Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
File: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft (raw, json)
Hash identifier: LrsDS+++qFc/vZfFHeK9vai1ZUBMVMDTpTnIZmDEP4I=
Subject key identifier: B4:D7:35:1C:82:BE:2A:81:37:8F:2B:17:CC:24:31:C0:88:CC:FA:96
Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
Certificate issuer: /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Certificate serial: 019F1153206992426BBAFEC0851B578D861E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
Manifest number: 13EA
Signing time: Mon 29 Jun 2026 03:01:28 +0000
Manifest this update: Mon 29 Jun 2026 03:01:28 +0000
Manifest next update: Tue 30 Jun 2026 03:01:28 +0000
Files and hashes: 1: BgYFyQZlOVoVNE_xGRhrUlUnKkE.roa (hash: iTNaRaBxLjNxBBzzpY+C9jdK8pNm57Hs3Z5CDJ3xboY=)
2: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl (hash: f7rYOIuv7JSQjWcNqhXngRTBGlh8o/p9lX+EbQYb8Jc=)
3: olxc0wwaCx3ZS0IyubnBirv7nJc.asa (hash: gFjGd2p/+A4+aazMMxaIfHxnVYFhIuYNkCD+v7nOd/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:53:20:69:92:42:6b:ba:fe:c0:85:1b:57:8d:86:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Validity
Not Before: Jun 29 03:01:28 2026 GMT
Not After : Jun 30 03:01:28 2026 GMT
Subject: CN=b4d7351c82be2a81378f2b17cc2431c088ccfa96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cc:c4:4e:66:99:c8:af:b2:bd:ad:0f:2e:06:
5e:bb:05:d6:e8:1e:48:7c:53:a9:2f:24:54:a6:0c:
5c:5a:63:a8:72:e0:27:9c:b7:96:96:fc:de:48:b3:
7f:70:f9:b9:37:40:8d:88:6d:77:a8:ed:17:98:d4:
d2:33:f1:19:18:9d:e9:02:44:3d:4e:e1:50:50:9e:
38:77:fe:37:15:f0:da:1e:34:67:71:1c:ff:82:0c:
12:01:09:36:ad:3c:71:27:ad:8a:5a:53:88:83:ab:
71:71:a7:9b:da:f2:2a:cc:a5:21:fc:3f:22:76:ec:
2d:dc:3f:aa:48:3a:91:74:35:6b:b3:84:c9:5b:17:
03:1d:66:4d:af:6c:f0:2d:1e:28:27:83:ff:51:33:
3e:4e:37:6c:c1:d7:77:de:85:57:92:be:72:1e:cf:
5b:a0:3c:c0:42:c9:36:90:f5:5c:57:cf:25:18:8d:
bd:f4:89:6c:38:04:42:15:36:ea:10:7f:1a:05:0d:
33:b5:5b:9c:5e:16:12:2b:95:9d:28:2f:85:ea:d0:
d7:42:5e:32:c3:b7:5a:99:8b:99:00:fa:65:70:fc:
e1:fa:7f:0e:e6:48:81:83:c8:44:a1:28:da:3e:37:
29:39:39:84:46:ff:27:47:17:0f:9a:08:4c:6c:d8:
41:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D7:35:1C:82:BE:2A:81:37:8F:2B:17:CC:24:31:C0:88:CC:FA:96
X509v3 Authority Key Identifier:
keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a2:49:f9:54:3f:a1:82:84:71:84:6d:7a:7a:ea:e7:dc:71:
25:39:c9:52:0f:f4:a2:58:1e:f5:67:c3:2d:b0:e4:9d:06:7e:
04:82:8f:ec:3d:61:47:b9:e5:76:eb:78:28:2d:dc:79:6a:9a:
de:ab:24:94:f4:a9:6a:d0:4e:04:63:1e:99:08:5d:e1:73:9b:
a3:ca:3c:b1:80:88:7e:d0:ef:0b:72:51:5a:a4:a9:74:52:2d:
0b:84:8f:3a:ed:19:6d:f2:5f:00:3e:f2:ba:cc:53:cb:6a:16:
87:f6:45:21:f5:a8:c2:5d:2f:23:b9:e2:15:1f:d6:de:6c:a9:
7d:31:ea:32:8e:fe:ac:a3:40:d3:96:db:e9:91:db:03:f7:34:
ca:89:ff:a0:65:86:39:42:fc:5d:0d:b8:37:cd:aa:e6:e3:97:
16:d7:aa:9e:7c:b5:ba:69:4a:8e:fd:5c:39:31:0d:63:36:01:
89:01:50:96:21:64:f8:07:42:1e:10:4e:11:24:47:b0:37:c3:
63:7d:5d:05:29:30:76:f1:e2:0c:bf:0e:e8:5a:f6:95:da:52:
cd:88:a8:b2:7a:46:9c:80:13:b8:a0:ae:90:82:06:5d:71:82:
e6:ce:a5:c3:6c:3b:41:95:55:69:ae:67:0e:8b:81:12:aa:fc:
97:b4:16:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:44:10 2026 by rpki-client