Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
File: J582UuRFj6ABxnOKQUJbB-cMkaE.mft (raw, json)
Hash identifier: 8+E3eqxmCyscYSK8L3V64UwNamsGf6wwbq+S6hvh1xw=
Subject key identifier: 69:07:85:EB:B1:54:43:6D:06:74:90:09:FA:DF:49:E1:2A:F9:86:B7
Authority key identifier: 27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
Certificate issuer: /CN=279f3652e4458fa001c6738a41425b07e70c91a1
Certificate serial: 019D3AC16FBC077234C85A9A7694BB8A673D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
Manifest number: 1509
Signing time: Sun 29 Mar 2026 18:00:48 +0000
Manifest this update: Sun 29 Mar 2026 18:00:48 +0000
Manifest next update: Mon 30 Mar 2026 18:00:48 +0000
Files and hashes: 1: J582UuRFj6ABxnOKQUJbB-cMkaE.crl (hash: KXTVQ2MTG5Wz9KguUTZ1bcg2e/OyhOAuWjnUfvKqbjM=)
2: h53oA3SujEDr4ELckr6UN9W2NOk.roa (hash: EVBN35qoptKAigPRFwoWW6G0+97b+KvRqgyf+bRb3+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:6f:bc:07:72:34:c8:5a:9a:76:94:bb:8a:67:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279f3652e4458fa001c6738a41425b07e70c91a1
Validity
Not Before: Mar 29 18:00:48 2026 GMT
Not After : Mar 30 18:00:48 2026 GMT
Subject: CN=690785ebb154436d06749009fadf49e12af986b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6f:c4:40:0c:9a:c0:76:33:90:f0:1a:48:76:
1f:18:1c:d6:48:cd:36:29:61:0b:c3:df:24:5b:93:
3f:c7:95:e5:9b:e9:48:93:89:0b:6c:ef:4f:e8:a5:
80:4f:10:b7:5b:99:e1:82:5c:8c:f6:bf:e1:76:de:
0a:d9:ec:ab:db:68:f8:a9:ad:2e:3d:5a:42:07:32:
33:e8:0c:dc:af:b1:4e:8a:a6:e4:58:97:85:95:7f:
a7:70:ef:3a:95:d1:8e:7e:ab:bb:1a:72:b0:40:d0:
5d:e7:f0:59:88:90:ce:a3:8f:d9:c1:5a:a9:9b:2b:
47:86:bd:da:85:50:fe:aa:ad:f8:00:fa:5a:d5:3a:
f3:90:c2:bc:4b:33:d7:0f:16:ca:b9:1c:82:a0:64:
58:19:96:bd:42:1c:72:e1:f1:72:55:92:e4:2e:e8:
a0:36:e8:5a:87:c7:40:24:fe:af:6a:1c:16:7b:6d:
0c:f8:e4:e7:89:ed:61:16:3d:77:90:81:18:d3:4b:
ef:bf:cb:d5:cc:b3:d4:56:ef:94:17:17:d3:c1:ed:
00:82:61:ae:5e:1c:aa:8b:ae:6c:d1:6d:53:3b:92:
64:5a:53:3a:8e:c2:c1:7c:19:3b:56:5f:b8:a6:47:
26:e5:2d:5f:7c:a2:03:39:cb:a8:96:2d:b6:29:b7:
1b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:07:85:EB:B1:54:43:6D:06:74:90:09:FA:DF:49:E1:2A:F9:86:B7
X509v3 Authority Key Identifier:
keyid:27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3a:fc:4d:60:c2:47:96:40:77:bf:26:25:4e:a5:2c:0b:c9:
06:16:6f:47:42:c0:b1:e0:4f:16:9a:ac:ff:61:01:76:a3:78:
35:61:3c:97:46:7e:ce:d7:78:89:1c:9a:07:cb:b7:2e:2b:0a:
01:2d:9f:75:0a:ee:89:ca:ae:45:88:eb:ea:d0:54:b7:f6:d9:
4a:a3:45:70:d8:af:cf:b3:64:45:b7:87:3f:89:a5:d1:08:45:
6c:b7:0b:e0:a3:88:ef:2f:bd:32:4d:f9:ee:fc:5b:b9:85:a4:
6f:38:a7:85:f8:da:22:d3:4b:65:71:4d:53:d1:1c:fa:28:aa:
be:9c:87:48:8d:e8:6f:31:62:94:44:c0:23:2e:36:7d:13:6d:
5f:35:26:73:0b:f9:d6:5a:8f:89:45:44:b6:ec:5c:02:13:97:
19:76:26:48:a8:aa:56:18:6c:53:d4:44:cd:1b:7f:67:60:3e:
15:82:66:74:d3:b7:30:b7:f1:46:b7:4f:46:2d:8b:17:03:5e:
9f:1e:78:8e:2e:df:62:2b:61:18:0d:c5:b4:fe:ce:51:81:a9:
95:65:2d:c1:78:7e:6a:09:b9:b1:07:ec:25:a3:c8:96:93:5a:
27:09:dc:63:b3:b9:81:c8:c6:4e:86:19:ee:b2:2a:76:52:1e:
49:73:ae:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:05:00 2026 by rpki-client