Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
File: sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft (raw, json)
Hash identifier: cc7jqB8drVX9CaLU5oAjx/ev0o2IyM+n6w45HAoJIGk=
Subject key identifier: C1:9A:C1:AE:0D:3C:21:6F:CB:3C:12:A1:8E:33:6D:9A:AD:2C:D5:4B
Authority key identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
Certificate issuer: /CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Certificate serial: 019D37C09B92D6A060AC4015BD9BA36F4B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:01:02 +0000
Manifest this update: Sun 29 Mar 2026 04:01:02 +0000
Manifest next update: Mon 30 Mar 2026 04:01:02 +0000
Files and hashes: 1: J8WfogeIpk1UKcHSO8WrjdEFqSM.roa (hash: PzzkgqrS9E4dkHoOcT2At52JZ2wJfpowp9BIjzEgVJE=)
2: sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl (hash: 5UZ5B/J6sFj3ohZ3k1EPmrDKihjEREB17pIOfuRod+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:9b:92:d6:a0:60:ac:40:15:bd:9b:a3:6f:4b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Validity
Not Before: Mar 29 04:01:02 2026 GMT
Not After : Mar 30 04:01:02 2026 GMT
Subject: CN=c19ac1ae0d3c216fcb3c12a18e336d9aad2cd54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:89:f6:8b:4a:f4:5d:73:e6:96:2f:df:41:35:
05:37:39:af:65:4b:6c:00:86:ed:95:8b:3d:79:fe:
e8:17:8a:1c:ae:00:50:8b:3e:97:4f:bb:96:e6:6a:
35:29:84:f1:7d:84:08:f8:6a:2c:75:79:50:c8:7f:
56:7c:2d:2c:84:6d:6c:f5:fb:e9:8b:d0:96:0e:b7:
52:04:1d:65:fe:cb:73:9e:21:d4:ff:c2:b2:35:60:
36:eb:43:a6:11:17:ff:cc:26:ac:e1:a3:fe:17:5f:
25:41:bb:b0:a5:da:84:c6:fe:04:fb:25:d4:17:11:
44:c9:31:9f:c4:b9:70:65:ad:f8:88:15:54:a6:75:
0f:6a:3a:07:3a:a7:fb:e5:c3:4d:00:67:52:80:11:
de:ef:55:3b:f2:02:94:ee:1c:6f:c4:11:06:3b:af:
d6:fa:28:1f:8b:b9:f4:3d:65:af:e0:cd:5b:da:73:
5a:28:1e:a7:0e:c9:96:80:fc:96:17:06:73:a0:b4:
dc:9c:22:92:ec:eb:64:e6:9b:e0:99:0a:36:49:24:
4e:a1:93:f8:7b:50:b9:61:06:af:6d:8d:53:b8:90:
d9:90:5b:25:4a:d9:3d:7b:19:16:73:29:af:07:de:
34:cb:03:43:3d:33:15:18:f9:92:27:1c:5a:87:33:
0c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9A:C1:AE:0D:3C:21:6F:CB:3C:12:A1:8E:33:6D:9A:AD:2C:D5:4B
X509v3 Authority Key Identifier:
keyid:B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ed:ad:03:f4:9f:0c:d1:a2:20:1c:77:d6:03:51:dc:3e:f5:
0a:82:6a:fa:e3:eb:7b:af:66:e6:aa:a1:ec:a9:49:d2:96:c6:
70:65:b3:be:c8:79:49:c3:1c:fb:96:d2:6b:22:3a:62:85:8c:
c2:d2:e0:ca:89:85:d4:92:e8:9b:15:ab:27:7c:23:af:bc:4e:
9a:84:de:dc:56:0e:be:78:34:a5:b6:9f:31:b7:de:55:96:10:
ff:a5:2f:0c:26:fe:5a:b8:a7:d2:4c:41:a9:33:51:89:3f:fe:
1d:cd:e8:f0:f6:61:0c:04:6c:56:2b:e7:42:86:03:df:31:7e:
64:22:45:22:83:3a:d9:0c:f3:4c:5b:d5:d0:88:39:42:c8:6e:
58:32:e4:a6:a3:3a:ee:cb:a7:ef:ec:de:cf:0a:24:4b:8d:dc:
10:a1:75:6e:5e:92:9e:da:fd:db:4d:3d:28:fb:73:fc:81:f5:
1a:20:e5:1a:2f:d8:a5:87:12:f5:fa:b4:cd:9f:73:04:4e:b2:
05:0d:f1:17:46:d8:55:c2:56:36:bc:8f:81:87:46:f2:a5:d0:
b3:ad:d6:dc:fb:a2:64:78:dd:41:e4:c8:f2:02:63:13:52:c2:
43:21:50:00:d6:b4:90:6c:7c:f8:e8:89:75:e6:58:d9:50:fb:
89:88:45:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:12 2026 by rpki-client