Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
File: J7syqoyfjQXFF74q1mUvZlUKjVc.mft (raw, json)
Hash identifier: uFZYtltKg9l9VC4MDkv5yTSAMZXf8A2hhQr+xCpQOcs=
Subject key identifier: 18:AD:4A:5F:98:4F:A3:05:B2:5B:31:F7:68:C5:AD:3E:D0:9B:D2:B9
Authority key identifier: 27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
Certificate issuer: /CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Certificate serial: 01A18299E038FB1A6AE150B0AB07FDC16BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
Manifest number: 1ACE
Signing time: Wed 28 Oct 2026 13:01:24 +0000
Manifest this update: Wed 28 Oct 2026 13:01:24 +0000
Manifest next update: Thu 29 Oct 2026 13:01:24 +0000
Files and hashes: 1: 1yorneBH_uni2t074VYTQfK78WU.asa (hash: ysYqB1Mc/GnPUjyx8+b5ttlTyIkBVoc1lRsKiq7EAvU=)
2: J7syqoyfjQXFF74q1mUvZlUKjVc.crl (hash: 58OzRAi//mRYwFgp6386Y/EC+qhuFYjkt9T8mxgGSbk=)
3: z-B5VFL8mazobgoCJt9JtfgIImE.roa (hash: I1Jf4f5fZHe3sW7+K+SuzdqNrTSkP+c/l3BU74Wl4NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:e0:38:fb:1a:6a:e1:50:b0:ab:07:fd:c1:6b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Validity
Not Before: Oct 28 13:01:24 2026 GMT
Not After : Oct 29 13:01:24 2026 GMT
Subject: CN=18ad4a5f984fa305b25b31f768c5ad3ed09bd2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:64:64:9e:35:84:be:5d:53:3f:fb:03:d9:d0:
e9:09:f2:c7:90:3f:5a:46:fc:ad:df:90:36:ae:9d:
40:bd:b4:cf:68:fd:27:70:e8:3f:4e:79:4b:61:09:
d0:15:d7:5f:b9:e9:cf:bc:0b:c3:b3:b8:3c:f9:61:
79:4e:60:4a:20:63:dd:dd:f9:5e:14:4e:d2:53:bc:
12:22:a6:de:ea:84:20:0f:f1:02:49:1c:58:da:2d:
c7:ff:91:f6:da:49:fe:59:37:4e:86:3b:ce:c7:d9:
03:20:68:7b:89:bd:bd:09:9e:e3:9f:2f:b9:6f:03:
cb:f0:d5:cb:f7:f9:57:7f:7d:fa:9b:11:0e:a6:0b:
1a:27:47:71:e6:3c:99:84:d6:43:b3:3f:6f:fb:33:
2c:56:6f:09:be:4b:2c:17:4b:40:51:eb:80:52:bf:
7b:75:2e:2a:09:0b:62:9f:1f:81:52:9f:0a:51:2e:
18:9d:67:f3:a5:eb:4f:97:7f:95:f0:2f:c8:56:9b:
cc:ea:06:b1:20:f6:11:bc:52:2f:f9:93:af:86:93:
ba:36:00:77:0f:3e:03:11:00:ee:ad:1d:22:47:09:
87:a0:e5:c0:55:e4:70:cc:7a:80:d6:c1:95:f0:25:
c5:d5:1b:e1:cc:10:ee:33:6e:8b:a1:47:85:38:20:
07:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AD:4A:5F:98:4F:A3:05:B2:5B:31:F7:68:C5:AD:3E:D0:9B:D2:B9
X509v3 Authority Key Identifier:
keyid:27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:90:ce:88:20:26:76:bc:c7:63:01:2a:54:82:38:83:fb:df:
85:5a:aa:6e:95:30:5e:72:24:07:98:4d:9d:be:3d:31:48:81:
d5:b4:a6:59:e3:7d:62:9d:00:68:3c:ed:9c:b5:58:43:44:8a:
a6:8c:0d:3b:cc:ce:29:f0:73:c6:37:2b:f0:ad:9f:97:ba:7b:
f6:24:90:79:d5:71:6f:40:ea:40:aa:d0:0b:79:05:6b:6d:03:
a0:54:60:f0:b8:d4:81:75:02:8e:76:2f:a5:2b:ad:a5:2b:6c:
f7:d1:60:d5:a2:85:10:10:79:23:16:4d:4c:3f:3b:89:02:86:
e4:84:f6:a9:63:a5:07:9f:a2:2b:9e:c0:62:da:d2:b6:cf:f5:
f3:96:7a:34:93:d2:93:54:40:70:4e:ce:0b:87:b2:98:a8:56:
20:38:d6:d1:0d:f7:7a:2f:94:eb:c3:73:8a:21:15:50:89:d1:
3d:19:f3:c6:4d:96:c4:cc:9a:c0:df:63:44:df:d8:08:93:cd:
99:d1:ca:ad:94:3b:19:5e:ac:f2:a1:bb:b8:3d:35:07:96:dd:
a5:28:c7:3e:62:03:5a:ae:4f:b8:64:7f:91:da:dc:46:58:a2:
6c:ca:b3:f4:12:59:09:7a:fa:9d:2f:8d:94:ae:fd:7b:a8:48:
6c:bc:60:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:01:41 2026 by rpki-client