Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.mft
File: SjqJ1pMbo1T4TtM2XHQeiXvCtnE.mft (raw, json)
Hash identifier: 9s9GTL6Mz2pgI6ZC8lQBMnrRJl1D/monOMgFZIOGKyU=
Subject key identifier: 5B:C4:9D:7D:C1:12:11:A9:CA:A1:54:01:71:52:FC:42:FB:49:DE:09
Authority key identifier: 4A:3A:89:D6:93:1B:A3:54:F8:4E:D3:36:5C:74:1E:89:7B:C2:B6:71
Certificate issuer: /CN=4a3a89d6931ba354f84ed3365c741e897bc2b671
Certificate serial: 01A06CEFD5C6F505F2DB375FD49A0039C40D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.mft
Manifest number: 0134
Signing time: Fri 04 Sep 2026 15:00:51 +0000
Manifest this update: Fri 04 Sep 2026 15:00:51 +0000
Manifest next update: Sat 05 Sep 2026 15:00:51 +0000
Files and hashes: 1: LHrB9S_5wN9q4TKss5lhMnzZWUE.roa (hash: gT83cdmafD/JVl5E5X2iRmun1/6JhaCWrmB+yXrCpBw=)
2: SjqJ1pMbo1T4TtM2XHQeiXvCtnE.crl (hash: /9cVh7mGsL/bE1c5BqPzeXnnWnlktt6pcWufXHcdsTI=)
3: kw17cN7O6BZjrXtc0Po7Gnc29_E.roa (hash: 9+glnkrOqAZcUFE880RM58Uxpk29L9aOpV/CKJsAnIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:ef:d5:c6:f5:05:f2:db:37:5f:d4:9a:00:39:c4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3a89d6931ba354f84ed3365c741e897bc2b671
Validity
Not Before: Sep 4 15:00:51 2026 GMT
Not After : Sep 5 15:00:51 2026 GMT
Subject: CN=5bc49d7dc11211a9caa154017152fc42fb49de09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:56:ec:91:66:32:e3:59:db:c2:7f:f2:d0:
ef:6e:30:e8:a8:a6:63:a8:4e:e0:e8:e0:e4:bc:b5:
d4:7a:87:62:39:78:9a:28:80:22:78:4e:a9:71:b3:
b4:0f:d4:bf:22:2f:e6:50:7a:96:d2:3e:aa:de:55:
03:6d:3b:10:3b:4a:98:a7:ee:f1:a1:5f:4e:5f:b7:
47:0c:41:57:1f:65:bb:14:41:b7:d9:3f:d6:c7:66:
56:69:d9:fe:f1:1a:47:e2:ce:95:31:78:43:4c:7a:
5d:31:a6:f2:16:cb:0a:e8:46:bb:86:0a:87:93:b3:
e9:06:cd:87:b7:1e:7a:51:be:39:c0:49:2d:49:24:
46:76:38:c2:be:5b:89:f7:4c:9b:c9:f3:1d:f2:67:
4b:bc:84:37:bb:b8:94:a0:f5:ae:23:78:a4:58:33:
23:f1:ce:5a:05:07:c3:9f:2d:96:a2:9d:b6:b2:7e:
51:51:00:a7:71:80:47:29:cb:c2:ef:5f:4b:33:e2:
a3:72:5c:2a:33:0d:a7:83:a0:95:d0:37:18:8b:76:
25:9e:17:79:21:76:4b:d2:a6:28:7c:3f:b6:9b:4c:
d3:3f:cc:61:a4:46:b1:9b:c4:51:ee:b7:d3:fe:c7:
3c:c4:c2:3a:fb:05:c5:7c:2c:1e:05:81:db:92:7f:
18:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C4:9D:7D:C1:12:11:A9:CA:A1:54:01:71:52:FC:42:FB:49:DE:09
X509v3 Authority Key Identifier:
keyid:4A:3A:89:D6:93:1B:A3:54:F8:4E:D3:36:5C:74:1E:89:7B:C2:B6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:df:f8:56:1f:f8:04:c4:54:a3:e4:4e:33:a1:bd:55:72:b1:
c8:7d:86:55:14:cb:5d:5d:e7:d2:ea:78:31:41:d9:90:d9:98:
05:cc:f2:2a:b4:5a:df:6f:c4:66:aa:e0:a4:11:d9:4f:83:bd:
e3:c6:67:2a:dc:7a:8b:92:dd:43:ad:62:b2:4e:56:7d:6d:2b:
98:f6:b8:e2:aa:ba:32:98:77:13:1f:b6:88:4e:f2:98:2c:09:
fe:e8:aa:3b:d4:c2:7d:5e:b0:cc:33:47:04:7c:80:33:a5:a5:
ac:13:b5:08:31:1d:e8:8a:57:27:4d:89:70:ff:3a:cc:e5:15:
36:2c:e0:32:6a:3b:d2:f9:20:0a:2e:0b:84:a7:06:77:4d:4c:
26:e7:93:56:6e:87:e0:c9:18:bb:a1:0c:f8:d2:77:6d:eb:59:
f6:da:1f:99:8d:82:27:a5:92:38:34:90:2c:ef:eb:9a:5c:84:
9a:cf:69:e3:44:b1:cd:15:0d:50:00:5e:d5:c8:58:7d:99:79:
08:10:4b:7e:4e:11:51:fe:13:95:26:14:9e:d9:b1:7d:6e:31:
6f:69:ff:3b:8f:0a:82:20:b2:b8:ba:c4:97:7c:ae:bb:45:5c:
41:7f:2d:49:46:a7:4c:8d:62:6f:b9:df:0c:d8:a9:b5:bf:bb:
b5:ca:0d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:58:15 2026 by rpki-client