Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
File: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft (raw, json)
Hash identifier: IuqbtfgcP+Bdr4puliqDFUuRARF101pewxI+8RZuiEQ=
Subject key identifier: 67:5F:EE:EE:2C:79:5B:55:50:63:E8:F6:41:28:7A:2A:89:D5:5E:2B
Authority key identifier: 4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
Certificate issuer: /CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Certificate serial: 01A15966A3626A904E4E36576D8919330096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
Manifest number: 1900
Signing time: Tue 20 Oct 2026 13:01:01 +0000
Manifest this update: Tue 20 Oct 2026 13:01:01 +0000
Manifest next update: Wed 21 Oct 2026 13:01:01 +0000
Files and hashes: 1: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl (hash: s2OPsbrrqh3IPgC7Fd8AGY6gdRDJSxbgJPruzftBjiU=)
2: Yj8wjFZpgFB7N8QVvr8_EZtHm74.roa (hash: VttLajARZj1VpP60iZ08cMDJLdMSXXWBBP02KPI/yEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:66:a3:62:6a:90:4e:4e:36:57:6d:89:19:33:00:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Validity
Not Before: Oct 20 13:01:01 2026 GMT
Not After : Oct 21 13:01:01 2026 GMT
Subject: CN=675feeee2c795b555063e8f641287a2a89d55e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:d2:59:24:7f:4a:4e:8b:40:58:b6:14:4c:
2f:56:b2:67:eb:b2:f9:c4:7f:ce:08:f3:07:5c:69:
de:65:88:32:69:42:81:d6:5e:6e:9b:15:5c:95:fb:
d5:b7:40:d4:2e:c7:1d:b4:d9:02:23:89:45:ed:12:
c9:17:d5:4c:73:e3:c2:26:a8:ba:75:20:40:ee:0c:
37:e9:9d:1a:71:eb:1f:d8:6f:20:cb:74:59:f7:10:
f0:b9:03:48:6e:f4:60:fc:76:d9:11:81:10:ed:ac:
f5:c4:bb:e6:8f:4d:ff:6d:6c:7d:09:a5:45:1a:44:
b7:b0:ab:33:48:06:a6:5e:a0:ba:20:09:31:f8:1a:
4d:4b:56:94:96:a8:cf:60:c0:a2:eb:3d:52:79:0c:
e8:cc:fb:c3:02:6b:02:6d:76:4b:45:66:3d:59:08:
da:ca:c6:b6:3d:2b:5c:98:44:88:2f:ad:8b:25:36:
1f:e4:bf:f7:52:7c:b7:e5:82:84:4e:3f:78:da:2f:
9d:d7:84:8d:cd:9a:0b:45:6f:03:6d:a9:d1:f5:8c:
ee:c2:fa:dd:6a:c0:80:00:54:fd:a4:f6:8b:e3:91:
c1:bf:33:82:db:33:4b:8d:fa:53:1e:0d:78:c0:19:
a0:4f:74:26:e6:bf:ba:c2:33:98:ce:d8:9b:67:ca:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5F:EE:EE:2C:79:5B:55:50:63:E8:F6:41:28:7A:2A:89:D5:5E:2B
X509v3 Authority Key Identifier:
keyid:4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9a:ae:c6:92:76:14:6b:8d:6d:0b:e8:2e:32:76:8e:60:b6:
98:41:5b:ba:2b:6d:95:7f:f6:bc:07:3f:9c:1a:a1:b3:07:a6:
d7:ef:d0:01:9e:bc:a2:b3:d8:15:2f:92:73:a2:bc:c1:c9:2f:
f9:e4:08:17:19:59:ad:2c:a2:52:b6:6d:dc:37:e9:71:06:cb:
81:a0:96:ce:53:28:43:39:6a:dd:f7:bf:7d:a8:ef:71:f9:0b:
4f:ba:6f:17:18:68:61:eb:4c:22:ee:13:d2:7e:72:1f:27:a5:
12:62:84:57:60:75:23:6e:be:fb:54:35:70:8e:b9:2c:c2:dd:
c0:0b:7e:f8:ba:9d:0e:a0:19:70:cd:0c:a1:93:33:2d:7d:d2:
2b:cb:00:9c:04:9d:fa:f3:44:73:76:28:3b:a3:0f:1a:74:03:
81:1a:7c:64:0c:69:c5:7d:e6:87:a6:44:8c:6d:6a:e1:0f:db:
22:7a:25:22:db:10:9e:0e:3c:36:fb:5a:52:56:05:09:e1:f8:
87:a7:5d:d7:3f:3a:c2:66:38:9a:8c:2f:fc:cb:0a:3c:11:e8:
46:8f:d1:1c:15:a6:d7:d3:0b:e4:89:3e:dd:ad:98:ea:01:b1:
64:78:8e:bc:6a:e7:16:b7:5d:ec:52:c0:36:f7:10:8a:92:bd:
81:38:f4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:50:39 2026 by rpki-client