Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
File: J-D3u75AMaJO8bnbGWqrBkLoSgY.mft (raw, json)
Hash identifier: uZBKC4W7TDwyWBzWkRttMiFT2k0LjdMq/B1UWrJXGUA=
Subject key identifier: 6D:7D:BF:FB:57:38:85:EF:91:AC:4B:5C:42:35:EC:BA:39:A2:83:BB
Authority key identifier: 27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
Certificate issuer: /CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Certificate serial: 019CE7B70AEC754B3583C1A38F9F6E0AE334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
Manifest number: 1867
Signing time: Fri 13 Mar 2026 15:00:58 +0000
Manifest this update: Fri 13 Mar 2026 15:00:58 +0000
Manifest next update: Sat 14 Mar 2026 15:00:58 +0000
Files and hashes: 1: J-D3u75AMaJO8bnbGWqrBkLoSgY.crl (hash: YV8HddiJXmVjBpYmunMOFUz8JG979Ety4+bVLgZ+5oY=)
2: fH7jpTfOw73ogmMvWrEFRq2Avio.roa (hash: PFBzuOPj54GvMEMM5OOIFBp/nYApNQPXPXoK+zClv8U=)
3: uDCd91-kIRTx4Oler7V-1bWJeEE.roa (hash: MPw5XG6tMFKBuwGKWin9/7K5TyzvM+BrLD5tHi46a6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:b7:0a:ec:75:4b:35:83:c1:a3:8f:9f:6e:0a:e3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Validity
Not Before: Mar 13 15:00:58 2026 GMT
Not After : Mar 14 15:00:58 2026 GMT
Subject: CN=6d7dbffb573885ef91ac4b5c4235ecba39a283bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:84:48:ec:e8:db:85:50:50:a0:fd:56:53:bb:
2d:21:72:90:62:6e:a1:86:81:ef:3b:73:40:78:a1:
09:dd:37:2c:bd:63:60:dd:92:e7:62:2d:46:d7:2c:
c1:a3:b1:ae:ef:47:00:18:d7:dd:87:4e:e2:d6:6a:
76:c9:3c:b9:0e:2b:b3:4b:a6:77:85:a8:56:a7:62:
8b:46:aa:ca:68:56:ea:03:1d:a4:be:69:66:64:31:
25:21:c9:2c:73:37:f7:dc:2f:62:be:a5:ae:bd:76:
35:05:2c:ee:f6:a9:42:5b:9f:ab:26:46:87:bb:7b:
1e:ed:e5:53:c1:19:03:54:f4:24:b5:fc:eb:be:45:
6c:f7:26:98:43:25:f4:cd:9d:5f:3b:83:85:3d:d5:
ee:ef:4a:10:5d:63:86:8c:3a:87:c3:98:6c:d6:5d:
90:d8:9b:84:44:ef:97:36:94:83:3d:fc:59:12:2c:
6c:65:a7:4c:3d:57:99:ce:e1:4c:42:ba:75:f5:50:
d7:c3:77:31:9b:ea:32:96:e1:1b:fb:6e:a7:37:dd:
40:43:ce:00:d5:fb:4e:b8:3f:94:8e:8c:a9:d2:05:
5c:10:4f:dc:6c:dc:8a:8f:22:81:87:28:7d:4e:38:
1f:7f:5d:06:41:d5:2b:5a:14:e6:f6:a9:fc:00:11:
99:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7D:BF:FB:57:38:85:EF:91:AC:4B:5C:42:35:EC:BA:39:A2:83:BB
X509v3 Authority Key Identifier:
keyid:27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:53:88:88:dd:4e:05:8e:c1:84:66:f4:b1:76:f9:cf:0b:47:
0b:93:ef:97:d0:b5:f9:55:fe:5a:40:83:b5:e9:1e:e8:20:74:
d2:80:ab:56:85:ab:f7:ac:f9:80:d9:3a:51:09:8b:06:ab:fb:
7c:23:01:d8:14:19:dc:79:f2:31:48:81:ec:52:5b:93:fd:86:
fa:16:f6:d4:ca:b1:f4:35:ed:1d:0d:8b:af:b5:f2:38:60:fc:
1b:15:4e:b9:a4:0c:f5:55:9f:95:98:f6:58:a5:57:79:80:53:
91:dc:31:36:0e:f3:ee:0b:f8:8f:c6:42:7a:f0:0e:c5:e0:23:
c8:d6:e4:cc:fa:e4:12:ba:15:14:05:0a:94:70:7d:9b:b0:5c:
7e:d1:16:36:52:f3:74:f2:64:77:3a:d4:87:7d:a7:4d:a8:e7:
b5:a2:c1:3e:24:13:7f:75:0e:57:b6:59:56:24:8d:c4:a9:7c:
6e:73:54:ba:c9:9f:5c:d5:a4:6d:92:f6:47:aa:75:0a:cb:ad:
e5:13:5d:f8:0e:e2:fb:1f:50:0b:ab:4c:40:39:ed:6f:55:35:
ee:df:0e:8d:bf:f9:3b:0a:72:bd:56:81:e9:f1:d5:e8:0a:6a:
bf:46:35:a5:4a:65:f5:75:09:c5:53:b7:8b:2b:0c:0a:31:59:
65:09:65:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:47:49 2026 by rpki-client