Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: qC94dH8bPHEPYZibvqApTGyoq2Y3LRS02jaF48R4kkA=
Subject key identifier: CE:5C:89:85:2E:C1:49:F6:7F:CF:B7:0B:96:12:5A:07:36:E9:D2:3B
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 019FA25FDF721F8C65B11B696FC42DDEE310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 1308
Signing time: Mon 27 Jul 2026 07:00:19 +0000
Manifest this update: Mon 27 Jul 2026 07:00:19 +0000
Manifest next update: Tue 28 Jul 2026 07:00:19 +0000
Files and hashes: 1: 4DavIRBSgZJRou5_5pXE0gpp9TU.roa (hash: S+MQh3x3BbVlY1FrerJ280vTss7JYvL8Z4S9DdFZKIM=)
2: VcOcd84KQjkoZhDL-2G9Bu1Nsrg.roa (hash: r5/pQOXKpUYtcCqvwsl8tV8NEiMQb4SPmxXSKYvWd28=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: j7aiXxrBh65shQd+vuqgsgj24d9hkQV3Ej2zJ0PfTjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:5f:df:72:1f:8c:65:b1:1b:69:6f:c4:2d:de:e3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Jul 27 07:00:19 2026 GMT
Not After : Jul 28 07:00:19 2026 GMT
Subject: CN=ce5c89852ec149f67fcfb70b96125a0736e9d23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:0f:0b:44:8d:41:83:0a:a9:ee:d0:93:14:
49:2a:39:da:3b:3c:e7:aa:35:2a:28:cc:ac:df:38:
e6:d8:32:f2:e5:90:3d:ab:5b:94:8c:86:6f:6e:cc:
cb:a7:11:62:e9:1a:ff:16:8a:a8:75:6e:be:df:8c:
66:bc:8b:85:f6:b9:d2:b6:64:e5:03:b1:d4:f4:b2:
27:d1:d9:d7:41:01:56:fa:68:7d:04:2f:07:27:d3:
bc:22:f2:0a:b1:87:55:32:26:8d:4a:89:1b:52:0a:
88:e7:37:de:17:1c:54:d2:00:4c:12:be:d1:27:98:
a7:a0:81:de:b6:6a:58:79:2a:9d:9a:8b:21:ee:48:
01:53:81:ef:f0:ba:31:2b:20:38:9e:ef:2b:9d:48:
99:e4:61:3e:3c:fa:a1:20:23:f9:ad:e3:41:80:4e:
61:c0:e9:23:5d:cc:02:bc:0d:04:bb:9b:98:ad:1d:
65:cd:75:9a:d4:02:7d:4c:3d:b9:e0:74:97:01:b5:
4f:54:ac:32:8b:fe:e8:62:9a:8a:7d:d3:2e:c2:4f:
bd:40:63:73:02:87:88:87:cd:18:a7:cb:8e:8c:22:
88:24:a3:e3:26:6f:74:13:66:74:fe:24:fc:b4:01:
5d:3c:17:a2:09:95:d5:65:d7:9f:7d:06:de:25:18:
55:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5C:89:85:2E:C1:49:F6:7F:CF:B7:0B:96:12:5A:07:36:E9:D2:3B
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:77:26:57:36:b9:99:1e:7d:6b:99:45:fe:3b:90:25:a4:51:
fb:6e:c3:da:a8:9c:40:b0:59:42:3b:de:43:fa:39:8f:7d:6a:
32:c0:d5:e0:54:b9:83:06:78:55:51:42:24:9e:f0:10:ab:42:
e6:b0:f7:a8:4d:60:a4:26:85:2a:06:dd:8e:c0:15:44:94:66:
f0:05:56:39:8e:1c:d4:26:0a:38:96:7f:cb:0a:ad:88:4b:23:
b9:0f:29:80:a4:bc:f2:e7:9c:79:c8:58:c6:d3:2f:66:51:25:
88:ec:0e:fa:0b:87:e0:3b:73:2f:d2:5a:14:99:2d:be:90:db:
74:f4:c1:6b:b2:9b:83:72:75:f5:31:8d:da:7c:d5:30:5e:9a:
e6:ba:d2:cf:d0:c2:46:3f:9c:d0:c8:51:f3:c9:f3:20:50:f0:
66:8c:76:83:55:e2:cd:bf:ab:04:f5:6f:40:fa:9d:87:c1:49:
94:67:04:e6:06:50:19:56:30:7d:b3:03:c8:d5:c8:8c:9e:80:
73:0d:36:80:3c:c2:55:b5:cc:9f:4a:cc:9a:f8:af:44:00:e1:
c1:c6:e3:0d:ed:16:cc:89:6c:8b:49:89:97:a9:6c:6d:bb:82:
f4:da:e1:b7:cb:de:c5:03:ca:a8:24:fe:5c:eb:33:37:75:d8:
e6:d5:07:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:46:38 2026 by rpki-client