Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
File: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft (raw, json)
Hash identifier: 92n1pjQLnHBlNFdkbRMcYyamXNO791ny5qKCT9Fd414=
Subject key identifier: 35:1D:8B:72:2A:AF:E3:F1:3E:A3:F3:98:6A:FB:2B:EC:3E:48:3D:97
Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443
Certificate serial: 01A08B30F022E3C9C368A3B1526CA4D369B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
Manifest number: 156A
Signing time: Thu 10 Sep 2026 12:00:35 +0000
Manifest this update: Thu 10 Sep 2026 12:00:35 +0000
Manifest next update: Fri 11 Sep 2026 12:00:35 +0000
Files and hashes: 1: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl (hash: jC+aUNtLYuSi4anPcDxP+uLOgPvBETt3IQ/tJKEZKxg=)
2: hWkmko9vUlZH-VtlGHJ4hUuAaoY.roa (hash: WFu8HTGZdnXJYLpBmsk/WG3sNIIitKWRuo38WyAjDOU=)
3: rHfKeO-9l9W24wGxoHPVca3O4oc.roa (hash: DOnDxDR60+CHvKP7QQ/+3OYee8LrWlLSO/yOlx6md0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:30:f0:22:e3:c9:c3:68:a3:b1:52:6c:a4:d3:69:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443
Validity
Not Before: Sep 10 12:00:35 2026 GMT
Not After : Sep 11 12:00:35 2026 GMT
Subject: CN=351d8b722aafe3f13ea3f3986afb2bec3e483d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:37:e0:58:d2:8b:95:65:4e:f2:5f:14:5e:
9b:5b:14:45:38:6f:90:b9:1c:16:9e:f3:e8:e0:e2:
1e:26:5c:18:df:09:de:68:1a:26:33:c4:1c:7a:03:
23:24:de:04:3b:2a:66:29:9c:fd:e1:63:f1:69:e1:
cf:38:ec:a2:85:f2:07:8d:68:4f:97:9f:dc:28:3f:
b7:fd:6e:6a:47:2f:7d:4d:d0:02:c1:5b:40:0c:1a:
31:62:2e:05:51:2f:2f:66:b6:65:c2:51:88:ba:bf:
4c:cc:5e:5a:33:b4:37:2c:ab:a9:82:1b:1e:93:47:
ab:38:e6:18:09:57:df:14:82:c6:f5:1f:9b:d1:f2:
ff:9c:2f:24:32:9b:db:10:d6:fe:bf:59:3a:ed:84:
dd:32:3a:f3:8a:ad:7b:fb:71:c1:29:d9:a7:21:1a:
63:86:9f:59:45:6a:a4:f3:a2:79:70:d7:39:f4:0c:
0b:84:dc:3c:d8:b2:8d:79:df:c4:7e:3c:8e:01:00:
8f:ee:a3:8b:20:f4:35:b8:4e:42:ed:58:5f:d6:2b:
6f:4c:30:81:c7:c1:7c:85:14:68:59:a3:0a:ae:ed:
42:c8:27:e5:bf:8e:db:09:c9:22:b2:78:dc:ea:16:
18:ce:76:d6:ba:1d:75:1b:62:db:b6:cc:ee:fc:cf:
bf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1D:8B:72:2A:AF:E3:F1:3E:A3:F3:98:6A:FB:2B:EC:3E:48:3D:97
X509v3 Authority Key Identifier:
keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:18:11:f6:35:fe:1a:53:a5:8f:10:07:11:ee:41:ac:ee:33:
89:04:ba:a4:4d:9c:5f:e7:c1:40:1c:19:b6:9e:dc:4b:f3:a7:
4a:0d:d4:63:14:d6:4e:07:b4:ee:f8:87:b2:90:c1:fa:ef:d7:
63:00:cf:26:8a:a1:4f:58:47:f7:b6:db:56:df:2f:0f:57:91:
5f:e2:62:24:b2:83:ae:a9:16:f8:2c:6a:ee:d4:12:e9:3c:16:
a3:79:b5:26:1b:8e:5b:26:9a:7d:e8:b7:b6:8f:b9:b4:8b:05:
e0:f7:54:1a:76:42:25:91:81:45:d8:80:2b:9d:66:0f:20:2f:
fb:b7:ef:2f:25:75:7b:85:a5:dd:df:0f:21:2c:de:d2:05:b8:
b6:1a:8c:f9:6e:29:78:0e:1a:af:ba:aa:61:40:46:47:48:26:
41:a7:ea:2e:ed:20:7a:04:6c:69:3b:9a:2c:8c:58:d7:0d:15:
9c:8e:1f:03:33:6e:e8:40:72:10:29:88:4b:7c:98:55:d6:fb:
cf:73:f2:a1:7a:26:1f:b3:65:11:cf:30:a4:3b:18:89:87:17:
48:c8:21:ab:80:d4:8a:1d:18:2d:7e:8c:d1:83:f1:e4:48:2d:
f5:b7:d7:b6:af:10:d1:cb:37:20:28:d1:3b:55:cf:4d:b9:83:
8f:3a:ad:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:15:08 2026 by rpki-client