Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
File: J7irrCClmMyksS9ddV2OiTIfTsk.mft (raw, json)
Hash identifier: 3TLotse2pvfO05rHU4Ox/Jnxz1FtXBK//ocx7zQAQOg=
Subject key identifier: 54:5B:F8:5C:CE:F6:52:A8:B4:93:7A:14:59:E5:DE:8A:B0:68:0A:94
Authority key identifier: 27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9
Certificate issuer: /CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
Certificate serial: 019D39413A992FFB9860D0B128316022E05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
Manifest number: 1205
Signing time: Sun 29 Mar 2026 11:01:09 +0000
Manifest this update: Sun 29 Mar 2026 11:01:09 +0000
Manifest next update: Mon 30 Mar 2026 11:01:09 +0000
Files and hashes: 1: EXA4SpEwX1vQWpFirH7mk4IJU8M.roa (hash: Lyc+y0k9pCkViy1JNMhW8hiC3bm7cXEkAowTAltTXTA=)
2: J7irrCClmMyksS9ddV2OiTIfTsk.crl (hash: AABMDTdGwW91M2W4WdBxgG1nocvrm55OuVS7lZ4D+XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:3a:99:2f:fb:98:60:d0:b1:28:31:60:22:e0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
Validity
Not Before: Mar 29 11:01:09 2026 GMT
Not After : Mar 30 11:01:09 2026 GMT
Subject: CN=545bf85ccef652a8b4937a1459e5de8ab0680a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:f6:5c:db:7b:1d:37:8d:9b:f1:de:99:55:
94:2e:4d:84:e9:8a:ed:64:2d:a3:ff:05:be:88:69:
f8:31:a6:d5:e1:da:76:80:2b:2f:f7:23:57:07:b5:
5e:75:33:c8:df:3c:04:d0:98:06:c6:c8:7b:6b:7f:
b2:04:f9:5e:6a:5b:80:be:9b:f2:c1:0d:df:0a:95:
56:83:4b:11:65:9c:90:e3:86:eb:98:24:c1:c8:42:
e7:df:b8:76:0d:21:14:03:01:a7:d8:ad:08:00:db:
0e:7d:52:c8:0d:5e:91:77:cd:f4:9e:5b:eb:1d:ca:
ad:c4:08:ab:c9:c4:2c:31:7a:a2:29:2a:e4:b5:5f:
a0:5a:43:45:66:e8:a5:db:be:02:3c:77:63:b8:0f:
f8:30:4d:41:d5:d8:8f:1e:64:98:a0:72:26:98:60:
2e:57:c5:a0:04:22:cf:d7:ee:d2:87:f6:39:17:65:
e9:92:38:b3:6e:75:a4:e0:07:b4:0d:19:14:90:aa:
b3:16:b1:41:d2:3c:80:2c:5c:24:a4:32:fc:1d:39:
29:26:c6:dc:64:94:86:02:01:ce:c9:0e:fb:e6:b8:
c5:f6:d2:b3:9f:95:eb:50:78:19:ba:33:11:c1:09:
3f:74:a1:c1:8f:25:40:f0:96:3c:92:f7:91:ea:d4:
25:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5B:F8:5C:CE:F6:52:A8:B4:93:7A:14:59:E5:DE:8A:B0:68:0A:94
X509v3 Authority Key Identifier:
keyid:27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ae:b0:f5:f9:6d:f4:f3:24:99:2d:76:62:07:12:2d:bc:4d:
f7:87:6e:6d:d1:85:ad:14:a5:cf:8b:e0:5f:21:af:1b:b8:52:
d8:45:bc:38:2f:3e:4d:d2:ff:27:01:07:e9:6a:ac:bf:8d:3e:
6d:b3:80:aa:e1:d0:e3:9f:29:d0:bb:33:53:e7:49:01:49:ec:
85:f6:d8:1b:24:1f:8c:c6:fb:a3:b7:56:24:c5:bc:a3:af:34:
c4:26:77:1f:94:29:ff:4d:1b:c0:e6:58:5e:c7:d0:94:fb:b7:
06:12:82:48:f9:2d:9e:c2:2f:ac:c6:83:fe:53:c3:f8:d6:ce:
52:60:78:f0:5d:e8:d7:9b:2f:15:bd:7e:87:db:29:d9:df:ae:
95:f0:a0:18:04:5a:ab:e1:92:01:4d:34:1c:1b:45:64:f8:91:
fa:32:33:f4:4a:20:8a:d0:28:f7:bf:0d:ba:ce:3f:ec:e7:aa:
b6:18:d8:00:3d:00:e9:de:08:40:b3:bf:b7:b0:15:f0:cc:43:
0a:27:24:d8:a7:74:c7:ba:73:59:78:07:8b:de:20:b8:f5:94:
60:a5:27:8a:cc:79:1f:ab:31:df:ca:fb:a9:10:d2:9c:e2:bb:
0d:04:b4:7c:d9:65:be:cd:e7:e0:4e:2d:7c:f9:fa:6f:ac:91:
7f:80:3c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:19 2026 by rpki-client