Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
File: sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft (raw, json)
Hash identifier: DPDLJ4pdzi7AVL6TRjlOB9Em54jr8RxcNrerrYloj/U=
Subject key identifier: 1B:FA:65:14:D2:AD:A8:F4:32:CE:17:47:78:33:B9:CD:F9:75:8A:74
Authority key identifier: B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
Certificate issuer: /CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Certificate serial: 019F12655403E30B6F891A3D97DC744D1773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
Manifest number: 1917
Signing time: Mon 29 Jun 2026 08:00:58 +0000
Manifest this update: Mon 29 Jun 2026 08:00:58 +0000
Manifest next update: Tue 30 Jun 2026 08:00:58 +0000
Files and hashes: 1: YGVi9IufxaUy4qxtQ0vR5M4Kjyk.roa (hash: GG+KZY/DsNiZCRN1+BVms1rbvVxcFkZrjnSVRWlHuMg=)
2: sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl (hash: hsXzy4fl8RuwZQlTIuq5tvuQKzf7Xmuu85jk5nZLcmo=)
3: v9qEJJrE4bIoJLkvQpDIDEFgGF4.roa (hash: kl+PP56wx1175s4ViXBlwNJra6/Xw7Fsdl6qvV23Cuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:54:03:e3:0b:6f:89:1a:3d:97:dc:74:4d:17:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Validity
Not Before: Jun 29 08:00:58 2026 GMT
Not After : Jun 30 08:00:58 2026 GMT
Subject: CN=1bfa6514d2ada8f432ce17477833b9cdf9758a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:ff:f5:78:6f:76:47:8a:93:88:2d:38:0d:
0a:51:d4:25:d4:65:72:01:5f:79:bc:0f:ca:2f:37:
0e:d5:fd:e7:64:0f:53:5c:e8:51:70:a2:7a:7e:2b:
6f:07:34:e0:39:a0:1d:f9:34:f0:b1:97:dc:f8:72:
3d:41:35:39:96:bc:dd:53:4a:96:34:b7:e2:01:e2:
e2:9d:4b:9a:6f:6c:39:04:72:f3:a1:22:27:56:90:
1f:a6:94:4e:f5:52:fe:28:df:32:a2:55:3d:d5:cb:
89:ae:e2:5a:d9:54:e0:25:48:db:86:93:b3:2a:77:
13:ea:a0:13:dc:7f:ba:13:f6:02:9f:c5:c5:1a:3a:
37:66:7b:ac:ee:52:ad:64:29:bd:24:6e:27:ad:e4:
b4:ec:2e:36:05:ca:74:8e:76:7d:f4:9d:c2:36:20:
3d:a8:80:e0:3d:1f:c2:44:68:cf:50:4c:81:fc:db:
9f:27:72:d9:28:12:58:43:66:c4:9c:aa:ee:90:c7:
92:a6:f6:f0:f3:f5:37:99:d1:d2:b2:42:d7:fc:06:
98:91:a5:d6:44:99:05:4c:eb:26:36:61:eb:4c:f1:
45:11:6b:55:23:b9:64:65:9f:ef:7f:ea:f6:66:c2:
70:b7:2c:56:96:f4:b4:b6:dd:21:5f:86:0d:7a:b1:
81:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FA:65:14:D2:AD:A8:F4:32:CE:17:47:78:33:B9:CD:F9:75:8A:74
X509v3 Authority Key Identifier:
keyid:B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ba:05:e7:bd:ee:91:c4:ee:ff:b3:05:93:a3:79:85:e6:8a:
