Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
File: SjQVWNugttuUxVzgbjBv9lGdbvE.mft (raw, json)
Hash identifier: u2OWeah4Z9ilRbs85kTFKy0AaU52hVAneNcCn1CpwVw=
Subject key identifier: 35:54:6F:3B:A8:6B:93:41:83:0A:F1:9B:4A:4C:22:DF:4E:02:2E:F5
Authority key identifier: 4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1
Certificate issuer: /CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1
Certificate serial: 01A180E2A68E20EE51507C8642DE13C68C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
Manifest number: 0CFF
Signing time: Wed 28 Oct 2026 05:01:39 +0000
Manifest this update: Wed 28 Oct 2026 05:01:39 +0000
Manifest next update: Thu 29 Oct 2026 05:01:39 +0000
Files and hashes: 1: RS_ewMX54hVbpRD6ei0HJL0oRHE.roa (hash: I5QkBNTE69fpfHSb13XFTFHNBBve1NDU9UJ/JapJNdQ=)
2: SjQVWNugttuUxVzgbjBv9lGdbvE.crl (hash: IHE7SBEPWd27p1gYOejgsndN7VrdMVUz2zH9nhbT+vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:a6:8e:20:ee:51:50:7c:86:42:de:13:c6:8c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1
Validity
Not Before: Oct 28 05:01:39 2026 GMT
Not After : Oct 29 05:01:39 2026 GMT
Subject: CN=35546f3ba86b9341830af19b4a4c22df4e022ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:01:aa:0f:87:07:15:95:e8:cf:a5:c6:0d:78:
35:6c:1f:6d:14:bf:52:53:cd:fe:6f:c6:08:8d:9b:
6f:bc:19:98:b1:e0:af:5a:e7:ba:79:70:63:69:27:
d9:ab:6d:b8:9d:4c:48:43:8a:69:fe:24:38:0b:33:
61:b0:49:dd:28:d7:3e:b7:88:1e:3e:89:86:18:cb:
da:93:21:9f:dc:dc:2e:0d:33:72:62:eb:09:ef:52:
5a:4d:26:b0:bd:ae:7d:52:fc:d6:fe:03:6c:5c:cb:
e0:99:cb:30:65:bb:05:32:a1:b4:43:ae:b8:88:15:
06:4b:c3:82:ea:4a:9f:f0:90:50:56:be:fa:4d:3a:
04:4c:04:3d:a1:de:d4:4e:6b:fe:29:6a:5b:db:ee:
7e:34:ad:de:dc:8e:04:1c:f6:53:31:0f:0d:e2:db:
a4:bd:47:a6:05:3b:b2:34:40:d3:02:65:84:74:a7:
36:df:72:4a:9b:3b:b9:e9:e5:e9:7c:e9:3e:69:c3:
b5:3a:03:79:fc:46:9a:ea:14:3f:c2:c9:ee:c1:39:
f0:c6:19:30:84:55:cd:b0:e5:29:4f:2f:85:a2:a5:
ce:ca:f1:93:f0:58:aa:33:46:ec:50:85:40:2f:67:
4f:9b:68:02:e5:cf:96:62:19:fd:e6:06:b4:cd:db:
67:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:54:6F:3B:A8:6B:93:41:83:0A:F1:9B:4A:4C:22:DF:4E:02:2E:F5
X509v3 Authority Key Identifier:
keyid:4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:79:a7:11:99:4a:b9:8d:fc:9e:e2:5f:9c:56:c9:c4:fe:a6:
f8:ef:12:f0:8f:69:e2:3c:44:80:cb:88:40:b2:41:62:94:15:
78:f8:ff:fc:53:3b:87:f3:80:0e:6c:a7:9a:31:dc:be:05:b5:
48:cf:01:30:24:54:a2:c8:09:8d:14:f5:5c:8c:0f:b7:d4:90:
98:c3:3d:69:5e:2a:d9:cc:f3:0e:85:13:1a:f4:94:b2:05:6a:
08:eb:43:66:d5:69:78:73:be:18:05:66:9c:c4:ff:cf:10:59:
f6:4b:44:be:dc:be:63:ca:47:ba:d5:31:81:7a:56:50:ac:72:
52:9e:e5:f7:39:06:be:42:a5:18:96:a8:6d:69:6d:08:44:5b:
52:fb:74:ee:b4:0b:da:1e:c3:e3:8b:9d:90:d9:6d:8d:ec:fc:
e5:1a:d6:64:7b:88:69:0d:89:5a:eb:56:9e:76:c7:a4:55:0a:
93:7b:dd:a2:92:ba:db:a8:39:6d:3e:d6:87:a3:bf:4a:ba:e6:
46:e5:80:b6:92:26:73:e3:6a:2e:c9:94:72:4f:87:72:37:49:
2f:f7:94:35:f8:8d:d3:92:b0:09:cb:3b:3b:b4:e8:e9:42:ac:
84:6f:50:3e:2d:7d:01:b5:06:15:c0:6b:ec:86:44:ae:85:92:
bf:c5:73:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:23:08 2026 by rpki-client