Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft
File: J7JQwAtGuhgF8v5fanfo_-X-J3g.mft (raw, json)
Hash identifier: bdWoDQBaCCvMO+Lw3xeI7B9EBjbKPTMwQg9BpwaDIkk=
Subject key identifier: 37:12:91:4F:AB:B0:DC:45:56:33:84:7C:77:6E:BB:67:07:0F:DA:F5
Authority key identifier: 27:B2:50:C0:0B:46:BA:18:05:F2:FE:5F:6A:77:E8:FF:E5:FE:27:78
Certificate issuer: /CN=27b250c00b46ba1805f2fe5f6a77e8ffe5fe2778
Certificate serial: 019D38D2DA031B1A41F92C4CD5D8D443F550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft
Manifest number: 039D
Signing time: Sun 29 Mar 2026 09:00:35 +0000
Manifest this update: Sun 29 Mar 2026 09:00:35 +0000
Manifest next update: Mon 30 Mar 2026 09:00:35 +0000
Files and hashes: 1: J7JQwAtGuhgF8v5fanfo_-X-J3g.crl (hash: Pe4j6DotS7o6yyFI4dSrMHUFHYnUP5Ap9IaF1jOt8+0=)
2: PCV5mGTyG_SgomelCPvCXt-eraw.roa (hash: Sr6ZqTMnZ5nUSCIYTgu1oovZ8jmYGb+qW35o9FtNPcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:da:03:1b:1a:41:f9:2c:4c:d5:d8:d4:43:f5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b250c00b46ba1805f2fe5f6a77e8ffe5fe2778
Validity
Not Before: Mar 29 09:00:35 2026 GMT
Not After : Mar 30 09:00:35 2026 GMT
Subject: CN=3712914fabb0dc455633847c776ebb67070fdaf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e2:87:df:aa:06:cf:07:28:9a:f5:25:e2:bc:
08:1d:52:02:57:35:86:a8:85:96:fc:6c:31:b0:5e:
21:2a:04:18:46:67:5a:ae:95:5a:57:c5:89:9d:bf:
cb:a7:4d:68:63:59:39:9a:f7:28:4d:81:1f:de:88:
2e:5a:c8:b1:8a:be:77:30:2c:e0:68:f3:09:3a:b0:
88:c8:ee:64:3e:ba:80:16:39:cc:cd:7d:2d:5c:e5:
b8:66:39:da:27:5c:7a:8f:45:4f:8b:40:f1:47:57:
c8:0c:9f:60:82:02:24:28:29:91:2e:72:93:5b:05:
c4:17:18:d4:fe:b9:d9:66:69:fb:41:bd:df:2c:da:
f5:9b:8b:f9:a3:1d:da:f4:b0:a1:b2:3e:5f:da:d6:
39:17:9a:7e:70:2b:c7:df:82:7d:93:94:f6:66:41:
df:5c:3e:c9:d2:a6:44:5d:a8:02:9e:96:5f:f2:7a:
d1:43:08:48:1e:4c:90:e7:c9:92:07:c5:73:1b:44:
a8:e9:21:41:50:d7:2b:12:f6:60:ac:16:86:b9:1e:
10:7a:7d:bf:c3:b4:af:e4:85:48:2f:24:af:04:f8:
26:b2:6b:36:30:b7:0e:59:c8:51:14:4e:86:c9:9d:
04:19:4f:ed:e1:c3:be:ef:ee:79:28:88:66:d4:3b:
a7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:12:91:4F:AB:B0:DC:45:56:33:84:7C:77:6E:BB:67:07:0F:DA:F5
X509v3 Authority Key Identifier:
keyid:27:B2:50:C0:0B:46:BA:18:05:F2:FE:5F:6A:77:E8:FF:E5:FE:27:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:da:bd:c8:3d:ba:6a:ca:75:54:78:52:67:69:49:17:01:ba:
aa:90:db:8d:7c:3f:79:f4:dc:f8:e2:01:66:0f:c8:4d:13:f7:
39:19:f7:fa:dd:8f:92:1c:37:66:d0:6d:b9:99:b0:b5:95:06:
4d:8c:eb:80:4a:e3:2b:bf:90:24:fa:bb:2e:92:47:3e:b1:96:
1d:31:ce:76:74:0f:79:a1:49:2d:08:20:df:17:53:f0:ce:06:
cc:7f:8d:b7:92:d7:2e:05:b2:33:19:e0:76:21:0d:54:48:2a:
5a:79:0c:70:70:0d:10:8f:38:17:1b:85:e6:b7:b7:3e:13:ca:
d0:af:ae:ac:fb:bb:d5:0d:8f:a7:fd:4f:d8:d3:cb:8c:e2:da:
c7:3d:d0:4c:5e:c4:30:b0:a8:8f:ee:3a:53:a1:ca:46:5e:72:
4d:d2:d2:fc:8e:e9:ea:a9:89:7b:c5:d2:07:54:69:94:45:18:
cd:58:a7:86:b9:a7:3f:e9:0a:a9:c6:6c:7b:93:a9:f6:38:69:
5e:29:90:6c:71:25:0d:1c:3e:c8:ee:d6:28:a1:b2:df:88:0f:
53:87:17:71:d1:a9:02:db:c5:17:35:3c:81:e4:e4:de:64:51:
f2:6d:17:04:63:a3:d1:9b:5f:ea:28:82:2d:11:85:d7:6b:5a:
3b:c8:ad:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:26 2026 by rpki-client