Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
File: SjUhO60WmUgIOMBVgPB44kHetYo.mft (raw, json)
Hash identifier: F7e5bpLN9TpDG1VFCHCU2Nm/aTMxwg0WVZPecCyyky8=
Subject key identifier: AE:21:70:D1:8B:FD:A8:C6:9D:FD:C1:D9:64:9D:8B:9A:3F:7F:72:34
Authority key identifier: 4A:35:21:3B:AD:16:99:48:08:38:C0:55:80:F0:78:E2:41:DE:B5:8A
Certificate issuer: /CN=4a35213bad1699480838c05580f078e241deb58a
Certificate serial: 01A08AFA4507F7A3E6F2E1FE02459405A4B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
Manifest number: 0157
Signing time: Thu 10 Sep 2026 11:00:52 +0000
Manifest this update: Thu 10 Sep 2026 11:00:52 +0000
Manifest next update: Fri 11 Sep 2026 11:00:52 +0000
Files and hashes: 1: SjUhO60WmUgIOMBVgPB44kHetYo.crl (hash: Rj6c/3LFIM7hmw/MKuk8TNq4VEZ2wx/Yze1ML2DWYMs=)
2: V1EGIfr7BvBMfahUaU4NVnlqdEQ.roa (hash: JrfQTYX7TC++GoVkr1xgTObKGu86dQxHF4+9hinDHN8=)
3: e_PoDcp11oHj3X7XTipT_OU4OPQ.roa (hash: +Lh+HAKbeHouZEc3ttgnD9FzVZd95ZF99HpVIGLvd0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:45:07:f7:a3:e6:f2:e1:fe:02:45:94:05:a4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a35213bad1699480838c05580f078e241deb58a
Validity
Not Before: Sep 10 11:00:52 2026 GMT
Not After : Sep 11 11:00:52 2026 GMT
Subject: CN=ae2170d18bfda8c69dfdc1d9649d8b9a3f7f7234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:b2:f6:9b:db:6e:0b:cf:52:82:a5:b2:af:
e2:1b:9c:ee:10:ba:3c:77:f5:81:2f:12:45:3b:e2:
8b:9d:79:89:f1:94:81:6e:80:32:6c:fc:ab:fe:3a:
7f:6e:b5:f7:e5:d5:b4:a0:34:43:91:1e:03:4b:26:
63:31:22:8f:3e:81:c1:af:6f:04:4b:92:be:64:1c:
fd:71:22:ef:9f:c1:c4:8f:b0:6e:7b:4a:36:77:dd:
b9:b8:4b:9e:6b:cd:52:4b:60:6f:f7:12:48:e8:ce:
be:fc:24:e1:7d:b0:7a:b3:5d:60:98:0c:4e:64:a8:
4c:5d:b7:d5:8f:76:d4:de:c3:d6:01:69:03:f7:38:
9d:25:79:f6:37:34:dd:f1:a9:60:79:7f:ce:91:e5:
9a:9e:dc:29:4c:fe:35:d8:97:c0:65:2f:51:25:8f:
f1:d5:15:93:af:88:f6:af:bb:ec:3a:2a:5c:7c:bd:
02:a5:d0:e1:fc:04:c5:20:ed:a5:7c:df:c9:29:cb:
60:d5:e1:cc:cc:48:9d:89:db:8e:48:f5:92:1b:e2:
f0:50:bc:eb:a8:b1:c1:a5:ef:e4:28:aa:42:14:e9:
5c:04:ea:54:9b:4f:eb:64:2d:da:15:00:a0:61:dc:
a6:68:06:64:2b:ab:3c:ed:0b:ea:5f:52:8c:cf:40:
ba:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:21:70:D1:8B:FD:A8:C6:9D:FD:C1:D9:64:9D:8B:9A:3F:7F:72:34
X509v3 Authority Key Identifier:
keyid:4A:35:21:3B:AD:16:99:48:08:38:C0:55:80:F0:78:E2:41:DE:B5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:25:05:88:24:61:8f:94:f5:1e:86:f7:38:ff:53:71:53:51:
