Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: KQOiTBKw7WW8IPZOJq8IxHYkCHXBO7xjGhsInyHg358=
Subject key identifier: A6:84:F3:99:D0:71:12:EE:52:FE:6D:BC:A1:7A:81:C8:89:54:EF:52
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 019CE748DC2025D343E54841B7A880BF5458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 119E
Signing time: Fri 13 Mar 2026 13:00:37 +0000
Manifest this update: Fri 13 Mar 2026 13:00:37 +0000
Manifest next update: Sat 14 Mar 2026 13:00:37 +0000
Files and hashes: 1: 4DavIRBSgZJRou5_5pXE0gpp9TU.roa (hash: S+MQh3x3BbVlY1FrerJ280vTss7JYvL8Z4S9DdFZKIM=)
2: VcOcd84KQjkoZhDL-2G9Bu1Nsrg.roa (hash: r5/pQOXKpUYtcCqvwsl8tV8NEiMQb4SPmxXSKYvWd28=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: BzU+n/udgJSORIDcLEkSM9xxfGmCzF6KRnh54UIFSD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:48:dc:20:25:d3:43:e5:48:41:b7:a8:80:bf:54:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Mar 13 13:00:37 2026 GMT
Not After : Mar 14 13:00:37 2026 GMT
Subject: CN=a684f399d07112ee52fe6dbca17a81c88954ef52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7a:80:14:55:73:61:48:cf:7b:79:14:18:1d:
90:ef:69:35:e0:f4:46:4b:a3:1f:72:d3:75:54:ec:
d8:61:7f:89:29:66:35:1f:b4:11:24:db:d5:78:be:
77:fd:14:6e:69:73:15:89:e7:bd:46:e6:f8:e0:29:
d4:a6:d8:85:43:77:33:d2:b2:fd:14:36:5d:a3:0b:
a3:e8:b5:42:42:5a:ea:fb:87:89:94:2b:3b:ba:7a:
9c:ed:18:6e:dc:5d:b1:9b:80:46:21:31:88:74:0d:
81:29:71:89:7f:d9:0d:7a:0d:03:bf:79:cc:99:b9:
3f:f0:35:a4:71:62:c9:7f:09:f5:04:76:7e:82:cd:
d0:f0:ed:8e:a7:59:cb:b1:e5:06:04:55:21:ee:c8:
82:5c:61:6d:22:72:ca:a7:a0:a7:0a:2b:cb:6a:75:
c6:73:d5:93:48:3a:fb:35:ea:4c:ee:1b:54:b6:9c:
58:d5:ac:51:3f:b3:a1:11:83:d0:a9:e0:98:3a:23:
7d:c3:bf:92:bf:07:ea:ec:78:31:3e:70:b3:d1:3b:
c2:8e:cd:fd:ee:e3:85:ac:cc:73:32:6c:9a:bf:68:
4d:4d:37:48:4b:ba:ab:75:c1:6a:22:56:a1:9c:7c:
03:00:b9:4e:b4:27:52:9a:f4:1c:d1:7e:41:7c:60:
e2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:84:F3:99:D0:71:12:EE:52:FE:6D:BC:A1:7A:81:C8:89:54:EF:52
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1b:47:3f:40:a9:b7:d4:0f:19:c8:43:f7:d6:13:be:8c:42:
97:8e:98:24:c5:dd:24:d5:b5:d2:39:09:27:e0:d0:70:9d:c2:
22:d2:fe:5c:c1:cb:11:e8:23:ce:1a:d8:29:14:ca:04:b7:be:
26:97:79:58:a4:14:4e:4e:9b:78:b7:58:7b:56:2a:69:4f:8d:
46:66:d9:34:a0:b8:d9:64:99:5c:b4:7a:19:f5:66:eb:86:0d:
e0:8a:6c:45:10:8a:23:96:7e:6a:6e:ee:2d:0c:8b:d0:bb:1b:
29:70:0e:e2:ad:35:d6:70:0f:8f:3f:56:1f:5c:cb:c1:38:74:
9e:97:92:a9:70:97:03:78:f3:03:40:2d:6d:29:48:8a:0b:f0:
70:8a:9f:a9:43:90:fc:2e:94:bd:57:0d:9f:73:74:6f:8c:a1:
fa:cf:8f:ad:50:b2:7e:13:7a:8a:5e:f0:3f:1e:b3:42:c4:59:
0c:2f:72:34:6a:4c:62:53:2f:ea:37:c7:c3:74:6e:60:1c:d9:
27:92:98:7f:71:de:a7:a5:f4:29:42:0e:89:95:83:1c:ff:50:
d7:c8:95:71:7a:b5:6c:aa:cc:23:e9:e1:48:95:9a:2d:a1:f3:
15:40:d0:7b:a5:3f:ec:4c:49:cc:4f:57:e8:eb:90:3e:13:e4:
78:07:79:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:13:15 2026 by rpki-client