Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
File: J5M1a3LBBBztecoRRZUreMtGb8A.mft (raw, json)
Hash identifier: 5q3rk129khwvtGWjLTevZYQtSeakdtJM3St9zkI12BA=
Subject key identifier: 43:61:4B:87:4E:5A:E9:7A:1A:B7:35:64:CD:8B:3E:03:80:B3:31:B9
Authority key identifier: 27:93:35:6B:72:C1:04:1C:ED:79:CA:11:45:95:2B:78:CB:46:6F:C0
Certificate issuer: /CN=2793356b72c1041ced79ca1145952b78cb466fc0
Certificate serial: 01A0E551122777B4C5DF7467232411D5722B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
Manifest number: 01BC
Signing time: Mon 28 Sep 2026 00:01:30 +0000
Manifest this update: Mon 28 Sep 2026 00:01:30 +0000
Manifest next update: Tue 29 Sep 2026 00:01:30 +0000
Files and hashes: 1: J5M1a3LBBBztecoRRZUreMtGb8A.crl (hash: hHhSvdwYGbTAS7G1NBiMxLpvs21rMSU1DC+7Q3wiLrw=)
2: iXFt1KY0aqsyx-9Vdc9e4RKOA5Y.asa (hash: UPxLBpOmrMbXDNQ7hogNRA77L99FxDK6/MOEI7JjMOY=)
3: nqLy6vXc7QJkT8qVeO-NeJ41RTQ.roa (hash: UPdkXkVzcf45jUKtURLaO9b8juj9XHNGGiuikA8ZS84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:51:12:27:77:b4:c5:df:74:67:23:24:11:d5:72:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2793356b72c1041ced79ca1145952b78cb466fc0
Validity
Not Before: Sep 28 00:01:30 2026 GMT
Not After : Sep 29 00:01:30 2026 GMT
Subject: CN=43614b874e5ae97a1ab73564cd8b3e0380b331b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:56:b4:ad:c1:c0:e8:60:eb:ca:20:5d:00:2d:
c8:21:20:de:b3:71:05:86:61:59:62:16:0d:81:12:
0b:01:2f:e0:d9:8c:df:96:d0:a4:f2:39:9e:6d:76:
7c:1b:b2:d4:5a:57:42:5c:55:a4:e4:51:a9:3a:61:
39:77:f3:4d:e5:91:ee:f7:81:69:c8:af:ae:c0:76:
12:2f:a7:78:e5:c8:84:72:6f:b4:13:de:d6:4d:8e:
b0:1d:fa:8e:45:f9:9a:f0:03:ff:3c:27:0e:95:ce:
ee:28:29:97:c6:fd:87:10:77:a8:31:38:d3:6f:0f:
0b:16:92:49:52:8e:6c:2e:ac:d6:07:26:6b:11:14:
e8:2f:34:47:f9:b7:d5:89:cd:70:51:a4:c3:ba:0e:
c2:d4:15:95:37:c8:36:4b:27:3d:92:73:a3:98:b1:
c1:ba:69:33:99:e9:57:ce:c2:8c:c8:f3:f7:54:17:
35:8a:54:53:da:ae:dc:7f:19:40:7b:46:b3:ca:52:
c9:4c:98:7c:14:3e:e7:70:31:00:a2:6f:5e:4f:ae:
92:98:32:36:c3:7d:0f:71:21:f1:f3:ae:34:30:de:
e7:d9:3c:eb:8a:f6:b4:fc:10:0d:f1:fc:8f:18:73:
60:da:19:66:f4:5f:05:ed:42:44:6e:64:05:a9:27:
2a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:61:4B:87:4E:5A:E9:7A:1A:B7:35:64:CD:8B:3E:03:80:B3:31:B9
X509v3 Authority Key Identifier:
keyid:27:93:35:6B:72:C1:04:1C:ED:79:CA:11:45:95:2B:78:CB:46:6F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b0:05:02:43:40:0f:89:90:81:3d:04:79:fa:3e:27:d0:98:
3a:39:eb:d3:b6:e2:c3:65:42:5b:67:b3:35:cb:18:7d:5f:72:
c4:e5:75:a2:7f:73:3e:c7:98:c7:97:b2:6f:d6:c0:45:9d:31:
d1:55:33:f9:70:b4:b1:e0:9b:c9:38:86:94:2c:b9:00:02:4f:
82:c4:45:97:b1:64:95:23:1a:99:65:f0:f7:a5:ab:2e:cb:dd:
53:80:95:41:ef:cd:3e:1e:ed:4b:fe:11:a6:c7:6b:c2:02:7e:
3b:1b:f1:ab:94:84:ba:1b:b6:32:a9:95:d6:64:7e:a0:66:f0:
ea:24:97:38:48:d9:40:b5:8e:28:1d:0e:25:6d:81:cd:97:f9:
4b:07:ea:0d:7c:90:07:d1:02:af:65:7b:87:8b:23:e3:c4:43:
e3:48:03:8c:ff:60:b8:70:bd:d3:c3:78:45:df:e7:c3:d5:15:
5d:6b:9d:59:9e:ed:bf:f5:3e:02:f9:2a:8c:a1:52:78:e3:b7:
da:1f:22:de:47:63:7a:c6:73:f1:37:82:15:09:da:4d:fd:63:
87:0f:61:63:87:cb:99:85:41:b9:73:a0:24:04:8a:60:20:6d:
5d:c9:59:80:fa:12:4b:c4:84:2d:ab:d7:04:d1:60:bb:54:e5:
db:0a:84:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 03:47:28 2026 by rpki-client