Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.mft
File: SjqJ1pMbo1T4TtM2XHQeiXvCtnE.mft (raw, json)
Hash identifier: pxuvCnQJKPQciufJTjekbVqwcF2Nkrg6Ye9ACm2U/f0=
Subject key identifier: B4:5C:6F:57:94:21:E7:52:81:19:AA:45:8A:33:91:AA:01:97:24:94
Authority key identifier: 4A:3A:89:D6:93:1B:A3:54:F8:4E:D3:36:5C:74:1E:89:7B:C2:B6:71
Certificate issuer: /CN=4a3a89d6931ba354f84ed3365c741e897bc2b671
Certificate serial: 01A16232BC7FAD49A63BD72CE3DA565E96CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.mft
Manifest number: 01B3
Signing time: Thu 22 Oct 2026 06:00:54 +0000
Manifest this update: Thu 22 Oct 2026 06:00:54 +0000
Manifest next update: Fri 23 Oct 2026 06:00:54 +0000
Files and hashes: 1: LHrB9S_5wN9q4TKss5lhMnzZWUE.roa (hash: gT83cdmafD/JVl5E5X2iRmun1/6JhaCWrmB+yXrCpBw=)
2: SjqJ1pMbo1T4TtM2XHQeiXvCtnE.crl (hash: 8fT5M71BXSYFwkzTpjaB9lliZOHyE8yJxC43W31olhk=)
3: kw17cN7O6BZjrXtc0Po7Gnc29_E.roa (hash: 9+glnkrOqAZcUFE880RM58Uxpk29L9aOpV/CKJsAnIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:32:bc:7f:ad:49:a6:3b:d7:2c:e3:da:56:5e:96:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3a89d6931ba354f84ed3365c741e897bc2b671
Validity
Not Before: Oct 22 06:00:54 2026 GMT
Not After : Oct 23 06:00:54 2026 GMT
Subject: CN=b45c6f579421e7528119aa458a3391aa01972494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:86:37:ac:0b:41:b7:c4:ea:c8:9c:54:19:bf:
f8:cc:38:57:f6:89:a9:c3:b4:d2:b5:6a:4c:bc:6f:
44:24:d3:ea:fc:86:1f:00:ab:fe:77:0c:67:96:66:
de:e4:30:bf:41:97:7c:2b:06:1e:41:4a:e2:7d:72:
c3:94:d8:9d:fe:2f:40:76:33:9b:43:43:79:30:54:
49:e2:96:32:7b:98:cf:1a:46:4f:b1:16:b5:f1:fd:
0e:8a:c9:45:16:3b:45:2d:58:34:9e:f1:87:c2:28:
9a:12:ea:5c:82:14:ee:ed:fd:05:9c:17:e2:93:9f:
0b:1c:36:00:51:fd:c1:78:0a:51:1e:db:70:b3:2e:
7e:ff:b3:8d:fe:36:23:1a:bb:ee:1b:8e:be:3b:cb:
fd:50:5e:c4:25:02:9f:8f:31:92:81:ae:07:e7:e6:
4a:fc:ec:73:b6:ea:20:12:c9:bf:f6:a0:ec:42:f0:
74:c4:47:ee:98:79:49:f8:25:75:a2:fa:61:14:ff:
d1:d4:1a:34:94:c9:f3:47:c3:6b:74:02:40:72:a7:
cc:bc:e1:4e:67:35:c6:3f:58:f6:78:d7:5c:5b:9e:
8b:69:5f:f4:f8:27:a6:ac:c1:06:63:ec:ce:f6:63:
c6:9e:f0:4f:75:74:57:c1:8c:f7:92:a5:78:10:b9:
a6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5C:6F:57:94:21:E7:52:81:19:AA:45:8A:33:91:AA:01:97:24:94
X509v3 Authority Key Identifier:
keyid:4A:3A:89:D6:93:1B:A3:54:F8:4E:D3:36:5C:74:1E:89:7B:C2:B6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:94:75:b7:4f:af:00:14:ec:a1:47:2d:13:55:71:44:46:2d:
22:53:98:46:f7:26:86:0f:30:3b:d2:0a:7f:cd:c8:41:fc:9e:
e8:21:36:77:60:e9:c9:85:97:12:29:5a:4c:87:f7:9b:54:92:
25:2c:d4:b8:f1:fd:36:93:a9:3b:92:3f:ed:b6:12:ab:64:74:
88:a2:68:c6:6d:62:dd:41:57:95:32:84:70:fb:1d:d4:00:8c:
39:a8:74:62:22:77:06:17:d1:31:af:1a:86:c4:e1:12:d5:d8:
bb:a6:66:44:ff:b9:4e:92:40:ab:d4:44:3f:3a:0b:29:3e:06:
f1:bc:fb:14:36:06:ae:4e:19:b8:37:62:ff:01:87:d0:e6:d1:
c7:f4:fe:07:cc:2a:54:d2:38:18:0e:d6:73:b0:62:bf:50:6b:
11:06:02:97:64:a2:61:70:bc:32:88:df:f4:fa:53:31:a1:0d:
6b:57:63:10:c1:dd:8e:7e:ef:52:6d:b3:b3:a6:b2:da:f3:fa:
66:7f:8b:c9:05:07:dd:80:cd:90:28:ed:c0:6e:e9:5c:09:7a:
b9:ff:ad:d0:9c:27:4f:82:b1:6e:7d:42:ce:0c:d2:44:6b:62:
8f:5d:59:09:ab:9c:fd:86:5d:fb:43:17:a4:f3:2b:e0:fd:72:
6d:37:f0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 16:40:51 2026 by rpki-client