Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
File: sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft (raw, json)
Hash identifier: oRftNjz4Feu0NKi01/421VHwKL72uBQzruwM3rvXBVM=
Subject key identifier: 9B:48:CC:45:57:02:59:E6:54:BC:19:76:DD:08:FD:B3:91:09:E8:01
Authority key identifier: B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
Certificate issuer: /CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Certificate serial: 01A003CC14B57C7981D05B3459081B073B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
Manifest number: 1994
Signing time: Sat 15 Aug 2026 05:01:41 +0000
Manifest this update: Sat 15 Aug 2026 05:01:41 +0000
Manifest next update: Sun 16 Aug 2026 05:01:41 +0000
Files and hashes: 1: YGVi9IufxaUy4qxtQ0vR5M4Kjyk.roa (hash: GG+KZY/DsNiZCRN1+BVms1rbvVxcFkZrjnSVRWlHuMg=)
2: sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl (hash: iHbXwEalvGeytC3uxM5+4jTL/VhGAT39PQPOj413jys=)
3: v9qEJJrE4bIoJLkvQpDIDEFgGF4.roa (hash: kl+PP56wx1175s4ViXBlwNJra6/Xw7Fsdl6qvV23Cuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:cc:14:b5:7c:79:81:d0:5b:34:59:08:1b:07:3b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Validity
Not Before: Aug 15 05:01:41 2026 GMT
Not After : Aug 16 05:01:41 2026 GMT
Subject: CN=9b48cc45570259e654bc1976dd08fdb39109e801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:77:c6:ee:47:6c:8e:9e:8b:83:c9:31:2b:
67:d7:b8:a6:ed:98:a7:79:65:2d:14:56:94:c7:ec:
a4:7b:25:5b:9c:1a:1d:7e:ff:0d:e6:76:40:22:17:
3e:3e:12:ae:38:b2:cd:91:2c:7d:87:0d:ec:8f:32:
d2:e4:70:63:34:2d:15:a7:20:7c:c4:01:87:45:42:
80:11:78:7d:90:56:92:95:eb:78:89:b6:d4:7b:29:
a5:e8:c4:d6:92:f5:4b:1a:e8:ba:74:e3:46:23:a3:
2e:23:87:66:c3:99:78:e4:ad:5c:03:ac:32:62:cc:
8f:f5:bd:ce:01:dd:4b:bc:6a:91:f2:73:5a:a2:13:
24:ce:9f:d4:0e:8e:71:a8:b7:9e:ab:6d:7e:9f:92:
de:be:f8:9f:8c:c1:ba:84:d3:c9:3d:7c:1d:87:e4:
bd:b6:66:77:e6:41:e8:db:ad:9d:e3:dd:cb:e6:ca:
cf:46:f3:c9:dd:ab:67:e6:da:06:fd:70:32:e8:d3:
7b:6f:c0:41:69:c7:e4:ea:ea:2f:e2:0e:21:b7:03:
86:2f:ed:ae:2b:4d:c7:b8:7c:62:21:29:ad:67:08:
a1:d2:e1:44:5f:3d:ad:52:2a:8e:bb:74:c8:b4:64:
7f:6a:b5:b9:e7:4e:89:08:0e:09:12:3b:c5:9a:d6:
3b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:48:CC:45:57:02:59:E6:54:BC:19:76:DD:08:FD:B3:91:09:E8:01
X509v3 Authority Key Identifier:
keyid:B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c8:2f:ef:da:23:cd:fe:35:a9:48:7a:6a:81:8a:90:4a:70:
50:64:9b:2a:c4:ce:d1:11:39:b6:9b:d1:86:9a:72:a6:b8:c3:
3c:c6:e6:2a:69:e7:fa:d7:67:78:1a:a2:90:34:9a:a1:94:dc:
13:89:1d:40:a3:35:5f:79:c9:0e:98:70:69:16:1f:94:be:c3:
5a:21:5a:ff:6f:0c:bd:68:49:be:98:72:92:7e:ac:1d:79:f8:
89:0e:75:ef:bf:b8:e0:4b:85:b8:b4:73:bc:ee:42:97:a4:11:
ed:18:6b:e2:a0:c4:36:0f:7d:c9:0e:1a:1b:e7:5f:de:23:92:
52:50:86:b4:87:7f:99:d9:4f:aa:ed:58:76:92:86:de:e8:89:
e6:e6:e4:75:06:1a:c3:5a:c7:6e:45:58:7e:0a:d4:7e:49:7a:
f4:9b:03:ef:a7:c8:bc:ac:f7:22:5f:d1:ac:47:06:7a:8b:ea:
a1:9f:b2:31:60:a0:88:6b:23:54:24:4c:dd:88:af:e9:69:9f:
c9:00:84:cf:c4:61:a6:42:ea:32:21:b7:5b:63:57:0a:16:1b:
34:78:79:87:38:41:0d:30:7d:36:c6:65:65:d6:01:06:ff:84:
70:61:02:bb:73:de:93:82:96:be:06:90:b4:8d:76:8f:b2:6d:
b9:08:4b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:37:52 2026 by rpki-client