Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: wvqmlA1+mumPU/AmdOIBeGO2GcGLy/ceopx7xBHs9Rs=
Subject key identifier: 70:20:D6:5D:AC:15:C0:E6:A3:35:08:D4:F1:6C:8B:29:64:5C:4C:25
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 019EB8B3DD1E8BF0C84208989E6EC1C0886E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 128F
Signing time: Thu 11 Jun 2026 22:00:55 +0000
Manifest this update: Thu 11 Jun 2026 22:00:55 +0000
Manifest next update: Fri 12 Jun 2026 22:00:55 +0000
Files and hashes: 1: 4DavIRBSgZJRou5_5pXE0gpp9TU.roa (hash: S+MQh3x3BbVlY1FrerJ280vTss7JYvL8Z4S9DdFZKIM=)
2: VcOcd84KQjkoZhDL-2G9Bu1Nsrg.roa (hash: r5/pQOXKpUYtcCqvwsl8tV8NEiMQb4SPmxXSKYvWd28=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: F8+ZND3nMNYCECclprHPvoN+ShhItsBym7+hBFCV1Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b3:dd:1e:8b:f0:c8:42:08:98:9e:6e:c1:c0:88:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Jun 11 22:00:55 2026 GMT
Not After : Jun 12 22:00:55 2026 GMT
Subject: CN=7020d65dac15c0e6a33508d4f16c8b29645c4c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:84:85:e6:43:69:71:1c:01:3d:8a:a1:1d:
76:93:0d:d0:0f:d9:c9:e8:52:a3:1b:b7:76:d1:5d:
81:96:f0:15:00:89:fd:89:0a:e0:5f:8f:1a:4b:34:
79:54:08:97:b9:e1:9c:08:df:c1:de:ea:7d:40:f5:
25:84:bc:c9:a0:c5:3a:5e:a8:db:5e:30:8e:a9:04:
41:61:c8:57:a9:dc:01:bd:a7:24:f6:aa:6b:89:82:
5d:2b:79:ac:c1:7e:32:53:30:a1:bf:8e:b4:e8:94:
13:b5:54:33:9b:f4:97:1f:e4:7f:21:e7:f8:72:05:
6e:a2:2b:4c:93:ab:1c:8d:4b:d1:06:8b:89:4c:ff:
74:82:9a:27:e1:c7:d3:68:83:5c:62:cb:12:d6:3b:
fe:93:a8:c7:d9:9b:1d:19:e7:0c:b6:a8:91:08:20:
1c:d4:c9:8f:97:a1:5d:02:51:19:da:8a:4b:ca:dd:
82:f7:e1:a9:39:b2:8d:6e:5f:60:61:f9:7a:a5:47:
14:ae:dc:f5:e6:42:6f:14:0d:84:6d:1f:59:f5:1a:
b2:36:19:a9:dc:22:a3:e7:aa:86:fa:c5:5c:a8:48:
09:b5:3d:8d:d4:e6:c9:2f:f1:3e:84:7f:a6:6d:ab:
66:0b:6d:29:c3:96:d0:2e:57:53:1e:2f:30:62:29:
9a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:20:D6:5D:AC:15:C0:E6:A3:35:08:D4:F1:6C:8B:29:64:5C:4C:25
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:25:f9:cd:5a:9a:01:58:44:4d:42:01:7e:8c:08:f7:d4:be:
fb:ea:6b:95:0e:2a:8c:b8:32:85:29:21:ef:cb:f9:bd:20:c7:
7f:cc:7d:f1:01:e0:6a:44:49:b0:ca:da:05:37:e6:e6:fd:01:
65:90:62:96:df:66:08:d0:e6:d1:f3:62:c9:d8:b3:a3:4c:13:
b7:30:4e:3a:e7:8d:14:d5:cf:7b:dc:52:66:cf:3c:7a:57:d7:
0d:eb:3b:75:12:01:c6:51:ab:a2:8c:ce:4b:c2:68:f9:ad:77:
7e:fc:8f:03:b3:82:d4:a4:af:e6:f7:70:4c:34:4a:6e:5c:57:
8d:06:92:38:3b:c2:73:ab:8d:8a:af:f9:1b:06:7b:37:4e:65:
14:1c:8f:9e:1e:4e:10:52:e7:d1:a4:91:31:83:c1:f4:3c:a0:
63:ee:80:14:a3:28:48:3d:a4:37:d6:f6:7e:c6:ac:45:7a:c3:
7a:82:ef:ed:1e:37:6b:dd:25:b9:ed:17:3c:be:8f:8f:2b:b2:
76:07:a0:59:3a:65:b1:59:38:9e:40:a0:71:02:fd:b6:2c:ff:
ca:2f:80:80:93:2c:2f:25:29:15:8d:95:5c:16:06:2e:41:2a:
52:8a:9b:c6:58:3e:91:51:72:e0:1a:d2:86:ed:7c:5e:d6:9c:
93:33:33:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:10:18 2026 by rpki-client