpki-client