Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft
File: J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft (raw, json)
Hash identifier: W/ovEcW5FwGwcfSS8ku7EcXcjgV/5Lccl+xaImYESFU=
Subject key identifier: 96:34:83:3C:B1:95:C9:14:5F:69:F8:50:47:76:44:41:AC:E6:35:D0
Authority key identifier: 27:81:00:BF:DC:37:BC:79:92:41:F8:37:60:C9:AD:11:53:44:D8:B0
Certificate issuer: /CN=278100bfdc37bc799241f83760c9ad115344d8b0
Certificate serial: 01A10813A9A7669742447D41FC700B54E64D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4EAv9w3vHmSQfg3YMmtEVNE2LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft
Manifest number: 0102
Signing time: Sun 04 Oct 2026 18:01:08 +0000
Manifest this update: Sun 04 Oct 2026 18:01:08 +0000
Manifest next update: Mon 05 Oct 2026 18:01:08 +0000
Files and hashes: 1: 85mSZls-XHlgJOvWmgk-VtOFBkA.roa (hash: FPNYFDWtHSvEK1gnIwxleo9g0+U1nGpA9pdz6kB33Sg=)
2: J4EAv9w3vHmSQfg3YMmtEVNE2LA.crl (hash: 5HKRY+jHMl85Ux0bRfVxXtN+R6oaFB2OU9+JI1nAfAg=)
3: kbQFQOWzDlX0E1V08cvnijkeOTY.roa (hash: ZvoM8j+qNFn5EDYwxPR3kym37UjIAoq+nL3E4fERgJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4EAv9w3vHmSQfg3YMmtEVNE2LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:13:a9:a7:66:97:42:44:7d:41:fc:70:0b:54:e6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278100bfdc37bc799241f83760c9ad115344d8b0
Validity
Not Before: Oct 4 18:01:08 2026 GMT
Not After : Oct 5 18:01:08 2026 GMT
Subject: CN=9634833cb195c9145f69f85047764441ace635d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e9:8d:e7:fe:f5:8c:61:f2:2c:f9:99:67:2d:
64:6b:c3:1e:e3:8d:b2:3a:fe:13:93:2c:0f:c3:03:
39:e4:8b:10:d8:30:54:05:e9:40:6b:22:bf:3e:67:
72:15:1e:ae:c4:32:6b:b8:bf:c4:d0:81:b8:2d:68:
b7:c5:2c:d2:a1:86:7b:fb:2b:3e:46:72:82:aa:26:
b0:fd:ad:38:38:48:04:21:ed:3e:0d:8f:c3:9f:fe:
b3:ba:40:02:b2:b2:7d:7b:37:16:c3:0a:2c:1c:82:
56:cf:9d:20:b5:9e:f8:10:4d:02:86:60:25:09:cc:
a5:69:95:26:ce:22:1b:bd:9d:c2:72:98:f8:f3:7a:
22:5c:d3:70:9d:23:9b:c5:3c:99:53:ab:81:c3:cb:
42:76:e5:00:40:1e:e6:f9:1c:6d:84:1d:1c:fb:13:
91:a5:2c:3d:66:f1:a0:32:43:b2:ad:bc:80:6d:b6:
28:f5:df:c1:2f:71:5a:e3:92:9a:94:5a:2e:8b:e8:
2a:8c:f0:5e:d1:c5:54:dd:fd:c0:35:de:17:28:a8:
ba:2b:ad:3f:3b:f7:58:97:b0:f4:c1:42:6a:8a:44:
fc:d7:54:12:81:c9:32:d0:2b:86:a5:ff:43:8e:42:
2f:40:06:73:93:cd:87:7f:73:14:2e:b2:a8:4d:ff:
90:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:34:83:3C:B1:95:C9:14:5F:69:F8:50:47:76:44:41:AC:E6:35:D0
X509v3 Authority Key Identifier:
keyid:27:81:00:BF:DC:37:BC:79:92:41:F8:37:60:C9:AD:11:53:44:D8:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4EAv9w3vHmSQfg3YMmtEVNE2LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b0:18:74:29:b6:d6:74:b8:ca:3d:7b:ed:e7:b5:f5:20:3f:
c6:51:fb:ff:55:aa:df:05:29:87:74:70:59:a7:0e:b5:6c:ce:
64:c8:a1:fe:11:91:8a:25:ec:b6:e4:98:fc:cd:b0:f7:ff:24:
c6:79:32:dc:7d:27:4d:19:cd:02:c5:12:95:82:07:a4:67:81:
ec:ed:91:de:7d:c7:93:66:c9:1d:b4:ff:15:2e:2b:9e:e2:15:
66:d0:0b:be:38:9c:88:97:9e:25:36:c3:4b:61:58:36:bb:7f:
0f:14:ab:e4:4e:06:33:c5:05:47:68:e5:b8:eb:15:39:7a:d6:
56:18:a7:64:c9:b6:90:8b:7d:08:fe:03:dd:60:22:39:4b:38:
63:cf:95:15:43:32:53:78:b6:b6:68:3e:40:98:84:ca:bd:9b:
2f:8a:a2:1f:a0:6e:67:51:ba:f8:33:97:90:98:20:80:bd:da:
26:05:4c:5d:e7:64:11:d2:40:1e:02:05:ce:20:17:e7:81:d5:
75:ab:4b:8b:7f:01:05:53:90:db:4d:2d:8a:bb:bf:f9:8f:cf:
9a:4f:52:a1:6b:7e:e7:0c:dd:18:e8:99:64:41:87:c9:a6:4d:
98:42:e7:e9:32:c7:4c:11:53:67:5b:63:9d:88:6c:53:ca:4a:
17:d9:e1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 23:04:07 2026 by rpki-client