Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft
File: J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft (raw, json)
Hash identifier: tg5k2PU/6bGQgUArkzA+gFt0b3YWnd9tPw4+6LJUB60=
Subject key identifier: 90:34:09:77:8D:A3:1D:CE:1D:D0:37:ED:22:D0:73:46:E3:3C:0F:7F
Authority key identifier: 27:81:00:BF:DC:37:BC:79:92:41:F8:37:60:C9:AD:11:53:44:D8:B0
Certificate issuer: /CN=278100bfdc37bc799241f83760c9ad115344d8b0
Certificate serial: 019FF9B633D58C35871DA46E668F72A1F6CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4EAv9w3vHmSQfg3YMmtEVNE2LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft
Manifest number: 76
Signing time: Thu 13 Aug 2026 06:01:35 +0000
Manifest this update: Thu 13 Aug 2026 06:01:35 +0000
Manifest next update: Fri 14 Aug 2026 06:01:35 +0000
Files and hashes: 1: 85mSZls-XHlgJOvWmgk-VtOFBkA.roa (hash: FPNYFDWtHSvEK1gnIwxleo9g0+U1nGpA9pdz6kB33Sg=)
2: J4EAv9w3vHmSQfg3YMmtEVNE2LA.crl (hash: rYyiv/EdEB6YPzeMYSWt44IPwRxQiotd2OjAWqDALmM=)
3: kbQFQOWzDlX0E1V08cvnijkeOTY.roa (hash: ZvoM8j+qNFn5EDYwxPR3kym37UjIAoq+nL3E4fERgJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4EAv9w3vHmSQfg3YMmtEVNE2LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:b6:33:d5:8c:35:87:1d:a4:6e:66:8f:72:a1:f6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278100bfdc37bc799241f83760c9ad115344d8b0
Validity
Not Before: Aug 13 06:01:35 2026 GMT
Not After : Aug 14 06:01:35 2026 GMT
Subject: CN=903409778da31dce1dd037ed22d07346e33c0f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:4a:4a:5a:bd:05:2b:63:ca:31:53:97:98:
d2:b8:f7:0c:24:2a:f5:c1:bc:e7:00:3d:bc:c7:a8:
2b:80:77:26:86:33:63:d3:d4:f2:1d:70:93:2d:c4:
70:8c:56:2d:3f:9b:9c:01:7c:76:1a:cb:ee:04:ae:
a5:26:ca:53:3a:c8:19:21:e9:29:54:10:21:e7:f1:
0c:63:8c:c6:d0:d4:40:20:f9:ec:c5:87:93:01:e9:
04:72:92:f4:ad:4b:c2:2d:c1:5b:ad:de:de:e8:f2:
b4:cb:8d:ef:5e:d0:f3:0c:4d:8c:15:35:ef:52:51:
89:cb:3e:8d:d2:ac:b5:d2:ac:e6:04:dc:97:7f:4f:
19:32:2c:35:68:e6:63:4d:94:c1:40:fb:c5:17:56:
14:41:95:51:88:ee:4d:05:71:34:ea:48:54:04:f6:
6b:26:ca:03:7c:89:81:6d:62:bb:3b:5d:eb:6e:83:
89:75:51:b8:2f:d9:70:ed:92:55:9c:f5:3d:60:16:
dc:fc:21:b7:6e:3a:8a:1b:83:6c:fa:54:5a:28:58:
84:ac:77:f7:c5:2b:cb:ed:e3:d1:f2:70:0f:d7:3a:
f2:61:b5:6f:e8:af:ba:ec:8a:cb:31:4f:f9:0e:5a:
8d:7f:3d:fa:2c:58:8c:e0:7a:12:b9:99:a9:fc:a6:
db:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:34:09:77:8D:A3:1D:CE:1D:D0:37:ED:22:D0:73:46:E3:3C:0F:7F
X509v3 Authority Key Identifier:
keyid:27:81:00:BF:DC:37:BC:79:92:41:F8:37:60:C9:AD:11:53:44:D8:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4EAv9w3vHmSQfg3YMmtEVNE2LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:27:a8:ab:40:96:d4:be:b3:8d:9d:7b:7e:0c:44:1d:25:ad:
43:65:05:1a:6f:c2:76:e5:ae:39:84:af:e9:0c:f2:cc:03:1d:
b8:d2:4b:c8:f1:1a:d7:fd:f2:69:20:b4:81:4f:a9:77:b3:87:
cd:03:bf:8e:9c:c3:95:bf:c0:51:d6:68:4c:f5:38:18:c2:ac:
d7:24:54:df:41:9a:8b:44:18:47:f6:e6:85:aa:3c:1c:bd:b8:
23:3e:64:25:4e:aa:c3:03:bb:c7:67:52:3c:82:5f:61:4c:41:
d9:0c:91:1d:80:f6:8f:d8:f8:67:9d:58:73:05:03:bb:04:ec:
e2:fa:cd:8a:5c:ec:78:fa:b3:bb:cf:5e:65:08:e3:90:8d:51:
64:6a:6e:e7:1f:f7:d8:71:4d:9b:6b:90:44:0e:9d:f7:b5:2e:
16:95:f4:ce:89:7a:b6:2d:19:8d:89:32:5d:da:1c:92:e0:79:
f7:74:dd:e1:a2:46:28:2e:95:46:cb:51:8e:41:53:e5:b3:42:
b1:a9:fc:d6:c0:cf:6d:8d:c0:88:71:e4:fd:68:1d:13:a3:87:
53:69:44:58:58:fa:83:ae:09:6a:60:03:c7:09:77:0a:3d:c3:
8f:b8:79:d9:17:14:c7:b9:dc:29:fd:90:3f:93:fa:41:4c:1b:
eb:46:80:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:39:10 2026 by rpki-client