Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: kiWKGPCFTtj1dwdR0KhjqjQ08aNsRoZESExEdNcyZEY=
Subject key identifier: B0:03:BC:20:67:CA:73:B5:B2:77:E7:C6:70:29:65:43:1F:7C:11:D0
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 01A17D7379EA9549C9C2FF401161B3AF6603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 13FE
Signing time: Tue 27 Oct 2026 13:01:22 +0000
Manifest this update: Tue 27 Oct 2026 13:01:22 +0000
Manifest next update: Wed 28 Oct 2026 13:01:22 +0000
Files and hashes: 1: 4DavIRBSgZJRou5_5pXE0gpp9TU.roa (hash: S+MQh3x3BbVlY1FrerJ280vTss7JYvL8Z4S9DdFZKIM=)
2: VcOcd84KQjkoZhDL-2G9Bu1Nsrg.roa (hash: r5/pQOXKpUYtcCqvwsl8tV8NEiMQb4SPmxXSKYvWd28=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: ZCeX/jLXSLMeLY5TU3rv20/xDBAZ1Wpw/4wA19GSV/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:79:ea:95:49:c9:c2:ff:40:11:61:b3:af:66:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Oct 27 13:01:22 2026 GMT
Not After : Oct 28 13:01:22 2026 GMT
Subject: CN=b003bc2067ca73b5b277e7c6702965431f7c11d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9c:80:e3:e7:50:5b:80:09:2f:01:0f:38:8e:
36:1d:0c:ae:5c:b8:19:b9:e1:ca:1f:06:8f:08:be:
cf:b1:ff:6f:8a:3c:2b:08:8f:bc:61:1b:16:73:ad:
45:ab:e2:51:bf:24:b1:3b:4e:f6:a2:f4:08:fb:49:
89:2f:ad:ae:6c:e5:fe:74:3d:85:6b:e1:d3:46:a8:
60:47:fd:ad:6c:db:80:6e:8c:6a:6e:af:30:21:30:
dd:e8:fd:b3:e6:9b:68:0d:48:bf:ab:17:4a:89:b0:
39:16:25:ed:9c:b7:cb:1b:57:25:43:61:fe:19:98:
2f:8f:a9:04:b1:9c:a6:3f:b9:a7:a5:b3:fe:d0:c2:
e3:4b:86:4b:a9:c0:0e:4d:78:61:83:ff:1d:44:b1:
bf:21:ae:46:cd:2b:79:45:de:b6:9e:fa:c7:81:b6:
c2:d9:a3:44:9d:f6:b5:b1:07:59:f0:64:77:21:e0:
c0:57:dc:75:7c:4b:5c:a2:a7:93:8c:23:03:9d:72:
5c:51:7e:37:40:97:48:68:b8:48:01:e6:50:5f:9e:
27:eb:03:98:e5:8c:f4:24:73:37:3d:17:19:3b:32:
2a:36:02:a0:76:ae:5a:dc:84:df:0d:b4:7e:f4:b7:
a1:b0:42:1d:f2:65:db:43:f6:dd:58:40:44:00:50:
e1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:03:BC:20:67:CA:73:B5:B2:77:E7:C6:70:29:65:43:1F:7C:11:D0
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a0:56:c9:28:29:c8:1f:56:b7:5d:ab:4a:d9:6c:d0:b7:90:
74:b6:6a:86:f0:6e:fd:04:ca:83:47:8b:6f:43:2e:40:e7:0b:
46:03:c3:91:15:a9:e4:79:ef:0c:bb:81:3a:dd:1d:5a:73:1a:
04:a3:7e:ad:36:e6:2c:dd:5c:2a:f2:15:22:b8:95:88:ff:e5:
44:e7:67:39:6f:31:b5:18:84:2d:8e:79:ea:ac:a0:77:3e:f5:
d7:68:26:aa:ce:72:65:59:87:cc:bc:c2:58:46:23:61:b3:dc:
a9:e8:00:a3:87:b6:2e:6f:b8:08:69:a2:09:53:67:fd:39:80:
79:47:21:5a:c6:61:5d:aa:ff:dc:42:2e:22:d2:83:0d:80:54:
da:36:76:3b:58:99:56:45:77:4d:fa:18:9c:14:53:2b:71:9d:
1e:2e:ab:c6:26:eb:66:88:70:2e:3f:9b:09:71:1e:1c:63:43:
f0:d0:e2:1f:d1:b2:66:8a:63:8b:8e:f3:e2:7b:69:a2:01:ba:
55:bc:59:55:97:a7:f7:90:20:09:74:72:0b:a8:32:f2:d6:8c:
1d:7f:9b:df:7b:f6:a9:21:e2:0f:2b:e5:8c:5a:a4:df:8d:cd:
e3:12:e7:76:9d:6c:b1:3b:98:92:4e:aa:ac:2e:7d:bd:d6:60:
09:1e:15:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:58:48 2026 by rpki-client