Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
File: J98EKCQnP8_z8JPQ-bHexpYLrmo.mft (raw, json)
Hash identifier: pecTWQjYLHIEa7Z+lHHXAmnG+IyeO6jYJ2LiBJkuR7M=
Subject key identifier: DD:5C:44:42:A8:16:8E:D6:8A:D2:CA:3F:BB:E6:52:1A:A5:28:0B:C8
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Certificate issuer: /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial: 019D360916DA4C9E38426C445347CA60929B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
Manifest number: 1895
Signing time: Sat 28 Mar 2026 20:00:58 +0000
Manifest this update: Sat 28 Mar 2026 20:00:58 +0000
Manifest next update: Sun 29 Mar 2026 20:00:58 +0000
Files and hashes: 1: 5duSWp-R4sHUDIWHsiSMyzmiMjM.asa (hash: I9FW+aLJqiDmPx2UKLG7SXwoCqVIWzrTVyHoM25/ExQ=)
2: EaAMsvwoHBe4yq1jbHkVSMOCcms.roa (hash: tCewwDnNFA4yqzd0eb5IKas5uAfl5Rr1tmwDJ4VUURI=)
3: IvpEH6hd1qJi0dDCHitCwtgqWwA.asa (hash: pdg3WShcX162alecCVt/x5tpVyFcxh+QQl8q0PDMBOo=)
4: J98EKCQnP8_z8JPQ-bHexpYLrmo.crl (hash: 5KAkTkzDvaikC7cNj/u5IksaT/eqG0WboA6dUXvPk28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:09:16:da:4c:9e:38:42:6c:44:53:47:ca:60:92:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Validity
Not Before: Mar 28 20:00:58 2026 GMT
Not After : Mar 29 20:00:58 2026 GMT
Subject: CN=dd5c4442a8168ed68ad2ca3fbbe6521aa5280bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:10:cf:e7:d0:52:87:c7:35:3a:1d:ef:49:27:
9a:48:48:73:86:aa:44:70:ca:21:0f:bf:5c:aa:88:
15:ee:31:e0:88:eb:09:ed:66:fa:c1:9a:10:f0:b0:
98:6b:06:bc:ef:cc:22:43:7d:21:f6:d9:7b:f3:d9:
b2:b0:61:40:1c:8f:76:f3:02:f1:82:c9:2e:d1:64:
0f:7f:29:67:e6:ef:a6:5d:66:0d:a4:d7:80:78:d5:
cd:99:bc:01:53:48:2f:a7:f9:82:dc:48:76:f0:88:
e6:2f:b1:20:fb:1d:c7:93:cf:03:e4:77:c6:dd:48:
7d:ad:79:a3:97:22:ea:34:7b:5f:d6:50:11:51:94:
91:3d:c7:41:cf:93:a9:90:e3:52:3f:73:71:3f:13:
ee:35:e4:92:87:a6:0b:8a:6a:24:86:fe:75:9b:c0:
79:72:1c:8e:b1:d7:d2:f4:14:c7:74:3c:fa:ed:6b:
57:73:cb:15:f4:4b:f6:5a:a5:68:71:0a:f1:4b:0a:
f3:6d:e8:d3:3f:60:36:a9:d3:ff:b2:5a:d9:50:97:
f7:e5:dd:cf:89:78:f0:e4:6f:30:d4:c0:95:75:db:
cf:0d:5f:da:93:88:00:00:bf:c6:2d:0c:21:c9:7e:
59:a3:65:42:04:4a:73:03:30:4d:03:2a:50:ab:82:
a5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5C:44:42:A8:16:8E:D6:8A:D2:CA:3F:BB:E6:52:1A:A5:28:0B:C8
X509v3 Authority Key Identifier:
keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:03:fe:9e:f4:61:58:69:37:d3:90:03:02:99:f9:06:bb:ee:
67:c7:92:67:5c:3d:7a:ac:2b:19:38:3e:96:6d:1f:93:ce:c0:
38:27:c5:07:ad:c7:d6:e4:49:14:81:2f:45:cb:ad:00:d8:7f:
54:8e:09:9d:54:c9:44:60:2d:db:34:3b:bd:9f:a1:dc:f5:35:
9c:d0:8a:5e:13:39:7d:ff:51:92:5a:3f:43:4d:04:00:75:34:
06:ae:ed:ca:05:71:bb:f6:ae:28:70:e9:ca:8f:e6:6b:b5:2b:
b4:2f:19:e7:0c:2d:e4:4f:c7:f6:ea:b8:58:ea:56:3c:f1:cc:
60:86:63:a7:2e:a3:68:17:47:90:ad:54:fc:36:14:cf:55:bb:
e8:1c:9e:66:ce:69:35:e2:31:06:4c:bd:a9:d1:d0:62:13:15:
c6:4b:fb:93:49:bd:b5:a8:0b:3f:8e:c1:89:63:8c:34:db:ba:
59:c0:6c:1b:ab:25:70:91:8c:c4:1d:13:97:25:74:f7:14:f5:
ac:1b:07:88:95:b5:5a:30:26:4c:8a:af:dc:e6:52:93:2d:87:
70:57:55:5f:99:44:4f:21:1d:7c:63:16:dd:b0:b8:22:3a:6a:
1c:47:b5:15:2d:08:e7:96:97:fa:26:38:10:ff:ae:7e:0d:2e:
d5:ba:60:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 03:18:55 2026 by rpki-client