Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
File: J-D3u75AMaJO8bnbGWqrBkLoSgY.mft (raw, json)
Hash identifier: yhamDJBQv7RenmqVxkAprMwbGFIuyAAd7y2vO/eehko=
Subject key identifier: 2C:60:CA:BC:F4:84:75:9D:CF:8F:2B:C2:E1:B1:3F:59:18:9E:E3:C1
Authority key identifier: 27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
Certificate issuer: /CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Certificate serial: 019DCF74ED5E15A4D01335111DB20EE72FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 15:00:39 +0000
Manifest this update: Mon 27 Apr 2026 15:00:39 +0000
Manifest next update: Tue 28 Apr 2026 15:00:39 +0000
Files and hashes: 1: J-D3u75AMaJO8bnbGWqrBkLoSgY.crl (hash: v90ewoP+J95Nd4x1SNuTZ4YEJCLyWigEY+9OFhZuogU=)
2: fH7jpTfOw73ogmMvWrEFRq2Avio.roa (hash: PFBzuOPj54GvMEMM5OOIFBp/nYApNQPXPXoK+zClv8U=)
3: uDCd91-kIRTx4Oler7V-1bWJeEE.roa (hash: MPw5XG6tMFKBuwGKWin9/7K5TyzvM+BrLD5tHi46a6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:74:ed:5e:15:a4:d0:13:35:11:1d:b2:0e:e7:2f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Validity
Not Before: Apr 27 15:00:39 2026 GMT
Not After : Apr 28 15:00:39 2026 GMT
Subject: CN=2c60cabcf484759dcf8f2bc2e1b13f59189ee3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c3:59:1a:ff:09:1a:2e:78:c4:db:2c:91:a7:
03:8d:c8:7d:98:82:cf:91:0e:37:41:d8:2e:c7:f3:
3c:65:ac:dc:38:42:2d:c8:1d:77:9a:7a:ab:4a:4b:
61:da:9e:6e:af:45:87:44:dd:1d:95:dd:22:6d:bb:
34:2e:7a:77:df:72:2d:4c:f6:b6:50:ab:fd:4a:c9:
84:1c:dd:81:48:99:73:d6:0b:3e:db:be:0e:7e:4d:
cf:ba:0f:a4:5e:44:b8:84:17:d8:03:e4:e3:3b:6c:
65:69:49:f2:77:dc:74:b1:80:95:9a:16:72:d0:0c:
7d:66:90:53:80:c5:b1:50:21:08:30:dd:1b:21:bb:
f4:4d:e9:1a:a3:42:08:1c:20:c7:04:fa:be:c9:55:
ac:37:4b:8d:9b:31:c7:60:ea:19:9e:51:fa:32:4f:
5b:01:bc:cf:01:b5:c0:e6:a3:7a:ac:06:9d:63:d3:
28:ec:6f:38:5e:58:1a:a2:85:27:2f:02:44:b0:85:
2a:7a:54:8b:d1:af:75:f9:7f:97:ef:1e:75:ca:f9:
f3:64:ff:b2:8e:3a:38:72:95:46:99:1d:ea:52:87:
c4:cb:a4:75:14:32:e8:2d:6f:b4:cb:e3:02:ec:09:
2b:30:63:4a:47:a9:88:60:e5:2e:33:61:51:1e:27:
be:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:60:CA:BC:F4:84:75:9D:CF:8F:2B:C2:E1:B1:3F:59:18:9E:E3:C1
X509v3 Authority Key Identifier:
keyid:27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0d:49:30:ea:a1:62:b7:45:33:60:6b:6e:16:08:c1:32:22:
25:26:ed:df:c0:f4:4d:8f:c0:f9:8b:7e:b2:48:fd:ac:57:18:
23:f6:0c:1e:35:75:7c:6d:a0:2a:cf:e8:3d:52:d3:21:80:11:
a3:75:5f:2b:34:e0:23:bf:40:ca:98:0e:24:8c:84:87:a6:ff:
d6:fe:3f:94:3f:54:3b:2f:57:60:d3:11:77:f6:70:47:91:a2:
87:3d:7d:4f:a4:ef:4d:7c:1d:82:9b:44:fc:7c:15:77:1b:00:
84:e3:96:f5:1f:6f:eb:a7:48:a4:69:ff:91:cb:ee:ef:e7:e3:
ad:b4:c7:bd:1a:ee:39:53:52:89:e9:fe:69:3c:88:d6:31:f0:
21:eb:c8:4c:f5:b0:ff:c6:3d:2c:3c:7b:d6:61:ad:95:8d:47:
90:7d:39:8f:6d:5b:93:9b:0c:1e:81:43:f7:0d:c4:76:ed:ac:
1a:c5:16:4f:58:85:84:25:03:60:8e:cb:10:cd:20:92:3d:98:
42:97:33:27:89:07:03:30:5c:a6:7f:ad:e3:24:27:8c:ed:65:
fd:75:5e:47:c3:8c:25:9f:e5:31:11:f3:11:d5:79:07:d7:93:
4c:14:65:1a:8c:fe:0f:58:b2:50:4d:f3:be:0a:e7:26:97:7e:
a4:6e:63:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:04:18 2026 by rpki-client