Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
File: J-D3u75AMaJO8bnbGWqrBkLoSgY.mft (raw, json)
Hash identifier: QUj7THbfHOsdd3DEoTJxP2CD1nzWZR8aPjj6NJCS7NI=
Subject key identifier: 21:63:FB:FB:35:B4:F3:A7:1C:D3:4B:74:0F:2A:6F:EC:93:6E:DE:1C
Authority key identifier: 27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
Certificate issuer: /CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Certificate serial: 01A187882967CBD27216CD3B862E6B67281A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
Manifest number: 1ACC
Signing time: Thu 29 Oct 2026 12:00:09 +0000
Manifest this update: Thu 29 Oct 2026 12:00:09 +0000
Manifest next update: Fri 30 Oct 2026 12:00:09 +0000
Files and hashes: 1: J-D3u75AMaJO8bnbGWqrBkLoSgY.crl (hash: lbAdWdzN5Oni+QcR6g71+g6haStcesmUnVfqEhvQbPM=)
2: fH7jpTfOw73ogmMvWrEFRq2Avio.roa (hash: PFBzuOPj54GvMEMM5OOIFBp/nYApNQPXPXoK+zClv8U=)
3: uDCd91-kIRTx4Oler7V-1bWJeEE.roa (hash: MPw5XG6tMFKBuwGKWin9/7K5TyzvM+BrLD5tHi46a6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 12:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:88:29:67:cb:d2:72:16:cd:3b:86:2e:6b:67:28:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Validity
Not Before: Oct 29 12:00:09 2026 GMT
Not After : Oct 30 12:00:09 2026 GMT
Subject: CN=2163fbfb35b4f3a71cd34b740f2a6fec936ede1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:5f:9a:1f:b9:f0:e9:e1:24:46:d8:68:bc:
31:cc:e2:be:c3:47:8a:f0:3e:d2:47:40:0f:a9:79:
90:3f:6c:68:7a:72:19:90:cf:17:76:05:2e:ee:b5:
32:32:3a:a5:cb:1c:20:0d:fe:48:f1:69:ea:5c:99:
7f:16:95:0f:98:a5:ef:62:79:d9:47:b9:24:37:57:
7c:4a:3c:81:4a:d2:01:3c:13:0d:fd:bf:e8:9b:bb:
35:86:53:bb:38:65:bc:b6:f1:9a:98:a1:f2:37:4c:
58:61:f3:fe:78:11:4f:5f:c3:2b:2d:55:7c:0d:b0:
46:b0:0c:21:f3:85:15:8d:c4:54:a0:36:c2:05:74:
1f:57:d0:e7:19:97:4d:c3:10:0b:6c:ec:3b:a0:ab:
9f:12:13:57:3f:88:47:0d:92:38:29:65:8d:71:2a:
40:d2:bf:44:70:d7:6b:76:f2:1b:ab:72:f6:7d:55:
3c:54:58:51:f1:15:dc:74:b9:27:2f:de:31:b3:b8:
8a:43:5d:df:83:0d:d9:ff:c0:29:aa:12:53:98:3f:
03:38:aa:f9:28:e6:bb:5b:7c:27:63:94:cd:57:e1:
bb:f1:5c:45:e0:e0:db:a1:4b:ae:c1:de:11:a5:1c:
2a:7d:5c:ed:5e:5a:12:48:a4:53:65:a4:8a:23:c3:
c9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:63:FB:FB:35:B4:F3:A7:1C:D3:4B:74:0F:2A:6F:EC:93:6E:DE:1C
X509v3 Authority Key Identifier:
keyid:27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:b9:8a:5e:5c:bd:89:69:9f:19:6e:97:b6:bb:65:a9:6a:9f:
e9:1f:61:23:89:1e:7b:7f:bd:c2:66:a8:74:0a:f8:af:99:19:
47:b7:53:0c:8b:c4:54:63:b1:27:c4:b4:7b:69:85:a4:c9:75:
66:cf:2b:ba:c2:97:0a:a0:30:cd:c3:32:ca:a7:a2:97:35:61:
9b:40:66:e5:24:10:8f:c2:42:38:42:d8:0d:60:57:af:73:43:
2a:41:ef:d3:49:14:4f:3f:15:7a:3e:63:09:dd:cd:14:92:33:
b1:ba:58:60:54:8c:bb:08:cb:69:56:6e:77:a4:89:95:a2:b0:
f8:cc:0b:83:14:0c:59:a6:61:10:d1:29:cf:aa:a1:34:e1:a4:
17:26:01:9d:95:7d:7b:65:9a:26:d5:19:d5:e6:ae:72:12:e2:
52:de:9a:c9:6d:b8:37:d9:23:20:6f:4e:74:b8:7e:35:a8:40:
95:ee:ea:e5:7a:93:0a:bd:7c:dd:ab:e3:6c:9a:26:ff:40:29:
0f:d2:3f:cc:bc:79:c1:8f:0e:d7:22:d9:e4:8a:15:bc:be:cf:
8d:29:f8:d4:1a:63:02:33:c2:aa:24:8e:16:42:e1:86:88:06:
88:22:6d:52:b7:d5:08:e0:b4:6b:57:6b:8d:73:6d:82:59:5c:
8f:77:75:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:59:07 2026 by rpki-client