Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
File: J4dqqRe20B2U_yVmKwj7IT8P570.mft (raw, json)
Hash identifier: RcOaddi9cDlmEJbjpR3w0hRhBLV7XhpkF5hHEaA7nRY=
Subject key identifier: 81:27:E7:56:1C:D0:16:59:BE:49:8F:16:8A:60:F7:01:98:56:A0:04
Authority key identifier: 27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD
Certificate issuer: /CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd
Certificate serial: 019D3A1CEB2596330AB039677733F69A5E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
Manifest number: 121C
Signing time: Sun 29 Mar 2026 15:01:06 +0000
Manifest this update: Sun 29 Mar 2026 15:01:06 +0000
Manifest next update: Mon 30 Mar 2026 15:01:06 +0000
Files and hashes: 1: J4dqqRe20B2U_yVmKwj7IT8P570.crl (hash: ZOvBRSOTTs4A7eokRgQN3gkoAem6+USER2tV6QDeaAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:eb:25:96:33:0a:b0:39:67:77:33:f6:9a:5e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd
Validity
Not Before: Mar 29 15:01:06 2026 GMT
Not After : Mar 30 15:01:06 2026 GMT
Subject: CN=8127e7561cd01659be498f168a60f7019856a004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2b:d7:11:ef:c6:ac:e8:62:0a:de:9b:71:ba:
06:a6:e1:a6:32:37:84:ad:5f:d0:bd:45:e6:06:7c:
33:3d:24:61:64:ff:10:37:b2:f4:40:45:d2:ec:75:
3f:a5:33:0b:ea:4a:b2:db:cb:b0:5e:2f:4c:af:c8:
83:c2:9c:f7:cc:98:7b:74:0b:c2:81:c4:65:8d:d4:
4e:15:73:cd:ba:52:0a:cf:e8:0c:79:30:17:54:e1:
f8:dc:55:2a:eb:a3:36:f6:e2:b3:46:9f:46:6e:82:
bb:bd:bb:5f:27:32:02:5c:e0:e3:77:53:59:11:f3:
28:4f:b2:4c:4c:75:a9:e7:8c:0a:33:43:55:26:f2:
3a:83:90:7c:08:42:1f:0c:fe:6a:dc:d6:1b:78:73:
c4:1b:c4:76:8f:cc:16:b5:7b:d1:8f:92:53:e0:0d:
0c:fb:e1:d4:1a:a5:89:04:1b:23:21:2e:76:3a:f4:
d8:55:7f:de:c3:5a:3f:5a:cc:73:97:b3:3c:66:6c:
64:3e:2e:61:30:19:b9:e7:36:6c:88:33:36:91:54:
c8:a0:fe:37:89:af:0c:75:d6:22:35:b9:1f:0e:2b:
12:72:1c:c8:8b:e6:fb:84:43:c8:40:0c:f3:f5:bb:
63:25:69:ac:45:1b:94:56:13:c5:46:16:3d:04:fb:
98:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:27:E7:56:1C:D0:16:59:BE:49:8F:16:8A:60:F7:01:98:56:A0:04
X509v3 Authority Key Identifier:
keyid:27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:87:c6:14:23:59:8f:52:34:e1:0a:ec:49:76:14:8e:44:13:
81:02:26:d6:b8:53:63:58:33:3d:b1:87:d0:c3:2c:53:8a:35:
5e:dc:b7:65:90:77:54:5c:7e:66:1c:0f:e7:fe:5e:d5:ac:11:
e4:fa:1b:5e:da:31:50:9d:10:4d:78:12:7e:63:0c:1c:56:40:
b3:3d:ac:94:67:4f:44:68:97:ad:b7:85:29:43:c1:b0:58:07:
e6:4b:1f:9b:95:cf:a2:ff:bb:be:04:0d:97:4d:ed:d8:fe:85:
11:b9:f3:77:8a:e7:86:0a:a6:38:00:d8:3b:65:66:fd:35:93:
6d:65:e1:84:4f:e0:26:ea:8f:de:03:18:a3:73:84:34:85:ef:
9b:f4:23:86:a1:37:fc:e6:26:e4:7a:38:23:c5:f2:eb:f4:34:
db:d7:1f:e6:f5:3d:c9:39:92:d5:3c:aa:dd:70:48:40:db:56:
21:49:bc:c2:ea:af:65:af:b2:1a:21:c2:78:e8:e0:12:db:ac:
a3:f7:fc:2b:2d:43:de:12:6a:ee:8a:63:ae:e3:cb:2f:3b:64:
1e:b4:2f:e0:e0:8b:90:00:0e:51:89:e9:24:cc:63:bf:60:4a:
d8:15:91:57:88:82:2a:05:96:5a:03:84:ff:3b:e3:98:d4:a3:
13:0a:82:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:21 2026 by rpki-client