Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
File: SjUhO60WmUgIOMBVgPB44kHetYo.mft (raw, json)
Hash identifier: PdA+BMeHW+4JPCOLoiyHv0yyvGC0pjbhVFzsbtd1hSE=
Subject key identifier: 4F:9E:08:FF:DB:64:1F:7F:D0:E3:0A:96:64:DB:FA:AA:8E:28:31:2E
Authority key identifier: 4A:35:21:3B:AD:16:99:48:08:38:C0:55:80:F0:78:E2:41:DE:B5:8A
Certificate issuer: /CN=4a35213bad1699480838c05580f078e241deb58a
Certificate serial: 019FA33C2B4CD5291A8F81A6B78E7F6E0146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
Manifest number: DF
Signing time: Mon 27 Jul 2026 11:00:56 +0000
Manifest this update: Mon 27 Jul 2026 11:00:56 +0000
Manifest next update: Tue 28 Jul 2026 11:00:56 +0000
Files and hashes: 1: SjUhO60WmUgIOMBVgPB44kHetYo.crl (hash: JRKTIvEnopx/Wv9TNZ6DzvtlJ1Q6hDZw+PUbRJErG3Q=)
2: V1EGIfr7BvBMfahUaU4NVnlqdEQ.roa (hash: JrfQTYX7TC++GoVkr1xgTObKGu86dQxHF4+9hinDHN8=)
3: e_PoDcp11oHj3X7XTipT_OU4OPQ.roa (hash: +Lh+HAKbeHouZEc3ttgnD9FzVZd95ZF99HpVIGLvd0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:2b:4c:d5:29:1a:8f:81:a6:b7:8e:7f:6e:01:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a35213bad1699480838c05580f078e241deb58a
Validity
Not Before: Jul 27 11:00:56 2026 GMT
Not After : Jul 28 11:00:56 2026 GMT
Subject: CN=4f9e08ffdb641f7fd0e30a9664dbfaaa8e28312e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:0f:62:01:f6:41:ef:3e:40:75:dc:3b:7b:
2b:f3:a2:f4:60:c4:7e:91:5a:e6:98:51:41:3f:d6:
e0:93:13:43:c0:29:cb:90:5b:00:ff:f3:c0:70:cb:
93:87:05:93:d2:44:81:c0:2a:13:85:3d:d5:df:e8:
f7:ec:f9:27:80:a4:8c:e1:31:26:af:7f:0d:6a:7b:
ed:cf:2e:47:f8:6a:a2:74:88:8f:d5:31:a3:28:72:
99:76:0f:e6:e5:6e:3b:79:56:9d:06:bb:6d:c4:0c:
9b:35:58:50:cf:a2:5d:58:02:70:66:3a:dd:e1:17:
8c:a7:97:89:de:42:b1:f1:f8:c0:03:a5:d6:eb:7c:
23:7c:ae:aa:ab:b4:d5:8b:36:e2:49:88:55:9d:e7:
ae:85:7c:b0:06:39:69:2e:b2:43:a2:eb:be:32:91:
e8:6a:82:22:b7:5d:96:16:7a:e4:7f:f5:d0:21:58:
29:38:b4:c7:42:52:79:c5:4a:ca:18:a4:68:f8:ba:
21:94:6f:be:ab:a7:6b:0b:19:f6:12:9f:e5:db:60:
04:d3:14:ae:4d:47:24:bb:01:75:e1:51:37:a1:06:
06:25:cc:37:7b:cc:11:84:14:14:33:d1:f9:89:74:
14:3e:f4:61:03:78:da:2e:03:d4:16:df:c0:ac:90:
45:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9E:08:FF:DB:64:1F:7F:D0:E3:0A:96:64:DB:FA:AA:8E:28:31:2E
X509v3 Authority Key Identifier:
keyid:4A:35:21:3B:AD:16:99:48:08:38:C0:55:80:F0:78:E2:41:DE:B5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1a:6a:59:54:28:64:cf:06:89:8b:3e:62:75:b4:6f:48:b1:
c6:1c:23:55:2a:f6:b3:ac:6d:31:d4:37:ea:12:69:91:52:b9:
cf:a3:5a:7e:30:a5:7f:d0:8a:b5:de:e2:13:2d:77:af:18:12:
fc:36:f7:33:c4:be:96:33:fe:38:42:61:22:26:a4:8d:69:29:
33:7b:66:33:54:ae:7a:88:c4:4f:be:2b:70:4a:be:b6:01:71:
2e:d5:c6:d5:84:fa:5a:9a:bd:20:b5:19:ef:8a:d9:6a:4a:c5:
87:2b:51:8e:c4:b2:d5:86:b3:0c:9a:07:3b:d3:57:4e:61:85:
84:e0:6c:14:4d:af:7e:cd:b5:87:e8:32:ad:bc:0d:40:6b:c4:
4c:03:13:09:85:2d:a4:11:31:2a:49:38:97:a8:c4:17:67:f6:
5b:54:3a:6f:56:cc:72:9d:dd:8f:db:08:44:08:ff:e2:4c:66:
51:d5:5f:65:3b:1b:9b:0b:28:4b:6f:46:df:5e:22:5c:40:31:
8d:96:08:d6:de:92:99:41:10:18:38:76:ff:8e:7e:df:74:50:
af:3b:f7:96:d1:ac:10:db:a8:f0:ba:04:d1:a8:fa:c7:92:3c:
73:7b:11:67:49:f1:75:76:79:31:c9:f9:eb:4a:df:77:ec:1e:
46:76:3d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:50:27 2026 by rpki-client