Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
File: J-D3u75AMaJO8bnbGWqrBkLoSgY.mft (raw, json)
Hash identifier: HwznQVeFSEsiVwcN1FNGXbxjKMiKG3afzLQFcPEBm+4=
Subject key identifier: A3:8C:54:E0:99:F5:C8:08:0E:39:D7:F0:38:CC:E1:F8:A5:89:CE:E8
Authority key identifier: 27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
Certificate issuer: /CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Certificate serial: 01A17FCF579C04906ED63D9B7D29434186FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
Manifest number: 1AC8
Signing time: Wed 28 Oct 2026 00:00:57 +0000
Manifest this update: Wed 28 Oct 2026 00:00:57 +0000
Manifest next update: Thu 29 Oct 2026 00:00:57 +0000
Files and hashes: 1: J-D3u75AMaJO8bnbGWqrBkLoSgY.crl (hash: o6LfkJL3LiGmNgzwzJpDjB3MxTIt/KseDFy7IvfyWjA=)
2: fH7jpTfOw73ogmMvWrEFRq2Avio.roa (hash: PFBzuOPj54GvMEMM5OOIFBp/nYApNQPXPXoK+zClv8U=)
3: uDCd91-kIRTx4Oler7V-1bWJeEE.roa (hash: MPw5XG6tMFKBuwGKWin9/7K5TyzvM+BrLD5tHi46a6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:57:9c:04:90:6e:d6:3d:9b:7d:29:43:41:86:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Validity
Not Before: Oct 28 00:00:57 2026 GMT
Not After : Oct 29 00:00:57 2026 GMT
Subject: CN=a38c54e099f5c8080e39d7f038cce1f8a589cee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:9c:de:88:d9:71:d1:40:3e:bb:f6:ba:16:
71:55:8c:cf:d9:1c:e6:f6:c8:64:82:7c:04:2b:d9:
ae:3c:ce:f3:e6:ba:59:a6:2d:16:2c:05:a7:41:6e:
a7:c1:5a:87:3c:66:8d:2a:0d:45:0d:82:ae:bb:2e:
d6:52:7b:fd:a5:a8:db:23:12:0c:79:1d:51:0b:11:
08:06:55:48:61:79:45:78:48:67:2e:6a:a1:f7:32:
a1:2c:bb:e1:f1:b3:4c:f5:65:a4:60:ca:4c:ca:9f:
a7:53:b0:7f:c2:ae:4d:5f:9e:8a:e8:8b:34:23:10:
a0:f3:e1:e9:05:b1:0e:1f:96:dc:14:5e:bb:24:d7:
1f:46:6d:68:25:58:95:f1:a2:1c:ce:1e:70:33:c6:
89:42:92:5e:bc:6d:98:f4:2e:d2:4c:fe:63:ef:8e:
87:c5:ac:85:3e:f3:cb:2d:ae:cd:cc:4d:90:05:e2:
51:87:46:74:ce:7c:d4:8e:c4:f0:e1:93:d6:84:a7:
57:de:20:73:db:0f:fd:60:3c:b9:24:fb:b5:48:b2:
4c:cf:9f:47:7b:2d:e9:52:60:73:7f:f7:27:5a:b8:
b7:5a:e7:92:a3:b9:f6:d3:e8:fb:f5:f2:4e:cb:81:
75:ba:af:7b:33:b3:d1:1c:e1:29:33:f5:fc:94:9f:
58:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8C:54:E0:99:F5:C8:08:0E:39:D7:F0:38:CC:E1:F8:A5:89:CE:E8
X509v3 Authority Key Identifier:
keyid:27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:c5:80:4c:06:84:fc:bf:db:a0:aa:14:41:46:ae:24:77:38:
99:61:0f:e6:12:90:25:83:50:05:85:00:23:67:02:23:03:d9:
34:e6:bf:5f:18:9f:dd:28:62:90:19:11:56:c7:82:a6:da:9a:
52:23:ef:5d:93:2d:39:57:07:0e:08:25:b4:06:0e:b7:c3:2f:
29:ef:9e:21:9d:92:69:34:ba:c0:2a:7b:34:16:5b:3b:22:b8:
2e:53:e9:99:24:49:19:c1:ff:fe:29:f9:10:47:9a:f0:65:c7:
ce:88:83:18:4c:f3:22:b3:3f:b6:9a:83:21:d0:33:ba:d9:5b:
c0:9f:74:f9:28:da:28:dd:3b:81:7d:8a:dc:4b:5b:a7:04:cb:
8d:47:26:e5:19:e2:37:2c:08:dd:f5:95:9e:e2:0a:27:6a:01:
83:ba:6f:bc:ee:27:5b:d7:70:c8:58:87:43:89:b7:82:49:4b:
e6:89:9d:da:9e:db:06:1c:e3:6c:fd:b4:1f:bd:51:51:cc:1c:
20:be:a6:6d:66:7d:50:ec:40:48:5c:7c:b1:94:6f:7c:61:d5:
d6:fc:cd:29:0a:85:44:dc:11:25:33:c2:44:33:2e:cc:c5:f9:
e8:85:24:0c:93:33:f0:8e:dc:39:93:d6:01:53:ad:e2:12:31:
b1:9e:39:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:14:04 2026 by rpki-client