Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
File: J_whhWzY4Denu4xjkqYZghOotPY.mft (raw, json)
Hash identifier: 1DBY2TWd7WM9zx8q19rde+aHidbcKpxEGuGnSc1uvDQ=
Subject key identifier: B6:93:FC:D4:C1:19:9F:24:D7:8E:27:79:D1:9B:F3:67:46:C0:44:AA
Authority key identifier: 27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
Certificate issuer: /CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Certificate serial: 019DCED03E9F1A83CFE62F7C07099A4D9212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
Manifest number: 0FBE
Signing time: Mon 27 Apr 2026 12:00:47 +0000
Manifest this update: Mon 27 Apr 2026 12:00:47 +0000
Manifest next update: Tue 28 Apr 2026 12:00:47 +0000
Files and hashes: 1: J_whhWzY4Denu4xjkqYZghOotPY.crl (hash: 3CXu2+D9UgjPfwNbJXP+p4YUWNw9D43ZN3r5xhJ2gAQ=)
2: Zl9UixuUH0GLR4R_JPyHH_dGJ1Y.roa (hash: bKOmByPp72MyiwK2dxQMPNiiDG6ujdM2vWNSfqTcD8I=)
3: evUKjjQ-64urf3ID9QQeEJmSrho.roa (hash: jHjvWcJHTbQkaqv1cxn7W2VQ1dY8D8A2yCIoe6SeCXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:3e:9f:1a:83:cf:e6:2f:7c:07:09:9a:4d:92:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Validity
Not Before: Apr 27 12:00:47 2026 GMT
Not After : Apr 28 12:00:47 2026 GMT
Subject: CN=b693fcd4c1199f24d78e2779d19bf36746c044aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:be:90:2d:22:be:4e:ad:f1:3c:5e:04:a6:9c:
b3:21:e1:fd:5a:6e:9a:89:13:f0:47:87:e4:78:cc:
ba:85:af:ba:0a:46:44:97:60:d0:84:a5:63:58:94:
14:b6:7b:2c:eb:15:36:bc:46:50:b4:ff:06:7d:21:
96:7f:3d:19:7e:dd:14:f9:39:38:1d:a9:e6:aa:ee:
a6:56:cd:05:41:ce:74:4d:77:04:33:ce:bd:2b:6a:
c7:c1:01:c2:6c:9d:7f:74:98:d3:41:6b:e9:a3:69:
87:a7:d1:c5:8b:2c:36:26:4a:41:b4:9f:29:34:2c:
21:cf:8f:2d:49:59:e6:d7:58:a1:4c:fe:b5:92:c0:
f4:04:76:ce:50:8e:50:14:ba:b7:fe:a8:e5:70:42:
d6:ba:2a:3b:35:d7:db:2e:4e:6d:85:13:ac:10:bc:
83:f2:d2:f4:d5:fd:97:5a:b0:ab:97:06:b4:e2:98:
f5:52:d0:18:a1:5e:f5:87:7a:48:5e:a0:1a:ea:21:
e6:eb:64:0e:06:6e:9b:18:39:c9:a7:5c:48:e1:13:
53:9f:ca:d4:50:f1:c7:de:2a:0e:af:c0:1f:00:72:
ed:04:60:54:b8:5c:9c:1a:9a:83:e4:1a:d4:e4:89:
82:4b:70:53:a8:f6:03:61:ee:db:74:c6:c9:94:50:
4e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:93:FC:D4:C1:19:9F:24:D7:8E:27:79:D1:9B:F3:67:46:C0:44:AA
X509v3 Authority Key Identifier:
keyid:27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f6:53:1f:ed:97:ea:64:77:3c:97:dc:d2:0d:d3:17:4a:7a:ee:
0c:9a:cc:b3:c6:77:10:a2:b4:e2:00:72:d4:a0:68:6f:0e:ce:
b2:56:9a:3c:bf:e5:d8:c6:e9:31:c8:cb:88:58:db:ef:71:e0:
7d:5d:a1:eb:f6:b4:17:90:90:07:87:44:a9:85:91:01:64:d1:
10:ff:5b:ce:32:72:62:b9:6d:02:ab:16:e0:be:e3:f0:4b:18:
29:cd:15:01:0f:16:f5:ba:ec:63:eb:cf:c6:f2:09:26:56:eb:
12:ff:42:58:67:90:24:8d:6f:d0:d4:b8:76:73:f8:e2:5d:d0:
4c:5a:fd:39:08:45:9b:db:f2:fa:d2:21:97:84:1d:0f:d9:05:
2e:aa:c7:6b:b9:79:ae:ee:b4:9e:68:15:ef:88:fe:e3:0b:8f:
b6:74:e9:42:68:bc:26:9a:ef:50:fb:16:24:21:bb:fd:20:9b:
d7:8b:e0:3e:63:91:e0:53:c0:ba:48:90:0e:1e:ca:02:81:8e:
26:17:00:da:c0:65:4b:cc:df:e6:b3:a0:b7:48:ae:ff:74:c4:
96:13:52:c1:01:e6:79:19:a4:17:01:50:a2:d5:e9:3d:92:23:
16:c5:f5:b7:30:fe:fd:43:00:5c:e4:14:71:50:e5:c2:26:dd:
ae:4f:74:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:32:12 2026 by rpki-client