46:5b:cb:58:eb:5e:f7:96:64:68:7e:df:db:70:1f:f6:cd:b5:
23:06:a7:a9:12:d3:4e:98:e7:5a:d4:09:f6:f5:7e:6c:5f:fc:
01:d8:bc:c3:e6:43:9e:94:53:ee:2d:58:54:29:d1:9a:28:bc:
1f:d8:e7:c4:66:22:9f:f9:e7:58:5d:0b:06:a3:a0:23:c0:5b:
10:77:c7:30:03:5e:a3:27:76:9c:42:4e:0c:65:84:71:83:ba:
56:5a:39:73:78:e5:bb:5a:86:7e:d0:14:20:6d:dc:ce:36:f7:
57:c2:4e:42:de:54:80:85:74:3c:e1:cd:fc:ac:73:e7:46:2b:
a5:da:d9:4e:e5:a9:96:6e:a0:be:3b:72:78:da:23:a1:18:c8:
09:ac:eb:20:75:3e:4c:7b:4e:ac:12:11:56:3c:65:42:4a:a7:
25:ba:dd:23:08:03:80:e1:0b:55:55:e3:d1:1a:ef:ed:b8:1b:
28:17:c6:82:7b:f1:48:7f:d9:8b:78:ee:bc:6c:a7:a7:9f:e3:
d0:01:55:23:a3:04:ce:d4:17:a3:98:d7:26:4b:81:b6:57:c3:
77:73:7e:36:67:a1:d4:a5:af:e3:d9:5d:42:9d:35:05:ad:c7:
2e:72:8a:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCK+kUH96Pm8uH+AkWUBaS1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMzUyMTNiYWQxNjk5NDgwODM4YzA1NTgwZjA3OGUyNDFk
ZWI1OGEwHhcNMjYwOTEwMTEwMDUyWhcNMjYwOTExMTEwMDUyWjAzMTEwLwYDVQQD
EyhhZTIxNzBkMThiZmRhOGM2OWRmZGMxZDk2NDlkOGI5YTNmN2Y3MjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtOy9pvbbgvPUoKlsq/iG5zuELo8
d/WBLxJFO+KLnXmJ8ZSBboAybPyr/jp/brX35dW0oDRDkR4DSyZjMSKPPoHBr28E
S5K+ZBz9cSLvn8HEj7Bue0o2d925uEuea81SS2Bv9xJI6M6+/CThfbB6s11gmAxO
ZKhMXbfVj3bU3sPWAWkD9zidJXn2NzTd8algeX/OkeWantwpTP412JfAZS9RJY/x
1RWTr4j2r7vsOipcfL0CpdDh/ATFIO2lfN/JKctg1eHMzEididuOSPWSG+LwULzr
qLHBpe/kKKpCFOlcBOpUm0/rZC3aFQCgYdymaAZkK6s87QvqX1KMz0C6OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4hcNGL/ajGnf3B2WSdi5o/f3I0MB8GA1UdIwQY
MBaAFEo1ITutFplICDjAVYDweOJB3rWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2pVaE82MFdtVWdJT01CVmdQQjQ0a0hldFlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi83MTJmZTUtZmNjOS00Njk1LWExOTQt
MmZkMzNiMjEwZTc2LzEvU2pVaE82MFdtVWdJT01CVmdQQjQ0a0hldFlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi83MTJmZTUtZmNjOS00Njk1LWExOTQtMmZkMzNiMjEwZTc2
LzEvU2pVaE82MFdtVWdJT01CVmdQQjQ0a0hldFlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSUFiCRh
j5T1Hob3OP9TcVNRRlvLWOte95ZkaH7f23Af9s21IwanqRLTTpjnWtQJ9vV+bF/8
Adi8w+ZDnpRT7i1YVCnRmii8H9jnxGYin/nnWF0LBqOgI8BbEHfHMANeoyd2nEJO
DGWEcYO6Vlo5c3jlu1qGftAUIG3czjb3V8JOQt5UgIV0POHN/Kxz50YrpdrZTuWp
lm6gvjtyeNojoRjICazrIHU+THtOrBIRVjxlQkqnJbrdIwgDgOELVVXj0Rrv7bgb
KBfGgnvxSH/Zi3juvGynp5/j0AFVI6MEztQXo5jXJkuBtlfDd3N+Nmeh1KWv49ld
Qp01Ba3HLnKKIw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:43:25 2026 by rpki-client