
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
File: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json)
Hash identifier: XZ9BvAva3Ou7XiewQnFCkLS4quS7zTxxjF4LadV4xvY=
Subject key identifier: D0:4A:59:D9:A6:45:1C:1A:DF:E1:45:CB:D6:97:3E:5A:6B:A7:D5:B6
Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249
Certificate serial: 019E326082E05222E38676619B2E2A593C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
Manifest number: 176B
Signing time: Sat 16 May 2026 20:00:46 +0000
Manifest this update: Sat 16 May 2026 20:00:46 +0000
Manifest next update: Sun 17 May 2026 20:00:46 +0000
Files and hashes: 1: 6H-9AoNqSrBI_cHU_8jwycSpvuQ.roa (hash: KiQDrwuKHeqxHDHuFUTDtaD1ZiwMGGrMOy/IRx+eThE=)
2: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: r52izCb4bCeP3c7n22Zkxa+c8uaCqDuCYA+dqB1eSi0=)
3: _zWse9VeR2Ks8Tmud0pKUxt54Rs.roa (hash: nVGx0eRXA+P6cmYQPgwiiD4iTa2vIfOtyuiTU3+mtfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:60:82:e0:52:22:e3:86:76:61:9b:2e:2a:59:3c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249
Validity
Not Before: May 16 20:00:46 2026 GMT
Not After : May 17 20:00:46 2026 GMT
Subject: CN=d04a59d9a6451c1adfe145cbd6973e5a6ba7d5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:50:56:60:f6:49:b8:7c:ef:d5:be:27:1d:71:
a4:c3:28:17:37:f8:c7:3c:d0:c4:f7:ea:dd:fa:87:
ce:08:e9:71:ae:93:af:71:f6:71:f2:82:5d:8a:db:
99:4b:e4:79:a5:61:e2:e7:40:d9:d2:b6:e3:6e:6c:
40:6d:6e:f1:08:c5:97:a8:7c:2a:cd:84:a2:8e:9e:
6d:b8:a9:97:95:ac:46:65:79:6c:9a:01:a8:d6:c8:
c1:0a:ae:11:50:aa:03:63:60:30:12:75:85:97:c8:
e2:57:a8:f1:67:b9:a4:23:16:d8:86:72:36:c1:d4:
34:7c:80:0d:70:fd:17:04:87:2d:e0:43:1c:c9:e7:
e2:0e:45:bb:05:26:df:b9:72:49:2c:62:b9:43:41:
e5:14:67:d9:5f:89:f6:c4:db:2c:ff:10:a7:09:46:
05:78:21:8f:a7:72:2a:0b:68:6f:d5:ea:52:d6:4a:
be:40:de:3d:a7:2e:f5:80:be:1d:bd:dc:36:a0:98:
f7:9c:4e:1f:4b:ce:b7:59:e5:0c:94:dd:94:11:5f:
28:ce:21:e7:b2:78:44:ad:83:0d:0f:f7:91:01:2d:
99:75:f3:01:2b:2b:ed:2c:12:c0:f9:cc:98:e0:a8:
cb:7d:05:80:0a:b3:6d:7f:e9:97:bf:53:71:7a:c2:
bf:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4A:59:D9:A6:45:1C:1A:DF:E1:45:CB:D6:97:3E:5A:6B:A7:D5:B6
X509v3 Authority Key Identifier:
keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:fe:1f:63:47:02:cb:78:42:c2:a8:4e:0e:b8:0f:98:18:be:
d0:6c:51:69:9c:e0:f6:97:51:6f:e8:f1:de:58:74:5f:94:aa:
82:ed:1f:6b:19:eb:2c:93:d8:85:54:7c:85:37:b6:b4:5e:c5:
c8:e2:a7:f1:c7:6a:30:c5:95:cd:b7:f4:e8:a9:a7:dd:46:7f:
00:c4:a3:d9:fc:98:23:82:67:ad:b5:3a:d6:ba:b7:a3:9b:0f:
9a:89:5a:81:0c:eb:54:02:df:d6:7f:7a:18:d5:f6:a9:8f:93:
14:80:3a:6a:6e:40:07:d0:f3:91:be:36:2a:6e:10:8c:04:8d:
31:1f:3f:61:6b:63:d7:e6:24:22:97:4d:d6:c0:e2:89:40:60:
c8:10:62:24:6d:14:54:8d:d1:b1:f5:47:9d:05:a5:68:be:dd:
a5:3e:59:b3:12:b9:4a:71:b1:30:c3:62:02:74:f8:a4:61:da:
24:0e:32:c1:3b:8c:62:b1:ae:0f:4c:7e:28:d5:41:58:10:da:
a3:40:33:b2:02:80:67:b2:f7:e2:ec:40:4d:d2:0b:db:9b:ab:
92:ef:57:e9:eb:97:a8:68:18:18:30:9e:28:de:6a:f6:d0:a5:
d8:60:7b:c0:12:a2:71:96:45:66:31:a8:1c:5b:e2:1a:fd:00:
fa:be:54:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:56 2026 by rpki-client