Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
File: SjUhO60WmUgIOMBVgPB44kHetYo.mft (raw, json)
Hash identifier: Lyxpf/DJkOieuPkg49HdRyoqb1Ih0i3Tn6HyTDVMOnY=
Subject key identifier: 60:0A:9D:0D:45:28:D1:C0:81:F5:1F:02:87:F6:1E:5D:60:22:85:9A
Authority key identifier: 4A:35:21:3B:AD:16:99:48:08:38:C0:55:80:F0:78:E2:41:DE:B5:8A
Certificate issuer: /CN=4a35213bad1699480838c05580f078e241deb58a
Certificate serial: 01A17A721A0853196A0AAE030693C0B49559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
Manifest number: 01D3
Signing time: Mon 26 Oct 2026 23:01:00 +0000
Manifest this update: Mon 26 Oct 2026 23:01:00 +0000
Manifest next update: Tue 27 Oct 2026 23:01:00 +0000
Files and hashes: 1: SjUhO60WmUgIOMBVgPB44kHetYo.crl (hash: fKU1+Uk5Fqy5hxZOFZmpM2O0c7l7mVq+3l5Fsw0lC0c=)
2: V1EGIfr7BvBMfahUaU4NVnlqdEQ.roa (hash: JrfQTYX7TC++GoVkr1xgTObKGu86dQxHF4+9hinDHN8=)
3: e_PoDcp11oHj3X7XTipT_OU4OPQ.roa (hash: +Lh+HAKbeHouZEc3ttgnD9FzVZd95ZF99HpVIGLvd0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:72:1a:08:53:19:6a:0a:ae:03:06:93:c0:b4:95:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a35213bad1699480838c05580f078e241deb58a
Validity
Not Before: Oct 26 23:01:00 2026 GMT
Not After : Oct 27 23:01:00 2026 GMT
Subject: CN=600a9d0d4528d1c081f51f0287f61e5d6022859a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:67:e1:bc:f8:62:9c:4a:4d:01:86:e9:91:0a:
d1:fe:af:43:16:aa:44:41:f1:01:08:51:7b:73:65:
1c:73:ca:8b:fc:96:34:06:b8:bc:c7:cf:3c:7a:e7:
f3:e3:38:cd:be:6e:43:1e:ce:34:e6:19:78:da:51:
04:14:37:6e:f6:4f:f6:3e:c7:3b:5f:cc:83:7c:6c:
22:8e:73:a4:91:b3:b8:f5:e4:86:52:4c:77:45:5e:
21:e5:4d:bc:39:85:bb:a4:2d:c5:b0:7d:59:8f:f2:
b4:02:e7:a1:0a:38:1a:a2:a1:e3:5e:81:23:88:35:
f7:89:27:eb:21:33:80:dd:f1:d4:92:1d:27:e2:32:
46:46:36:96:3f:eb:2d:d9:fc:19:a7:d2:42:48:de:
dd:c5:b3:d2:09:9d:2e:38:dc:5c:1c:63:f0:f0:4d:
b7:7d:ed:97:3c:fd:58:44:11:28:c2:14:8a:e6:a0:
da:85:85:c9:4f:ce:a7:41:ec:d4:c4:26:1a:2c:d8:
02:bb:77:ea:d1:71:9a:ac:95:3b:5c:67:db:6b:67:
35:38:73:fb:36:d3:ee:a8:e7:66:a9:2f:1a:6a:6b:
fc:cd:f5:e4:e1:bd:b4:41:c5:fc:18:e4:c3:79:7d:
67:56:bd:07:8f:b0:80:e5:2f:14:19:18:59:81:04:
97:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0A:9D:0D:45:28:D1:C0:81:F5:1F:02:87:F6:1E:5D:60:22:85:9A
X509v3 Authority Key Identifier:
keyid:4A:35:21:3B:AD:16:99:48:08:38:C0:55:80:F0:78:E2:41:DE:B5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:af:dd:ed:f9:de:aa:ce:7b:93:de:4a:49:3d:72:b9:e8:48:
b8:90:e6:e4:85:2b:16:a7:ff:23:ba:0c:c6:5f:30:e1:fc:af:
9a:9b:4f:cd:8b:e2:9c:c3:1a:c8:cb:a0:47:7f:7d:4d:09:c0:
15:b9:d1:21:d3:17:f9:ea:22:c1:53:e0:3a:1b:9d:c8:fc:1d:
18:22:cc:be:2c:49:90:b1:b4:a7:04:ff:5a:0d:96:5b:64:eb:
be:fc:d9:0d:46:a1:50:ef:ee:56:b4:20:4c:c6:c2:f4:f4:c0:
70:88:0d:e0:96:d4:a1:75:84:1d:85:2f:41:db:7a:31:4b:78:
fe:d3:08:bf:03:b0:67:e3:e2:8e:a5:ef:4d:9c:9c:f8:1e:99:
78:81:bb:ac:68:df:74:b7:a5:87:5b:d9:43:11:75:d1:b2:23:
b2:80:c9:16:cb:75:26:8f:71:2b:c7:f8:3e:01:27:f6:37:27:
c9:96:65:35:0c:69:db:86:cb:57:3d:8b:c9:37:6e:1b:35:49:
3f:17:25:ae:ee:09:d6:cd:22:65:4a:71:cd:04:9b:66:2c:d0:
46:2c:a1:e6:98:f9:03:fb:a7:a6:18:1f:4d:91:c2:ca:d2:01:
e3:f1:01:f1:3e:47:f9:a0:5a:b6:23:f5:a4:cd:24:f7:50:d6:
4e:c2:97:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:22:01 2026 by rpki-client