Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
File: sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft (raw, json)
Hash identifier: Nu8oD0103LCXmfSg3ONqqTtEu+Y9e2ipfNNcSSVOnOU=
Subject key identifier: 8A:01:BD:DA:C3:CE:9D:E8:E3:4C:11:60:8B:E2:31:F9:28:D7:E9:B3
Authority key identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
Certificate issuer: /CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Certificate serial: 019F14C20867E460C66EE5401B23A848489C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
Manifest number: 1988
Signing time: Mon 29 Jun 2026 19:01:28 +0000
Manifest this update: Mon 29 Jun 2026 19:01:28 +0000
Manifest next update: Tue 30 Jun 2026 19:01:28 +0000
Files and hashes: 1: J8WfogeIpk1UKcHSO8WrjdEFqSM.roa (hash: PzzkgqrS9E4dkHoOcT2At52JZ2wJfpowp9BIjzEgVJE=)
2: sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl (hash: 5QZNqlFfKJz5nmyDqcy3T9Q2ID5QQ9uWjRJJr83zEEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:c2:08:67:e4:60:c6:6e:e5:40:1b:23:a8:48:48:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Validity
Not Before: Jun 29 19:01:28 2026 GMT
Not After : Jun 30 19:01:28 2026 GMT
Subject: CN=8a01bddac3ce9de8e34c11608be231f928d7e9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d0:82:82:6d:4d:89:55:14:ba:84:10:1a:45:
a2:3e:bf:b1:c8:6a:2d:d5:7f:9c:fe:a0:0c:ca:84:
6c:25:4d:05:fc:4f:b8:bb:54:b6:a6:72:86:88:04:
f9:63:4b:a5:dc:9b:09:93:87:8a:b9:03:45:40:fb:
1a:0f:f8:2c:45:26:47:80:72:2a:89:0b:54:96:0e:
c9:c8:4d:6d:e6:01:85:c2:da:54:30:d9:b5:92:8c:
d3:ba:59:eb:ea:90:a4:92:53:dd:a4:6f:a9:37:8c:
b6:5b:4e:ff:66:30:4d:98:66:eb:cd:bd:e9:90:50:
16:1c:61:7b:6c:0a:62:b4:b4:bd:1b:47:f0:ae:fd:
c6:6d:8d:7b:5b:57:ed:3e:32:6f:13:90:31:59:c5:
8c:e7:eb:77:ef:a5:63:01:b4:74:e0:7b:02:da:af:
19:b8:08:dc:49:51:b3:d2:01:c6:b9:29:e2:ee:60:
6f:cf:69:e1:4f:c4:84:8f:ef:73:f0:4b:17:3b:1e:
f5:c5:eb:3e:ee:0b:61:ba:cc:bf:ce:58:1b:e0:55:
ea:1a:6c:34:55:d7:69:14:b6:3a:a7:6b:a4:6f:29:
cb:b5:e1:73:8c:a3:24:04:85:ad:9a:51:f3:63:b5:
c7:f1:2c:a8:63:cb:80:d8:9c:1e:d9:1a:19:72:f0:
3d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:01:BD:DA:C3:CE:9D:E8:E3:4C:11:60:8B:E2:31:F9:28:D7:E9:B3
X509v3 Authority Key Identifier:
keyid:B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f5:52:d3:f5:cc:ae:ad:f2:53:d0:d2:f9:31:31:57:67:f9:
80:0c:d6:28:d3:08:6a:75:d0:2c:af:36:6b:13:14:4b:87:6e:
b6:0f:b6:5e:7e:8c:ea:8d:3f:36:4e:12:0c:f0:9b:7a:ff:d4:
3e:bb:5d:d8:5a:1e:2f:14:74:b0:24:49:fc:60:05:29:36:98:
cd:7d:1a:2c:18:21:1b:88:ee:9b:d7:72:cd:44:b0:d3:7b:a0:
20:2a:f3:94:b5:fe:23:27:04:fa:d6:dd:22:2f:e1:4f:f3:fb:
2a:ca:75:ec:a8:ef:23:98:7f:5d:5f:2e:a9:34:f9:ea:76:eb:
0d:69:36:76:39:fa:3c:99:c8:54:a6:3d:d3:9d:11:cb:e3:c6:
4e:2d:0d:da:a8:1b:4a:96:ec:d1:fb:55:89:38:d3:41:55:89:
b9:2b:0a:1f:23:10:18:c9:78:01:30:98:c2:ec:99:4a:da:04:
ac:93:87:fe:c2:30:5e:20:03:74:97:09:11:a7:b7:45:ed:4e:
bb:76:07:d3:e5:bb:74:f3:be:01:00:59:2b:39:bf:5d:f4:a7:
2e:91:ff:96:ab:ed:7b:3d:7f:cf:df:0e:9c:c7:99:78:b3:bd:
a5:79:4b:99:33:66:f4:90:ab:33:ad:8c:9a:d8:90:2f:4d:f8:
ce:06:5f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 21:38:46 2026 by rpki-client