Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
File: SjUhO60WmUgIOMBVgPB44kHetYo.mft (raw, json)
Hash identifier: t0k7UTYiCHvMBoe5ue8XbBRklVgRpv0SmlqsfH9yRNM=
Subject key identifier: A2:32:30:60:32:D5:FE:BB:FA:4F:6E:95:42:C1:B6:49:0A:A7:A4:16
Authority key identifier: 4A:35:21:3B:AD:16:99:48:08:38:C0:55:80:F0:78:E2:41:DE:B5:8A
Certificate issuer: /CN=4a35213bad1699480838c05580f078e241deb58a
Certificate serial: 019EB98F6604CC0FDAC17A26DDDA61F85B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
Manifest number: 66
Signing time: Fri 12 Jun 2026 02:00:43 +0000
Manifest this update: Fri 12 Jun 2026 02:00:43 +0000
Manifest next update: Sat 13 Jun 2026 02:00:43 +0000
Files and hashes: 1: SjUhO60WmUgIOMBVgPB44kHetYo.crl (hash: eyp8uA2KQ8ZhZwQEhi4Tki7Tulw3UUt+qwaxLZ8pApk=)
2: V1EGIfr7BvBMfahUaU4NVnlqdEQ.roa (hash: JrfQTYX7TC++GoVkr1xgTObKGu86dQxHF4+9hinDHN8=)
3: e_PoDcp11oHj3X7XTipT_OU4OPQ.roa (hash: +Lh+HAKbeHouZEc3ttgnD9FzVZd95ZF99HpVIGLvd0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:66:04:cc:0f:da:c1:7a:26:dd:da:61:f8:5b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a35213bad1699480838c05580f078e241deb58a
Validity
Not Before: Jun 12 02:00:43 2026 GMT
Not After : Jun 13 02:00:43 2026 GMT
Subject: CN=a232306032d5febbfa4f6e9542c1b6490aa7a416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ee:07:d9:7f:fe:30:c6:6c:e6:50:45:cf:2f:
fa:89:95:0f:83:af:69:9e:8e:d0:a0:65:1e:ee:83:
09:27:f9:e0:d0:a2:ee:60:fc:0f:9b:0d:80:83:c3:
0f:40:48:1b:6d:46:45:be:1f:1f:bb:ad:bf:35:34:
23:cf:f8:1c:61:66:43:ee:72:d4:38:2f:64:fd:60:
85:de:c5:7a:03:c4:16:5b:39:fc:3b:4a:e0:13:92:
ba:4c:b0:6b:99:1c:1d:39:9b:24:c6:6d:a5:4d:9d:
6c:27:ae:fb:3b:cc:76:50:cd:bb:85:79:01:3a:68:
81:0d:3a:ab:94:92:52:b8:ca:1a:bb:5f:02:c1:c8:
a4:25:fa:ad:b2:cf:ef:63:f7:ee:56:fb:eb:24:db:
f5:17:c3:f2:18:20:f8:33:d8:7e:f7:51:3b:97:c6:
18:59:07:fe:50:29:4a:49:2b:f9:41:b1:3d:7e:dd:
23:01:0d:e1:68:40:2b:4d:83:cc:9b:7e:9c:f3:6d:
f8:70:cd:35:89:dc:f3:0b:db:38:1b:d4:4d:02:59:
3e:b6:68:41:0b:ae:87:ee:b8:50:96:f7:14:a9:46:
18:6a:5d:b7:1a:c0:10:f1:4c:a4:ba:17:6b:98:e7:
65:08:ac:96:1f:2f:63:6a:4e:5d:71:3d:b4:b4:ca:
76:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:32:30:60:32:D5:FE:BB:FA:4F:6E:95:42:C1:B6:49:0A:A7:A4:16
X509v3 Authority Key Identifier:
keyid:4A:35:21:3B:AD:16:99:48:08:38:C0:55:80:F0:78:E2:41:DE:B5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e7:cf:04:2f:cf:f2:92:30:e6:f0:73:bd:fb:d4:cb:47:43:
7e:57:ee:83:19:5b:4e:51:33:95:bb:ad:52:6d:19:22:39:d5:
cf:48:11:f2:cd:1f:cd:3f:9f:4d:76:6a:30:47:ac:3b:a4:07:
50:30:2d:d3:9b:6c:97:79:33:ee:77:73:43:f2:2c:04:d9:94:
8f:ac:b9:6b:cb:9c:5b:27:ee:1b:d4:45:9f:f9:2f:86:9b:8e:
ca:78:fa:5e:d4:23:41:63:81:a8:54:1a:f0:42:c9:79:14:a3:
45:0c:7d:f3:e4:9c:3f:ab:49:16:7d:e2:68:37:2d:b7:73:88:
23:2e:4b:74:de:98:07:35:c9:60:d7:d3:f1:fa:69:81:6d:21:
f5:e9:1d:ad:ad:0c:b8:5b:c6:ad:63:60:a2:eb:03:f3:a2:88:
5d:f9:42:0b:dc:95:f4:5f:ba:51:d4:15:6a:c2:20:7b:9d:80:
48:b7:d9:c7:d2:45:be:20:39:78:a6:cf:38:2f:a1:a4:68:a8:
d5:bd:b3:61:da:52:ed:ba:9f:3d:1a:23:75:48:d9:3b:5e:c9:
2e:a4:be:3c:29:3c:ea:c7:91:4a:51:53:c7:2c:25:d9:55:c3:
7d:dc:12:62:ed:7b:f2:e5:d6:a6:a6:fd:d3:18:1a:27:ac:d3:
3b:96:e5:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65j2YEzA/awXom3dph+FuBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMzUyMTNiYWQxNjk5NDgwODM4YzA1NTgwZjA3OGUyNDFk
ZWI1OGEwHhcNMjYwNjEyMDIwMDQzWhcNMjYwNjEzMDIwMDQzWjAzMTEwLwYDVQQD
EyhhMjMyMzA2MDMyZDVmZWJiZmE0ZjZlOTU0MmMxYjY0OTBhYTdhNDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie4H2X/+MMZs5lBFzy/6iZUPg69p
no7QoGUe7oMJJ/ng0KLuYPwPmw2Ag8MPQEgbbUZFvh8fu62/NTQjz/gcYWZD7nLU
OC9k/WCF3sV6A8QWWzn8O0rgE5K6TLBrmRwdOZskxm2lTZ1sJ677O8x2UM27hXkB
OmiBDTqrlJJSuMoau18CwcikJfqtss/vY/fuVvvrJNv1F8PyGCD4M9h+91E7l8YY
WQf+UClKSSv5QbE9ft0jAQ3haEArTYPMm36c8234cM01idzzC9s4G9RNAlk+tmhB
C66H7rhQlvcUqUYYal23GsAQ8UykuhdrmOdlCKyWHy9jak5dcT20tMp2iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIyMGAy1f67+k9ulULBtkkKp6QWMB8GA1UdIwQY
MBaAFEo1ITutFplICDjAVYDweOJB3rWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2pVaE82MFdtVWdJT01CVmdQQjQ0a0hldFlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi83MTJmZTUtZmNjOS00Njk1LWExOTQt
MmZkMzNiMjEwZTc2LzEvU2pVaE82MFdtVWdJT01CVmdQQjQ0a0hldFlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi83MTJmZTUtZmNjOS00Njk1LWExOTQtMmZkMzNiMjEwZTc2
LzEvU2pVaE82MFdtVWdJT01CVmdQQjQ0a0hldFlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOfPBC/P
8pIw5vBzvfvUy0dDflfugxlbTlEzlbutUm0ZIjnVz0gR8s0fzT+fTXZqMEesO6QH
UDAt05tsl3kz7ndzQ/IsBNmUj6y5a8ucWyfuG9RFn/kvhpuOynj6XtQjQWOBqFQa
8ELJeRSjRQx98+ScP6tJFn3iaDctt3OIIy5LdN6YBzXJYNfT8fppgW0h9ekdra0M
uFvGrWNgousD86KIXflCC9yV9F+6UdQVasIge52ASLfZx9JFviA5eKbPOC+hpGio
1b2zYdpS7bqfPRojdUjZO17JLqS+PCk86seRSlFTxywl2VXDfdwSYu178uXWpqb9
0xgaJ6zTO5blfw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 07:33:04 2026 by rpki-client