55:0a:e1:a7:68:26:59:92:b2:bc:b2:49:b3:d2:df:b5:96:a2:
a3:47:da:9a:42:bb:6e:8f:46:74:c7:bf:ac:1c:d9:fd:08:8c:
46:33:ea:8a:2c:59:a2:73:00:60:5d:65:6e:d5:61:17:ba:1b:
bd:cd:84:3e:e6:ef:33:79:94:03:69:ac:59:3f:e8:5b:0c:85:
d2:00:ca:70:73:a9:fc:b3:bb:43:9a:fc:de:a4:08:12:3e:f4:
17:89:1d:8b:64:c5:91:99:ca:e5:b3:40:67:c3:f9:25:88:e4:
64:68:0e:7c:2b:eb:37:14:41:27:5f:d5:b8:89:a8:40:40:f9:
e1:09:c6:32:dd:fd:1d:04:b1:6a:b8:ac:f8:95:1d:31:98:21:
35:67:ed:0c:db:e7:f1:5d:f4:a4:d7:0c:86:0d:1c:da:e1:af:
40:38:cf:ad:18:3f:67:13:25:b9:e6:00:72:74:33:06:21:13:
d9:ab:51:56:23:64:39:6f:26:33:59:1d:89:2f:29:60:36:4d:
f3:a0:e2:92:7a:40:75:38:a3:e3:5f:52:bb:22:54:04:4b:59:
61:84:37:e2:f6:52:f7:d6:7a:9c:e0:9c:77:0f:a7:ac:9a:be:
57:8e:98:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SZVQD4wtviRo9l9x0TRdzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwOTBkNDBiZmNkNWE0YTMwODc1MTYwZWNjNmY5ZmU1M2Mw
NWE2ZTYwHhcNMjYwNjI5MDgwMDU4WhcNMjYwNjMwMDgwMDU4WjAzMTEwLwYDVQQD
EygxYmZhNjUxNGQyYWRhOGY0MzJjZTE3NDc3ODMzYjljZGY5NzU4YTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy//9XhvdkeKk4gtOA0KUdQl1GVy
AV95vA/KLzcO1f3nZA9TXOhRcKJ6fitvBzTgOaAd+TTwsZfc+HI9QTU5lrzdU0qW
NLfiAeLinUuab2w5BHLzoSInVpAfppRO9VL+KN8yolU91cuJruJa2VTgJUjbhpOz
KncT6qAT3H+6E/YCn8XFGjo3Znus7lKtZCm9JG4nreS07C42Bcp0jnZ99J3CNiA9
qIDgPR/CRGjPUEyB/NufJ3LZKBJYQ2bEnKrukMeSpvbw8/U3mdHSskLX/AaYkaXW
RJkFTOsmNmHrTPFFEWtVI7lkZZ/vf+r2ZsJwtyxWlvS0tt0hX4YNerGB2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBv6ZRTSraj0Ms4XR3gzuc35dYp0MB8GA1UdIwQY
MBaAFLCQ1Av81aSjCHUWDsxvn+U8BabmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0pEVUNfelZwS01JZFJZT3pHLWY1VHdGcHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83MWE0MDAtNGVkZS00NWYxLWI1NWIt
ODEwOWQ0MDg5ODI4LzEvc0pEVUNfelZwS01JZFJZT3pHLWY1VHdGcHVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83MWE0MDAtNGVkZS00NWYxLWI1NWItODEwOWQ0MDg5ODI4
LzEvc0pEVUNfelZwS01JZFJZT3pHLWY1VHdGcHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLoF573u
kcTu/7MFk6N5heaKVQrhp2gmWZKyvLJJs9LftZaio0famkK7bo9GdMe/rBzZ/QiM
RjPqiixZonMAYF1lbtVhF7obvc2EPubvM3mUA2msWT/oWwyF0gDKcHOp/LO7Q5r8
3qQIEj70F4kdi2TFkZnK5bNAZ8P5JYjkZGgOfCvrNxRBJ1/VuImoQED54QnGMt39
HQSxaris+JUdMZghNWftDNvn8V30pNcMhg0c2uGvQDjPrRg/ZxMlueYAcnQzBiET
2atRViNkOW8mM1kdiS8pYDZN86DiknpAdTij419SuyJUBEtZYYQ34vZS99Z6nOCc
dw+nrJq+V46YZg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 12:48:52 2026 by rpki-client