Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: T2ESImpX9eJuXFdLq9NYeSiTc5rXu7mLFvGb+HMgWqQ=
Subject key identifier: BC:32:A9:81:FC:1C:9F:E2:9B:08:2E:72:DC:7B:A5:17:33:28:88:F5
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 019DCF070F96C7505E5530AF9ADF4F1B6872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 1216
Signing time: Mon 27 Apr 2026 13:00:39 +0000
Manifest this update: Mon 27 Apr 2026 13:00:39 +0000
Manifest next update: Tue 28 Apr 2026 13:00:39 +0000
Files and hashes: 1: 4DavIRBSgZJRou5_5pXE0gpp9TU.roa (hash: S+MQh3x3BbVlY1FrerJ280vTss7JYvL8Z4S9DdFZKIM=)
2: VcOcd84KQjkoZhDL-2G9Bu1Nsrg.roa (hash: r5/pQOXKpUYtcCqvwsl8tV8NEiMQb4SPmxXSKYvWd28=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: BvhbJkkoaSFR/PUCqCUTbWwFeects5E5jI0Mg7/JEqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:0f:96:c7:50:5e:55:30:af:9a:df:4f:1b:68:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Apr 27 13:00:39 2026 GMT
Not After : Apr 28 13:00:39 2026 GMT
Subject: CN=bc32a981fc1c9fe29b082e72dc7ba517332888f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f5:57:71:6e:b4:61:6f:53:52:85:ba:e3:b4:
58:95:6f:b8:11:09:be:6d:60:24:2e:40:45:8d:8e:
14:c8:9f:f9:e5:2d:95:1d:b8:b0:69:34:d8:d6:54:
93:84:c8:05:f5:9f:43:21:f1:2e:d7:95:8d:6b:a1:
b4:3a:6c:be:a5:3f:11:56:5c:f1:d1:9f:21:77:97:
9c:3c:66:ea:37:91:82:e7:3e:9e:54:ac:ce:f3:fb:
09:30:49:5c:c3:a3:26:1b:59:2a:1a:5e:67:a8:c1:
03:80:73:a6:83:8a:00:8a:fd:72:ba:2e:32:28:67:
74:8e:f1:86:5b:10:0d:43:c4:19:89:6e:86:89:94:
9c:db:f3:d6:58:5a:2b:f5:e9:04:7f:6f:33:ec:d6:
ed:e4:97:96:43:6e:16:aa:3c:e1:93:48:ec:e4:a8:
17:c3:b5:f3:08:73:78:49:f4:da:c5:cd:fc:41:32:
a3:bc:c7:72:c5:54:9b:03:69:f4:05:02:a1:d5:6e:
14:17:e3:c8:0d:82:42:45:bd:9f:b1:97:6b:c0:0b:
9a:36:ce:96:da:f6:32:3c:78:75:62:59:40:b5:e1:
e7:bc:2a:fc:ce:34:a0:2a:63:2f:88:a8:71:52:42:
f8:af:c9:ad:61:a9:57:24:bf:fd:11:c5:b5:1e:35:
c4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:32:A9:81:FC:1C:9F:E2:9B:08:2E:72:DC:7B:A5:17:33:28:88:F5
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:72:e1:c5:b6:aa:1c:ad:15:fd:70:b7:18:18:7d:72:57:cd:
30:7a:9a:b4:4e:35:fd:b4:0a:42:66:20:18:04:33:ff:14:fe:
85:01:ef:02:cf:6b:19:ee:94:b5:d8:6c:f5:ea:25:d2:ed:a0:
ed:3f:ca:74:02:3a:9d:fd:e4:37:1d:40:3a:c3:41:df:a7:fd:
f5:6d:3c:1f:1d:36:73:b2:3e:45:4d:e9:98:c6:08:ff:b1:96:
4e:e3:36:a9:52:9f:1c:0f:47:40:82:ef:13:51:19:c9:4f:7d:
82:be:7c:e6:5b:0b:87:61:8d:47:0e:e7:65:e5:d6:79:23:98:
cd:8f:0e:ec:1e:a0:5e:e5:f4:f0:98:d1:ce:0e:d1:03:c1:e9:
e3:5a:67:99:db:78:25:be:15:a5:ba:a9:e7:28:4c:d6:d1:ec:
cb:11:e4:98:f1:47:31:95:f8:1a:74:cf:3b:86:a3:5c:1c:65:
62:15:b2:7c:a0:91:cb:16:f1:5d:66:70:9d:61:fc:1e:0d:3b:
5e:e0:d3:d3:5a:0c:d9:5a:85:7e:68:01:6a:71:45:5f:0b:6b:
b3:ee:75:a6:ed:b7:d7:c0:59:7b:2c:28:49:64:58:d6:3f:5d:
27:01:a3:a4:00:0a:48:96:b1:d3:dc:81:0c:f8:90:69:b5:6c:
13:89:d8:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PBw+Wx1BeVTCvmt9PG2hyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMzBjOGZkMDIwNWVjZjBlZjZiNTZlMDM3ZDU2MjliMTdi
Mjc1ZWUwHhcNMjYwNDI3MTMwMDM5WhcNMjYwNDI4MTMwMDM5WjAzMTEwLwYDVQQD
EyhiYzMyYTk4MWZjMWM5ZmUyOWIwODJlNzJkYzdiYTUxNzMzMjg4OGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/VXcW60YW9TUoW647RYlW+4EQm+
bWAkLkBFjY4UyJ/55S2VHbiwaTTY1lSThMgF9Z9DIfEu15WNa6G0Omy+pT8RVlzx
0Z8hd5ecPGbqN5GC5z6eVKzO8/sJMElcw6MmG1kqGl5nqMEDgHOmg4oAiv1yui4y
KGd0jvGGWxANQ8QZiW6GiZSc2/PWWFor9ekEf28z7Nbt5JeWQ24Wqjzhk0js5KgX
w7XzCHN4SfTaxc38QTKjvMdyxVSbA2n0BQKh1W4UF+PIDYJCRb2fsZdrwAuaNs6W
2vYyPHh1YllAteHnvCr8zjSgKmMviKhxUkL4r8mtYalXJL/9EcW1HjXE4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwyqYH8HJ/imwguctx7pRczKIj1MB8GA1UdIwQY
MBaAFLIwyP0CBezw72tW4DfVYpsXsnXuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYTE3OTctNjE2Zi00OTczLWI3NDAt
YzhiNWRmYzVhMTNmLzEvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9jYTE3OTctNjE2Zi00OTczLWI3NDAtYzhiNWRmYzVhMTNm
LzEvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd3Lhxbaq
HK0V/XC3GBh9clfNMHqatE41/bQKQmYgGAQz/xT+hQHvAs9rGe6Utdhs9eol0u2g
7T/KdAI6nf3kNx1AOsNB36f99W08Hx02c7I+RU3pmMYI/7GWTuM2qVKfHA9HQILv
E1EZyU99gr585lsLh2GNRw7nZeXWeSOYzY8O7B6gXuX08JjRzg7RA8Hp41pnmdt4
Jb4Vpbqp5yhM1tHsyxHkmPFHMZX4GnTPO4ajXBxlYhWyfKCRyxbxXWZwnWH8Hg07
XuDT01oM2VqFfmgBanFFXwtrs+51pu2318BZeywoSWRY1j9dJwGjpAAKSJax09yB
DPiQabVsE4nYGA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:05:24 2026 by rpki-client