Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
File: J2q7GtVn5bseR1pyoKaEU-P7oc0.mft (raw, json)
Hash identifier: ibADoD175LZDPmW4Cx5TwaR8m8xzMO3OETDQOXr2V48=
Subject key identifier: E8:22:65:FA:39:0C:68:2E:96:55:3B:36:FD:10:51:26:A0:9D:99:6A
Authority key identifier: 27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
Certificate issuer: /CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Certificate serial: 01A0EF675AD35E821E8A911DC679156C3173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
Manifest number: 109D
Signing time: Tue 29 Sep 2026 23:02:03 +0000
Manifest this update: Tue 29 Sep 2026 23:02:03 +0000
Manifest next update: Wed 30 Sep 2026 23:02:03 +0000
Files and hashes: 1: J2q7GtVn5bseR1pyoKaEU-P7oc0.crl (hash: EJXniPWzuTxTXkAG6lQHQzRquaaMYAYkVlvfvJAn+og=)
2: iE4PQgRjpLQVuICAA3DM5HMD4dA.asa (hash: 7+oS6U+AgY0TPyB7aEzZVmVleVk45DEZaf8PoCW8nYU=)
3: vemKapMmkStR7tolVhfdLCFIHqo.roa (hash: dA21yuRu1C5aB1w0/kkdpqei9cBkSg/W6yABWc5Hwig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 23:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:67:5a:d3:5e:82:1e:8a:91:1d:c6:79:15:6c:31:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Validity
Not Before: Sep 29 23:02:03 2026 GMT
Not After : Sep 30 23:02:03 2026 GMT
Subject: CN=e82265fa390c682e96553b36fd105126a09d996a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:65:34:0a:ab:9f:af:7f:e8:a4:1b:67:5d:19:
ba:6b:85:b5:90:ee:66:9c:29:57:de:85:f9:0f:a1:
f6:7d:18:0f:63:65:69:73:d3:4d:7e:af:5c:48:2f:
0a:ec:2c:0a:2d:02:e5:14:25:99:61:d9:73:11:30:
c0:ed:c1:61:a8:f8:3e:2b:a4:34:79:58:45:76:5c:
bb:b7:c5:59:fa:53:0d:e5:aa:a8:7a:6b:1f:92:00:
e9:49:c6:07:7f:0f:6b:6c:a4:07:c0:4b:8c:c2:bc:
d8:e6:d1:a8:30:9f:34:a9:cc:0c:d0:7f:a9:66:f7:
6b:54:cc:1a:a8:42:2a:bf:78:43:0e:9c:bb:f0:20:
f1:7a:38:58:75:09:9d:18:29:a7:e8:2d:ed:2d:9f:
32:4f:c2:77:71:e1:e0:97:92:21:aa:7c:14:5f:25:
c6:48:fb:f0:2d:85:b9:b3:e1:fe:ce:31:31:1c:53:
40:f1:44:6c:38:40:1f:e4:e1:6e:45:e7:43:da:34:
eb:00:64:6a:b9:22:30:22:8e:bb:e1:a7:de:b3:a8:
11:91:34:8e:db:19:0c:20:fb:e9:61:15:49:75:0a:
0c:ab:31:e7:a7:f1:27:49:9a:7e:68:57:f2:fc:b2:
01:43:1f:13:cc:99:9a:d3:b4:3a:da:62:f0:95:c8:
7c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:22:65:FA:39:0C:68:2E:96:55:3B:36:FD:10:51:26:A0:9D:99:6A
X509v3 Authority Key Identifier:
keyid:27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c7:2e:05:d9:d5:f8:39:a1:49:f4:64:a5:d6:7c:a2:bb:b9:
d5:3a:0c:43:37:df:0e:f4:6e:0b:eb:bc:62:8d:dd:74:52:79:
7a:87:b5:53:48:d1:39:21:43:d5:67:f7:7c:99:55:96:ca:11:
aa:40:a8:b6:6f:56:ec:09:cf:6e:77:98:f4:83:cc:87:3a:34:
82:72:11:d9:c6:23:5a:24:b2:24:23:02:03:3c:ed:d0:b7:e1:
e7:17:42:43:a1:3b:9a:3e:8f:eb:3c:ca:8f:9f:51:3e:ed:af:
d2:e2:eb:23:06:d3:2c:b7:12:17:93:0d:7c:4e:e7:7e:50:84:
d2:9c:a1:b9:46:0b:12:b6:c1:95:08:da:a4:62:13:37:86:94:
05:de:e8:ac:8a:64:c3:f0:c2:78:a9:63:f5:16:af:ad:34:6f:
07:2a:ca:d6:99:47:9a:c9:de:4d:90:bd:e8:18:ff:33:0c:d2:
09:9c:dd:ef:3f:a3:c5:69:59:7c:90:b9:d8:ec:37:b0:11:d4:
bf:cb:94:01:2c:64:16:21:10:0b:89:33:a7:f0:db:5c:73:58:
8b:f3:91:91:3c:48:c3:f6:ca:8c:3a:0c:44:42:54:ca:82:9d:
f0:87:56:0a:3c:33:b0:50:35:f3:60:28:00:e8:0a:75:8a:05:
00:35:1f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:26:34 2026 by rpki-client