Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: 2rfYxEKdQGm60Yl6p6h92coNov93oP/PROEQb4M2sh0=
Subject key identifier: 25:EF:67:ED:C5:D5:EC:CF:87:9D:FF:17:CB:67:21:58:76:8B:60:F8
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 01A08C0CE512709CBA1DEC5E1D4700C4E99F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 1381
Signing time: Thu 10 Sep 2026 16:00:50 +0000
Manifest this update: Thu 10 Sep 2026 16:00:50 +0000
Manifest next update: Fri 11 Sep 2026 16:00:50 +0000
Files and hashes: 1: 4DavIRBSgZJRou5_5pXE0gpp9TU.roa (hash: S+MQh3x3BbVlY1FrerJ280vTss7JYvL8Z4S9DdFZKIM=)
2: VcOcd84KQjkoZhDL-2G9Bu1Nsrg.roa (hash: r5/pQOXKpUYtcCqvwsl8tV8NEiMQb4SPmxXSKYvWd28=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: 3JjGZHC2eiNLaebfoskYSaz8MnO0l7Cr8DEruX6P9bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:e5:12:70:9c:ba:1d:ec:5e:1d:47:00:c4:e9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Sep 10 16:00:50 2026 GMT
Not After : Sep 11 16:00:50 2026 GMT
Subject: CN=25ef67edc5d5eccf879dff17cb672158768b60f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:b1:4c:c8:c4:ea:84:09:32:a5:57:6d:a8:
56:cc:e6:3c:b7:4e:35:99:c0:03:cf:19:c3:48:3e:
23:8d:29:69:0a:03:38:de:52:1c:7a:c6:8f:ab:44:
72:08:3f:a1:9e:78:ed:c0:d4:95:0f:7d:61:1e:f7:
ce:ad:b6:76:96:f2:ee:1e:0a:db:92:29:30:67:85:
7a:b9:ee:5b:40:39:12:4f:27:de:5e:7d:9d:00:fb:
71:f3:f6:9b:be:65:f0:67:8b:98:e8:d0:14:e3:51:
9d:8f:7a:9e:36:92:2e:55:7b:2e:42:ad:1d:f1:b7:
82:85:3f:5e:ca:80:ea:b6:48:4c:cd:61:6b:b8:4b:
cc:fe:1d:23:8c:ed:c2:b4:1a:35:46:0d:73:dc:24:
59:12:82:af:25:6d:f5:b1:fa:17:cd:89:91:13:07:
b8:30:a9:b9:dd:7d:55:5b:5e:2e:56:53:5a:22:f0:
62:21:44:97:37:14:e3:3f:2c:9a:5c:9f:98:d7:84:
05:1c:a4:27:59:b1:71:06:3a:b6:a5:ea:db:34:e1:
2e:43:8c:e6:30:a8:41:01:5c:04:83:a6:9c:2c:b6:
c6:f2:07:8d:50:9d:bf:24:fd:d9:3c:48:c0:8c:7d:
9e:98:46:21:b1:21:48:b6:f7:db:e0:15:13:a7:24:
31:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EF:67:ED:C5:D5:EC:CF:87:9D:FF:17:CB:67:21:58:76:8B:60:F8
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:bf:0f:f2:35:c7:a3:5e:8c:f7:5e:9f:08:4d:7a:72:71:58:
bf:e5:23:ae:99:d1:67:b2:88:27:6e:ab:5b:88:a9:44:1b:8b:
69:ce:4c:37:db:42:ca:fb:6a:80:45:a9:bc:94:25:8a:af:96:
57:e9:47:47:27:06:fe:b2:b4:04:5c:4f:82:b2:5b:d3:af:59:
57:91:69:67:b9:65:9b:fd:70:1a:dd:60:e8:d2:44:03:45:2a:
10:0a:8b:33:a1:0b:6d:34:09:9a:3c:b8:d3:63:93:6e:e1:90:
7d:43:0e:d4:26:47:05:cf:8d:be:d9:b0:0f:57:be:21:0d:bf:
b2:d1:95:c5:5c:55:0c:f0:ca:ec:09:9f:b3:8c:b8:55:e1:2b:
9d:28:b4:9a:14:58:8e:85:71:e0:25:4c:ee:89:14:aa:23:80:
97:d8:ba:0d:16:79:e9:e2:f8:5e:70:9c:af:37:b7:d6:54:0e:
65:c6:39:bf:0f:45:64:99:00:e6:06:90:30:a6:0f:b1:a3:6d:
5c:e3:ca:5a:5d:40:21:6a:9b:e0:dc:8a:99:97:48:7b:9b:1b:
34:af:c8:ab:6b:16:ba:95:50:93:f4:6e:80:d3:0e:ee:d4:76:
ea:8e:ed:ac:cc:a2:d9:66:80:ac:93:5e:4f:61:4c:79:b7:94:
c6:55:cf:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMDOUScJy6HexeHUcAxOmfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMzBjOGZkMDIwNWVjZjBlZjZiNTZlMDM3ZDU2MjliMTdi
Mjc1ZWUwHhcNMjYwOTEwMTYwMDUwWhcNMjYwOTExMTYwMDUwWjAzMTEwLwYDVQQD
EygyNWVmNjdlZGM1ZDVlY2NmODc5ZGZmMTdjYjY3MjE1ODc2OGI2MGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVaxTMjE6oQJMqVXbahWzOY8t041
mcADzxnDSD4jjSlpCgM43lIcesaPq0RyCD+hnnjtwNSVD31hHvfOrbZ2lvLuHgrb
kikwZ4V6ue5bQDkSTyfeXn2dAPtx8/abvmXwZ4uY6NAU41Gdj3qeNpIuVXsuQq0d
8beChT9eyoDqtkhMzWFruEvM/h0jjO3CtBo1Rg1z3CRZEoKvJW31sfoXzYmREwe4
MKm53X1VW14uVlNaIvBiIUSXNxTjPyyaXJ+Y14QFHKQnWbFxBjq2perbNOEuQ4zm
MKhBAVwEg6acLLbG8geNUJ2/JP3ZPEjAjH2emEYhsSFItvfb4BUTpyQxKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXvZ+3F1ezPh53/F8tnIVh2i2D4MB8GA1UdIwQY
MBaAFLIwyP0CBezw72tW4DfVYpsXsnXuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYTE3OTctNjE2Zi00OTczLWI3NDAt
YzhiNWRmYzVhMTNmLzEvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9jYTE3OTctNjE2Zi00OTczLWI3NDAtYzhiNWRmYzVhMTNm
LzEvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH78P8jXH
o16M916fCE16cnFYv+UjrpnRZ7KIJ26rW4ipRBuLac5MN9tCyvtqgEWpvJQliq+W
V+lHRycG/rK0BFxPgrJb069ZV5FpZ7llm/1wGt1g6NJEA0UqEAqLM6ELbTQJmjy4
02OTbuGQfUMO1CZHBc+NvtmwD1e+IQ2/stGVxVxVDPDK7Amfs4y4VeErnSi0mhRY
joVx4CVM7okUqiOAl9i6DRZ56eL4XnCcrze31lQOZcY5vw9FZJkA5gaQMKYPsaNt
XOPKWl1AIWqb4NyKmZdIe5sbNK/Iq2sWupVQk/RugNMO7tR26o7trMyi2WaArJNe
T2FMebeUxlXPow==
-----END CERTIFICATE-----
Generated at Fri Sep 11 01:47:16 2026 by rpki-client