Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
File: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft (raw, json)
Hash identifier: sknRzbAQdFyee/3Ev2zH6JeNp06E88QX6udOn1iNfEs=
Subject key identifier: BC:A8:C2:8B:5D:D5:8E:09:8B:CC:5B:AA:EF:6A:02:AB:2A:A4:E3:7A
Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443
Certificate serial: 019D3977ACE89A3256A040469DB3236CE237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
Manifest number: 13B2
Signing time: Sun 29 Mar 2026 12:00:37 +0000
Manifest this update: Sun 29 Mar 2026 12:00:37 +0000
Manifest next update: Mon 30 Mar 2026 12:00:37 +0000
Files and hashes: 1: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl (hash: nCSLckJI9ZVE/LJvRxg8zrXGDxRqlcXenSgc67DTOXg=)
2: hWkmko9vUlZH-VtlGHJ4hUuAaoY.roa (hash: WFu8HTGZdnXJYLpBmsk/WG3sNIIitKWRuo38WyAjDOU=)
3: rHfKeO-9l9W24wGxoHPVca3O4oc.roa (hash: DOnDxDR60+CHvKP7QQ/+3OYee8LrWlLSO/yOlx6md0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:ac:e8:9a:32:56:a0:40:46:9d:b3:23:6c:e2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443
Validity
Not Before: Mar 29 12:00:37 2026 GMT
Not After : Mar 30 12:00:37 2026 GMT
Subject: CN=bca8c28b5dd58e098bcc5baaef6a02ab2aa4e37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:ea:9d:7a:fc:0c:7f:c1:75:de:46:49:16:
4a:17:27:43:0c:f9:bf:7f:c4:22:4c:e8:c4:4e:b8:
6b:e5:e0:d5:23:c9:0a:d7:84:1e:cb:62:fe:dc:e4:
9e:32:33:37:58:f9:33:e9:65:c7:f8:f6:84:0e:43:
fe:d1:a4:dc:44:9f:eb:97:09:63:48:cf:bd:1c:00:
d1:ad:ce:e1:66:fb:1c:cc:5b:84:69:74:6d:44:c4:
11:8a:58:78:20:69:3f:9d:4e:92:46:b2:f3:df:d0:
97:f9:00:6b:36:02:ae:12:ce:a0:55:bf:b5:6f:09:
b0:af:93:f7:db:e6:64:e5:18:35:7e:b4:cd:63:7b:
f1:6f:15:fc:5d:88:d0:c4:da:53:69:7c:cd:47:c4:
d2:9b:10:86:4a:f4:42:c5:f4:e5:d2:25:a1:40:30:
0a:dc:7b:fe:4d:1b:0d:92:86:f4:e4:4e:bc:fb:93:
1b:18:3a:e5:1b:e3:19:ec:e0:d8:49:19:61:0c:54:
13:b5:82:35:68:39:3b:48:06:36:8f:c7:68:b0:2d:
48:94:2c:06:57:ef:ff:a8:59:5b:11:a9:0c:d5:f8:
5e:0f:5e:8d:dc:1a:3a:da:bf:71:d2:e9:46:24:83:
4a:07:5a:06:ff:08:8b:7c:70:f6:c4:7f:6e:ab:3f:
5e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A8:C2:8B:5D:D5:8E:09:8B:CC:5B:AA:EF:6A:02:AB:2A:A4:E3:7A
X509v3 Authority Key Identifier:
keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f8:80:57:e2:54:cd:92:82:1f:45:2e:6f:0f:8d:d5:b1:4c:
10:f8:e2:69:44:52:3e:9d:ff:fb:75:8a:ac:3a:b8:73:5b:6f:
29:d8:c5:ca:8d:db:b6:ac:75:0b:08:97:26:db:6f:b6:40:e5:
82:5d:a2:3c:5f:73:98:6d:d5:d9:38:10:f7:e9:9c:0c:cc:c4:
47:6f:0d:52:26:68:45:62:48:d6:7d:ac:59:0f:df:0e:76:17:
95:3b:48:03:f0:2b:2b:fe:dc:43:11:31:84:e0:d7:ca:1b:10:
4a:70:ed:5c:65:75:d6:02:0a:aa:e5:a2:ca:21:4d:ac:a8:a1:
79:78:df:13:3f:0b:b3:cd:fe:5d:a0:6c:76:b2:46:0f:83:57:
eb:fd:5d:30:c6:97:51:fa:b7:be:0f:5b:29:bd:5d:5d:65:a2:
56:99:23:da:e3:a5:97:44:8b:bf:2b:2a:fe:32:63:63:1e:96:
5d:42:82:47:3b:e2:c5:77:ba:8e:ec:d3:0e:aa:f7:cd:66:48:
8c:05:36:ad:8c:cd:da:9e:fa:89:79:e8:dd:1a:f5:87:66:9a:
ae:c1:7c:12:11:48:78:5f:e9:07:2f:84:23:1c:1c:dd:8d:5e:
b6:0a:36:dc:a2:c0:cc:c6:af:7a:b2:9d:08:b5:3e:0d:7d:82:
21:96:8a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:25 2026 by rpki-client