Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
File: J8Y3pwndvn9iN6-NWykTtCI3FXw.mft (raw, json)
Hash identifier: 3ovS7it228ZMIZ3bsdcYhj2tTePipHkGgiFPtaP/Zm8=
Subject key identifier: 4D:27:DB:68:36:32:0C:BD:C8:9D:88:2F:DE:87:59:9C:5D:EC:5B:A7
Authority key identifier: 27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
Certificate issuer: /CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Certificate serial: 019D382E2B10205858862B00F40D4A674AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
Manifest number: 0F85
Signing time: Sun 29 Mar 2026 06:00:42 +0000
Manifest this update: Sun 29 Mar 2026 06:00:42 +0000
Manifest next update: Mon 30 Mar 2026 06:00:42 +0000
Files and hashes: 1: 4oS7f5aNMThyZTin7FlnkmNfcnM.roa (hash: Rq3EvqTLDbExRBsoliQM1/05zLN71ScvdftpfuJDfm0=)
2: J8Y3pwndvn9iN6-NWykTtCI3FXw.crl (hash: +C49ubmfvgvR6318Uw9iuMVdmQsDBQfIQZaSbt4rwk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:2b:10:20:58:58:86:2b:00:f4:0d:4a:67:4a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Validity
Not Before: Mar 29 06:00:42 2026 GMT
Not After : Mar 30 06:00:42 2026 GMT
Subject: CN=4d27db6836320cbdc89d882fde87599c5dec5ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:de:d1:41:31:c4:11:00:07:0f:9b:77:44:f1:
e1:ae:e8:78:0e:ba:e6:3a:8b:c5:56:68:0e:a2:31:
53:81:8f:12:0a:51:8f:ba:76:3d:d7:7e:06:74:b9:
1a:f6:25:38:84:e9:a1:90:23:bc:b2:68:fd:8e:dd:
a7:49:6e:4c:6d:63:a6:67:98:22:5a:71:7a:6b:d8:
ab:c9:d6:48:eb:be:fd:30:c5:79:c7:6d:a4:dd:78:
2e:55:47:30:2c:c2:35:65:3d:77:b3:dd:ac:89:de:
d0:81:4c:de:a1:3b:72:cc:a7:26:4d:30:32:8e:1e:
aa:2e:df:93:45:22:8a:29:59:f9:7f:38:b3:73:7b:
aa:c0:89:2d:b5:b7:6c:96:49:f3:60:d6:fa:d8:3b:
11:48:bf:bd:c0:5b:d2:93:e1:6c:74:a4:5e:03:a5:
54:f8:df:40:0a:9d:0e:b0:ba:67:10:b5:b7:2b:03:
dc:72:96:93:ab:ab:77:77:b3:41:61:93:db:43:74:
5b:7b:78:e0:a4:73:d2:84:db:f1:5a:59:c4:d6:4a:
45:8d:38:14:fc:f2:e5:b6:86:62:3f:b5:dd:a2:2d:
20:ff:01:d7:5e:33:13:92:f0:15:c4:49:24:c9:24:
b5:a9:12:a8:d0:15:69:c1:7d:cd:02:c5:68:42:2d:
e8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:27:DB:68:36:32:0C:BD:C8:9D:88:2F:DE:87:59:9C:5D:EC:5B:A7
X509v3 Authority Key Identifier:
keyid:27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f8:69:3e:05:56:2b:6e:f3:91:ae:4d:a7:f7:0d:63:64:46:
33:77:c0:e0:13:1c:44:54:7e:e0:53:e1:be:36:34:51:40:f7:
8d:5a:74:04:af:8f:85:70:44:90:65:68:21:cb:f4:56:3e:62:
b4:01:1f:ec:95:fb:77:b1:55:e6:f2:72:96:ce:27:cd:b3:4b:
5c:2a:22:72:6f:f7:83:98:f4:83:35:28:f0:8d:31:35:1c:7b:
8a:5b:69:41:ad:2b:a6:a0:e9:10:0b:2b:c0:53:84:d6:a9:65:
67:13:58:3f:66:b0:4c:73:0d:ae:37:5f:86:be:6e:2a:be:20:
7e:64:60:9b:7f:d7:a2:d1:44:7d:25:91:8f:e3:8f:2d:72:93:
6c:7d:0d:3f:d7:43:94:e7:fa:28:86:d4:87:14:4e:5a:97:74:
ef:29:7e:40:df:cc:85:8c:aa:7b:92:8c:0e:7b:9f:90:ae:b2:
cf:bc:70:c7:32:ad:02:07:e6:83:62:79:52:94:7e:39:df:ff:
68:fe:c4:44:b4:e1:43:ef:29:71:d6:5c:3f:21:78:23:2b:d6:
f9:06:e6:2a:55:8a:74:e7:de:2b:19:bd:c3:da:fe:9c:d2:d4:
b9:c1:9c:27:51:a2:a7:aa:db:2b:16:71:9d:d5:35:cc:9d:81:
20:71:6f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:15:18 2026 by rpki-client