Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
File: J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft (raw, json)
Hash identifier: SNr0AW8RgvcvsQThuM36ZpviI7whtr87ZnMwdYB3rtw=
Subject key identifier: C2:80:18:42:56:05:79:7F:97:59:B4:42:17:90:32:A8:E7:63:B7:06
Authority key identifier: 27:D0:28:47:06:04:33:6F:DB:93:08:E5:1B:A5:3E:95:1A:E2:E0:98
Certificate issuer: /CN=27d028470604336fdb9308e51ba53e951ae2e098
Certificate serial: 019D38D29FAEB0FA39FAA3785809E6F30464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
Manifest number: 0C25
Signing time: Sun 29 Mar 2026 09:00:20 +0000
Manifest this update: Sun 29 Mar 2026 09:00:20 +0000
Manifest next update: Mon 30 Mar 2026 09:00:20 +0000
Files and hashes: 1: 4rLPq_TgJ9EI_tLb1VhHk45l3x0.roa (hash: hFOozb3KB1jUFC9gVkqUzG9rbgAjo7X66KzDUthY3po=)
2: J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl (hash: bZ5H/MtBd2uz1RcrxGmF3xD0B2ZkPqYql2Vj5vaIrLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:9f:ae:b0:fa:39:fa:a3:78:58:09:e6:f3:04:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d028470604336fdb9308e51ba53e951ae2e098
Validity
Not Before: Mar 29 09:00:20 2026 GMT
Not After : Mar 30 09:00:20 2026 GMT
Subject: CN=c28018425605797f9759b442179032a8e763b706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:8b:81:e7:29:6b:32:e2:dc:23:c8:7f:fd:
77:2d:f9:73:2b:13:7b:7f:5a:5d:f7:7f:d7:a0:d5:
7c:5c:05:a8:77:35:1c:20:d5:01:81:f0:8b:6a:5e:
7c:78:0d:b1:c1:4e:55:64:cd:65:d6:76:46:10:07:
c1:10:e6:cc:c6:e4:77:dd:24:38:7d:84:8b:18:42:
3c:35:9e:17:ad:bf:d8:d6:7a:84:7c:f6:21:8f:d4:
0b:74:5f:98:c6:d9:08:5c:16:3e:22:a9:52:2e:99:
ff:6b:f1:2b:1d:54:b2:55:6e:88:a5:df:91:42:4d:
26:ba:58:96:a9:8f:51:e5:97:85:6b:92:d9:3f:fe:
da:d9:71:ab:a2:ab:10:cb:5c:45:dc:67:26:f5:b8:
84:48:0d:55:10:74:ff:58:d2:7f:b5:f7:c9:13:56:
70:22:00:83:71:49:9c:0c:e6:e7:ca:a6:92:32:12:
6f:b1:68:03:35:66:d6:e6:4d:84:64:58:35:26:0f:
9c:a4:99:e2:24:7e:bc:b2:c0:47:dc:01:96:d2:49:
12:30:1e:62:75:bf:18:2c:52:ff:8f:68:b3:fd:b4:
25:f7:29:24:52:1c:cd:f8:67:a9:8d:92:da:64:82:
87:15:26:ef:b6:87:44:4e:22:56:77:32:c2:95:90:
20:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:80:18:42:56:05:79:7F:97:59:B4:42:17:90:32:A8:E7:63:B7:06
X509v3 Authority Key Identifier:
keyid:27:D0:28:47:06:04:33:6F:DB:93:08:E5:1B:A5:3E:95:1A:E2:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:54:4f:a0:0a:1f:55:85:28:88:8e:49:39:ef:52:3a:c3:b7:
93:e9:f3:24:ea:17:53:da:f4:f8:18:7a:13:2d:4f:ee:58:6f:
fb:15:0e:fc:d1:9e:74:1c:76:3f:7c:c7:43:f2:15:46:c9:0f:
b3:cb:80:25:af:52:74:33:7a:0a:08:d6:82:e5:aa:b4:5f:82:
45:98:37:8e:1e:8d:8f:0d:75:b6:b7:3e:3a:d8:d2:c4:a0:dc:
02:56:f0:b5:d9:0e:fb:24:8d:7b:67:ce:03:ae:df:ce:34:11:
35:ea:ca:e2:1b:96:f9:83:39:b5:37:13:8b:1d:97:27:a7:2c:
6c:34:3e:ab:19:f9:bc:cf:7f:43:f1:53:91:68:c9:ce:0f:6d:
b3:dd:d2:bb:60:e1:cb:e7:19:44:25:c2:70:e0:17:7e:dd:43:
c8:60:96:4c:f8:b9:64:4e:60:fe:39:26:5a:b1:bd:9c:ec:c9:
99:27:c0:95:0c:ad:e0:7f:b1:22:b3:91:be:3b:cc:6f:81:f3:
f2:7c:42:ac:6d:79:21:8e:97:b2:19:9d:07:d1:27:58:13:5a:
83:af:e0:ae:55:09:5b:d2:c3:61:91:e7:f7:a7:d8:56:43:8e:
8e:64:fd:2b:0b:1f:22:2c:cc:1e:1a:1f:0c:91:af:71:5b:1a:
8b:b5:25:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:17 2026 by rpki-client