Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
File: SJwmPoGEhs_YMcJF3frMqR-9gcA.mft (raw, json)
Hash identifier: KC3m1Zap2b8FruzQrkE/5fY+SwDETyxWh/tCbsmG7Pk=
Subject key identifier: 1D:E4:DF:DF:16:27:AD:47:56:90:21:3A:5A:DB:73:27:8F:A5:78:89
Authority key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
Certificate issuer: /CN=489c263e818486cfd831c245ddfacca91fbd81c0
Certificate serial: 019D38D3B50D64D0F43CD8D5B95091FFEC9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
Manifest number: 0514
Signing time: Sun 29 Mar 2026 09:01:31 +0000
Manifest this update: Sun 29 Mar 2026 09:01:31 +0000
Manifest next update: Mon 30 Mar 2026 09:01:31 +0000
Files and hashes: 1: 5JcOQzq7WzmjMFbG4IJGxYNeKgo.roa (hash: gSdvGPuX99g6e3AjEkD3xzqC8m6WCx9LmxK0VDXFz5E=)
2: QsLpU8hJ4ATxawddQAfsVH71Yrc.roa (hash: 8LAE+r4LCdI7plc1J5/y/lKsTqyUBWlK/iV7nFAj/Ks=)
3: SJwmPoGEhs_YMcJF3frMqR-9gcA.crl (hash: Dsx0zXyCR94P2GDeAyE00EcRS1PVHLeEaftUhghBZGI=)
4: tjcd2B2MoHez1-FLdOBN_2wuTBg.roa (hash: nHwqBLL+1vMmNTrdugL+2uUX5fBDVoNX8Hv9HhSFUYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b5:0d:64:d0:f4:3c:d8:d5:b9:50:91:ff:ec:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=489c263e818486cfd831c245ddfacca91fbd81c0
Validity
Not Before: Mar 29 09:01:31 2026 GMT
Not After : Mar 30 09:01:31 2026 GMT
Subject: CN=1de4dfdf1627ad475690213a5adb73278fa57889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c6:99:66:da:09:f7:3b:d0:30:45:6e:0d:c3:
1e:0a:20:ff:22:36:91:dd:5f:fc:11:cd:8c:95:43:
c3:56:c1:a1:05:ed:17:af:4c:e6:56:22:09:99:24:
10:d4:97:dc:b0:8b:a5:24:04:27:37:0f:b9:96:88:
27:5f:60:32:2e:93:8f:9c:ee:23:66:bf:f1:26:a5:
d3:6a:d8:2b:18:eb:59:15:af:8e:f7:64:cd:ce:08:
74:2b:e8:02:8b:ac:0a:b3:3b:48:ab:4d:4b:dc:90:
d7:ae:ba:23:6b:86:1c:0c:46:db:ca:d2:02:e3:bd:
19:be:fa:d5:02:ab:a2:8d:0a:4e:19:bb:0f:c6:37:
8c:a1:1c:1a:e1:67:d9:d1:ca:fc:72:5e:8a:04:82:
ea:22:ae:7f:20:3c:24:e1:9c:5b:e7:39:31:e8:34:
fa:3b:91:e6:f1:b9:30:a4:9c:a7:cd:42:d7:72:0f:
9a:af:4f:99:9e:e6:88:b9:0e:ee:49:8c:85:f0:ee:
99:1b:a6:18:4a:5f:b7:3a:89:c1:f3:fc:da:e7:56:
39:36:2f:de:c1:b4:00:77:89:6d:d7:f1:32:ac:ba:
65:c0:6c:aa:48:0b:28:c2:ea:d2:70:22:86:34:33:
2f:fb:b0:0b:f7:e9:6c:7a:bd:6f:08:11:e9:06:86:
41:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E4:DF:DF:16:27:AD:47:56:90:21:3A:5A:DB:73:27:8F:A5:78:89
X509v3 Authority Key Identifier:
keyid:48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:76:25:de:13:e9:f1:2a:ae:43:38:98:5f:86:b6:99:04:f0:
eb:f4:83:aa:5c:6a:95:eb:ac:36:56:ed:00:0e:67:08:3d:74:
15:6f:11:05:38:c2:85:4c:03:97:30:8d:09:a4:3a:b4:68:24:
f8:87:cb:05:42:ac:01:c8:71:11:80:71:0d:ab:dc:e6:3c:fe:
91:7c:85:da:56:80:56:2a:c2:a8:1d:22:9b:71:07:12:e2:9a:
0e:eb:02:98:be:3b:1c:79:8d:84:cb:d7:39:53:b8:e8:1f:ff:
db:bd:ba:15:72:b2:fc:86:1e:fb:69:79:6c:97:f0:d5:9b:a3:
3a:5a:9d:c5:3e:62:ac:e1:4f:76:18:5f:a7:35:62:40:dd:03:
0c:99:cc:a9:47:ac:0f:98:56:25:7e:b2:2f:a5:08:8c:77:e2:
03:d3:08:da:e5:a8:1a:70:93:6d:24:ae:06:5e:73:43:da:82:
55:c2:1b:72:25:22:2a:9a:37:55:2c:61:e0:0f:97:1b:99:56:
c5:11:b8:03:ac:60:1e:d3:0b:62:7c:48:4b:8e:c7:34:bd:c1:
a4:25:fe:4f:aa:d7:89:1e:7c:64:c4:9a:18:a5:5f:bb:25:30:
55:1a:4e:af:2c:c0:56:e9:ec:c3:26:8d:d4:04:9f:b9:06:0d:
c3:07:73:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:22 2026 by rpki-client