Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
File: SJwmPoGEhs_YMcJF3frMqR-9gcA.mft (raw, json)
Hash identifier: X/oeffYt1N1ZUqGJpQlEhZvdYDWzzkBAdY7Copyvk/0=
Subject key identifier: 6D:48:4C:F4:56:30:C9:E4:AE:F0:22:2C:60:56:4A:31:FA:C7:2D:F3
Authority key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
Certificate issuer: /CN=489c263e818486cfd831c245ddfacca91fbd81c0
Certificate serial: 019F19B209652E40E3726C6AB5C2F9E0594D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
Manifest number: 060D
Signing time: Tue 30 Jun 2026 18:02:05 +0000
Manifest this update: Tue 30 Jun 2026 18:02:05 +0000
Manifest next update: Wed 01 Jul 2026 18:02:05 +0000
Files and hashes: 1: 5JcOQzq7WzmjMFbG4IJGxYNeKgo.roa (hash: gSdvGPuX99g6e3AjEkD3xzqC8m6WCx9LmxK0VDXFz5E=)
2: QsLpU8hJ4ATxawddQAfsVH71Yrc.roa (hash: 8LAE+r4LCdI7plc1J5/y/lKsTqyUBWlK/iV7nFAj/Ks=)
3: SJwmPoGEhs_YMcJF3frMqR-9gcA.crl (hash: a7hCjQf7lCDXU/DwpYOf4j8P+14Na7S5AF1J0lMuWeI=)
4: tjcd2B2MoHez1-FLdOBN_2wuTBg.roa (hash: nHwqBLL+1vMmNTrdugL+2uUX5fBDVoNX8Hv9HhSFUYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:b2:09:65:2e:40:e3:72:6c:6a:b5:c2:f9:e0:59:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=489c263e818486cfd831c245ddfacca91fbd81c0
Validity
Not Before: Jun 30 18:02:05 2026 GMT
Not After : Jul 1 18:02:05 2026 GMT
Subject: CN=6d484cf45630c9e4aef0222c60564a31fac72df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:b6:f2:af:04:78:ba:36:c9:63:0c:c9:80:
14:8e:10:26:53:1b:4b:6c:76:7a:98:4e:6f:fa:51:
25:99:41:f8:5b:ec:5f:49:e6:1d:3a:1e:45:f6:8f:
a9:b8:cd:a1:4a:54:94:d6:77:cc:16:ec:8e:d3:7a:
89:bb:0d:97:bb:18:8b:cb:e8:ea:60:a0:ea:56:f8:
f4:e9:6d:06:89:3e:bc:b9:ff:ec:08:af:61:ae:39:
cb:09:f2:37:fa:ef:93:50:a2:36:d5:5c:d6:19:52:
5d:dd:b1:4b:aa:b0:bc:ef:0e:87:e6:90:b8:7e:94:
25:11:f4:32:06:4a:c3:eb:c7:67:59:d4:bc:94:39:
7c:9b:72:f6:cc:91:16:6f:0a:52:5c:69:c2:3f:84:
4b:e3:e1:f4:fc:f9:fd:d1:22:4b:84:f3:71:98:c3:
2e:b0:16:d9:9a:3e:e9:38:26:06:fc:ed:8b:f7:f0:
38:18:a0:1b:3e:64:ac:4f:a5:e1:bf:70:3e:bd:4d:
65:af:52:4b:26:b5:93:10:cc:ba:e6:98:42:db:d5:
05:7b:0f:03:65:d2:60:95:c1:67:d2:a5:26:bd:04:
3a:36:0a:8d:2d:cc:cd:b5:a9:88:b3:0e:45:a3:38:
cd:5c:74:89:3d:c3:e9:a3:a9:a7:fe:a2:da:0f:10:
ef:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:48:4C:F4:56:30:C9:E4:AE:F0:22:2C:60:56:4A:31:FA:C7:2D:F3
X509v3 Authority Key Identifier:
keyid:48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:98:b9:b4:6a:13:84:1c:ee:86:36:a9:10:7e:50:c3:8e:7e:
b8:a3:8f:d9:9d:8e:6b:25:f1:fb:97:82:10:a4:94:4e:2c:90:
54:d4:be:db:0b:97:57:71:38:36:9c:d3:4c:7b:58:95:9d:27:
0c:48:92:a2:e8:f1:a6:44:08:d8:1f:44:f2:7f:a7:b0:2b:e9:
94:1d:db:a7:dc:89:c8:db:b5:65:65:bf:e2:04:8c:9c:43:f9:
5b:1b:39:cc:57:e9:98:a3:87:39:c9:0c:fa:b1:b3:a2:a2:fd:
9f:e4:36:a0:d2:65:98:e8:2c:fd:7b:47:ef:c6:09:04:7f:a7:
2c:fb:62:09:74:dd:2b:e4:3d:c0:32:85:57:3c:9a:31:f1:fe:
da:0f:bd:55:60:19:fc:7e:ea:2f:08:27:88:2e:01:b1:94:43:
fd:83:9e:0d:12:d1:50:1a:1c:a6:69:35:53:09:db:40:90:e4:
da:59:15:08:d0:73:b6:d3:8d:d9:bf:af:2a:76:cd:3d:42:24:
6c:1b:f9:a8:98:31:d8:bf:c4:82:bf:09:00:f4:f0:3d:ae:3b:
4f:c9:0a:fe:6f:4e:77:15:d6:d7:35:ed:65:60:c5:f0:56:81:
dd:e5:46:68:93:be:6d:b3:ec:5b:77:d0:ba:69:70:1d:be:b8:
dd:c8:84:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:11 2026 by rpki-client