Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
File: SjUhO60WmUgIOMBVgPB44kHetYo.mft (raw, json)
Hash identifier: yAY3cQHx7kK6eSA4Hw4gNuxMa/cFtUCm0p98AMBprls=
Subject key identifier: BD:3A:F8:94:EA:9C:21:E1:43:0D:7E:49:B6:B5:C3:DF:A3:F8:17:58
Authority key identifier: 4A:35:21:3B:AD:16:99:48:08:38:C0:55:80:F0:78:E2:41:DE:B5:8A
Certificate issuer: /CN=4a35213bad1699480838c05580f078e241deb58a
Certificate serial: 01A17E4F7F69136016F888DFB79D87891C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
Manifest number: 01D5
Signing time: Tue 27 Oct 2026 17:01:41 +0000
Manifest this update: Tue 27 Oct 2026 17:01:41 +0000
Manifest next update: Wed 28 Oct 2026 17:01:41 +0000
Files and hashes: 1: SjUhO60WmUgIOMBVgPB44kHetYo.crl (hash: 75pdsD/m2rz8jD2z0ww8bGxz8dlBZCqtBRX1wC12TcQ=)
2: V1EGIfr7BvBMfahUaU4NVnlqdEQ.roa (hash: JrfQTYX7TC++GoVkr1xgTObKGu86dQxHF4+9hinDHN8=)
3: e_PoDcp11oHj3X7XTipT_OU4OPQ.roa (hash: +Lh+HAKbeHouZEc3ttgnD9FzVZd95ZF99HpVIGLvd0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4f:7f:69:13:60:16:f8:88:df:b7:9d:87:89:1c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a35213bad1699480838c05580f078e241deb58a
Validity
Not Before: Oct 27 17:01:41 2026 GMT
Not After : Oct 28 17:01:41 2026 GMT
Subject: CN=bd3af894ea9c21e1430d7e49b6b5c3dfa3f81758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c7:4e:85:ef:bc:aa:de:1b:3b:39:aa:05:cc:
f8:d4:b5:b3:fb:19:5f:95:f2:71:06:37:85:25:31:
33:7f:61:4d:83:39:69:c8:1f:4a:e7:61:c3:88:29:
a5:d3:29:be:ca:99:52:85:c1:20:11:2e:df:0b:b6:
84:23:d4:1e:41:40:2d:d7:c3:a3:12:53:cb:88:b9:
f4:2b:d8:09:a4:84:0c:75:df:03:c8:57:b6:d2:42:
94:c3:34:bb:2b:f2:0b:11:2f:d3:6d:e1:71:d7:1d:
30:e9:3a:8e:95:49:3a:eb:30:3a:07:69:50:3c:d3:
28:6f:2a:cd:3f:bb:74:2a:25:82:e9:b8:1a:6b:b0:
5a:ea:4d:dd:ad:75:e2:4d:73:dc:08:33:e0:21:84:
d1:9e:e1:6b:52:f1:d2:0f:91:3a:97:7d:fd:5c:8e:
ed:95:aa:e3:ca:46:d0:3a:a2:a0:2e:53:1f:0c:64:
11:94:ea:9a:7c:ea:90:1a:37:f2:15:58:a4:3f:08:
9f:a6:06:5c:4c:67:76:ba:e2:b9:d2:25:79:04:92:
b4:c6:cc:6b:06:40:32:2b:b1:fc:ee:75:29:dd:a9:
b9:bf:8c:3f:0a:0c:1d:6b:90:b2:db:65:a3:4b:1c:
39:e1:e2:4a:cb:70:13:72:ed:9d:08:6f:46:1d:63:
25:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3A:F8:94:EA:9C:21:E1:43:0D:7E:49:B6:B5:C3:DF:A3:F8:17:58
X509v3 Authority Key Identifier:
keyid:4A:35:21:3B:AD:16:99:48:08:38:C0:55:80:F0:78:E2:41:DE:B5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a3:45:e4:67:f9:e4:bf:a7:c7:85:a4:97:3d:c6:5e:c7:dc:
6f:59:05:25:5d:07:be:c4:27:dd:c3:93:2e:33:41:61:e7:3f:
a3:7f:e2:74:d8:16:66:7f:8a:aa:1a:9e:84:7d:35:eb:1c:29:
bb:5a:6c:ec:03:b8:a9:0f:c4:af:18:ec:f0:69:46:1a:ea:6a:
aa:a7:5e:bb:8b:fc:73:55:8d:ef:11:72:73:2d:02:ff:81:49:
fc:8c:ec:04:9e:f6:60:0b:d0:17:8e:82:30:9a:b2:8c:9e:b6:
25:2d:83:a0:76:fb:ea:44:0c:e2:15:ac:56:c9:af:ea:6c:cb:
01:95:6b:d5:c9:6b:8d:9c:d0:bb:1d:bb:cf:5e:0a:27:b1:5d:
08:7f:f3:5d:76:78:c7:41:4c:9d:51:a6:87:36:2f:a7:3c:16:
ff:1d:68:c7:af:c9:69:99:4f:4c:cb:2c:fe:2c:87:74:8f:05:
2f:d7:6b:6b:0b:16:3c:b1:df:31:4e:8e:62:92:ab:c0:c1:73:
ef:bd:7a:cb:b9:97:59:ed:23:09:7a:d9:f9:21:4b:3a:3d:34:
09:5b:e0:d6:c3:8d:17:ef:5d:0e:c7:56:2e:2f:b9:00:07:7e:
60:90:71:af:5a:6c:00:25:12:8e:25:78:1e:05:54:73:2e:8d:
47:4b:c2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:38:11 2026 by rpki-client