Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
File: J2q7GtVn5bseR1pyoKaEU-P7oc0.mft (raw, json)
Hash identifier: T6Agk3Y2clSHql3dljUXV3jI0SwT1AlXUYM4Xuu6m/I=
Subject key identifier: 43:FA:EE:31:1A:26:60:0B:BD:15:8A:61:E4:FD:C1:E8:1F:B1:2F:32
Authority key identifier: 27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
Certificate issuer: /CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Certificate serial: 019FF8357954D153A9B401FF21C03C83ACD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
Manifest number: 101D
Signing time: Wed 12 Aug 2026 23:01:21 +0000
Manifest this update: Wed 12 Aug 2026 23:01:21 +0000
Manifest next update: Thu 13 Aug 2026 23:01:21 +0000
Files and hashes: 1: J2q7GtVn5bseR1pyoKaEU-P7oc0.crl (hash: MZ3VvEvI04u1sUPdcAXXxI0ZYSGi+zmQsCfl92wx1D4=)
2: iE4PQgRjpLQVuICAA3DM5HMD4dA.asa (hash: 7+oS6U+AgY0TPyB7aEzZVmVleVk45DEZaf8PoCW8nYU=)
3: vemKapMmkStR7tolVhfdLCFIHqo.roa (hash: dA21yuRu1C5aB1w0/kkdpqei9cBkSg/W6yABWc5Hwig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:35:79:54:d1:53:a9:b4:01:ff:21:c0:3c:83:ac:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Validity
Not Before: Aug 12 23:01:21 2026 GMT
Not After : Aug 13 23:01:21 2026 GMT
Subject: CN=43faee311a26600bbd158a61e4fdc1e81fb12f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:47:10:ef:14:59:b2:bc:e3:a3:32:e6:cf:17:
0a:aa:1d:01:58:8a:a5:3c:e5:45:4a:af:53:ab:ca:
42:ac:d8:ca:c9:9b:b0:a1:93:5c:0c:77:4a:79:f8:
f5:d8:73:8f:a9:31:6a:99:b6:a1:96:70:a6:8e:48:
32:67:49:16:a7:52:b0:cc:89:c2:e3:29:4f:cb:d7:
cd:79:01:48:36:fc:c0:d3:48:4f:28:a4:44:78:ae:
ca:9e:3a:75:62:c3:34:a8:dd:94:70:14:a3:37:c2:
74:b9:1b:50:93:9d:9d:c2:c3:65:ca:17:32:32:d7:
27:dc:8d:c1:37:1b:13:f6:20:6b:90:91:36:49:8b:
9f:a5:47:d0:99:1b:d6:1b:e7:6a:73:66:e1:4b:2b:
d0:93:c0:56:cc:02:5d:fa:e0:44:ae:9d:52:e2:25:
cf:7b:f8:ea:81:8a:d1:44:ce:7c:32:93:4f:43:b1:
84:43:25:cc:c7:c4:c5:8d:a5:83:ba:a0:2b:91:84:
05:c8:83:f4:e0:dc:b0:cd:9b:ac:a9:5e:1f:76:f7:
c2:c0:ed:95:42:69:0a:35:42:04:d0:a9:1c:be:b7:
33:8c:11:48:1b:bb:27:e2:0a:29:1b:3d:ed:44:f8:
78:1e:6f:c8:51:9e:d8:11:75:9e:e3:e7:2a:1d:a8:
e1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FA:EE:31:1A:26:60:0B:BD:15:8A:61:E4:FD:C1:E8:1F:B1:2F:32
X509v3 Authority Key Identifier:
keyid:27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:26:1c:a5:f3:38:7c:2c:48:6a:95:42:ad:09:de:0a:5c:8c:
c3:04:bc:7a:8e:c4:3b:45:c2:55:10:b6:ad:ca:71:69:8d:5d:
fb:c0:ec:d2:21:7a:7f:2d:bc:9c:7d:35:bd:9c:d5:22:70:49:
bc:02:3c:5f:54:ed:42:0d:a6:30:30:c8:ce:21:a4:b6:96:49:
9e:e2:9d:6d:48:79:18:c6:b2:19:49:df:a8:01:5d:c0:b9:9f:
91:db:91:8d:2d:9f:25:0f:df:d0:3e:24:3e:68:2f:5f:7d:13:
8d:54:96:5b:d4:ec:df:4b:10:fd:cf:10:c9:a6:36:4b:6d:dd:
d3:7f:29:cc:d3:8f:98:87:d7:6b:ed:bc:d4:6a:40:44:73:ea:
02:e2:9c:57:e3:1c:28:12:04:6f:5f:26:df:e6:0e:25:33:b0:
12:45:b1:db:c9:a9:59:4f:42:3a:f0:43:36:ff:5f:df:61:50:
91:68:f4:16:cd:b3:47:0d:22:74:ec:a2:c6:fe:97:88:5a:cc:
c1:72:19:4b:a7:76:db:9b:75:a9:60:8c:18:4a:e1:5f:86:58:
92:61:e6:6e:eb:6a:dc:35:a5:b5:58:a7:db:d2:3f:38:c0:86:
9a:c9:98:69:b2:9c:4d:9e:69:96:80:40:2a:f0:55:a4:e9:9a:
fb:ac:d4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:02:14 2026 by rpki-client