Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
File: J2q7GtVn5bseR1pyoKaEU-P7oc0.mft (raw, json)
Hash identifier: VRSK4uamvo6Yi3PR9Uuyl0m+wcfbBYhsNr3oeRgWL08=
Subject key identifier: 6F:1C:E1:F9:5E:DB:D8:90:D1:B1:C0:A4:FD:FB:3B:47:F9:99:05:0B
Authority key identifier: 27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
Certificate issuer: /CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Certificate serial: 019D37BFF08A20F23B912D46EB51327FA371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
Manifest number: 0EAF
Signing time: Sun 29 Mar 2026 04:00:18 +0000
Manifest this update: Sun 29 Mar 2026 04:00:18 +0000
Manifest next update: Mon 30 Mar 2026 04:00:18 +0000
Files and hashes: 1: J2q7GtVn5bseR1pyoKaEU-P7oc0.crl (hash: txOiVE/ydiQxY4aXjn98pRDP+eJmNTYWcv1MxxD8lq8=)
2: OXWr1FYLi9PgXMi4UP0vp3p1d3o.roa (hash: miQSIT7p7E2EU0jg2TvL7PxHL5mubsweNJtdEmmfr8s=)
3: vemKapMmkStR7tolVhfdLCFIHqo.roa (hash: dA21yuRu1C5aB1w0/kkdpqei9cBkSg/W6yABWc5Hwig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f0:8a:20:f2:3b:91:2d:46:eb:51:32:7f:a3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Validity
Not Before: Mar 29 04:00:18 2026 GMT
Not After : Mar 30 04:00:18 2026 GMT
Subject: CN=6f1ce1f95edbd890d1b1c0a4fdfb3b47f999050b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:90:f4:a2:9f:4d:00:5d:fa:3f:34:d6:cf:
be:b4:bf:fb:76:68:21:7b:fd:b3:9a:b7:e5:d5:10:
1c:e8:de:31:30:dd:80:94:6e:22:f9:74:60:ab:0c:
25:79:78:ea:f9:32:0d:0f:d6:86:10:e5:b0:dd:b5:
7a:87:d6:2e:4b:b1:8c:26:0b:be:f0:2c:e9:93:bc:
dd:f4:81:22:d9:53:49:75:16:91:f2:3d:65:be:58:
2c:29:76:df:2d:88:10:e4:29:e0:63:fa:28:56:b0:
ca:0b:9e:27:32:45:df:24:17:f5:5b:31:09:4f:d4:
50:0d:d7:75:ac:be:fd:f2:b3:10:1d:1a:08:7b:61:
34:bf:35:1e:ca:15:ac:97:18:65:f2:56:40:f4:f1:
e0:86:e3:b6:b8:e2:93:27:d6:f4:93:52:39:31:48:
27:48:b5:4c:5f:44:d6:49:51:d8:0d:9b:dd:2b:55:
09:c4:eb:4d:96:15:50:0e:88:69:15:1a:78:94:b1:
28:05:94:b4:b8:20:d3:7e:5b:1c:8a:37:d7:82:24:
b2:0e:de:ec:46:d4:a5:09:73:83:df:c6:24:de:d4:
c8:ff:84:e0:33:b2:d3:6d:87:25:30:d9:ee:98:09:
32:58:3b:0a:cd:25:1b:b9:07:b0:6b:02:01:75:32:
71:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1C:E1:F9:5E:DB:D8:90:D1:B1:C0:A4:FD:FB:3B:47:F9:99:05:0B
X509v3 Authority Key Identifier:
keyid:27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d9:19:93:ea:92:61:0b:4b:e4:0b:27:14:b1:7d:bc:c2:c5:
6e:50:c7:34:92:b0:de:a5:78:7c:16:7d:92:ab:3d:47:6d:ef:
87:b8:3f:42:7a:6c:dc:b0:f7:19:10:d1:68:51:44:43:66:30:
f9:1e:15:60:b7:43:02:c0:97:4e:63:cf:ad:1b:81:41:a3:3c:
86:71:35:ac:ae:8f:07:8b:ca:11:8f:54:35:c7:99:09:f2:d3:
c6:f0:82:51:b5:c1:01:8e:ec:ab:8f:2d:b0:8e:90:7e:0b:54:
c3:51:f7:85:99:07:06:8e:ec:a9:79:5e:71:c0:ae:09:2b:a0:
75:93:6a:10:a2:68:bb:4e:23:6a:8a:72:66:6c:82:a8:d1:ea:
9e:92:c2:11:99:7e:a6:67:9f:ce:da:60:3e:62:e4:63:28:c7:
d4:7f:d9:35:44:97:e6:b1:24:e9:b7:d7:62:77:a2:7a:93:b6:
ab:53:ff:63:1e:c1:7b:51:ac:e5:0e:a5:44:17:92:6b:f5:90:
ca:ae:54:3c:75:fc:a5:03:6d:af:73:fb:fc:5a:1f:d5:e4:6f:
92:07:00:08:f7:d3:cc:e7:46:47:5e:52:7a:50:f2:8e:7e:a5:
14:6a:82:bc:91:8f:bd:de:36:6b:a2:63:b1:8f:83:30:dd:cb:
63:3f:83:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:18 2026 by rpki-client