Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
File: J97R2QxNUraHECO8cSltCKmMTNs.mft (raw, json)
Hash identifier: om8CPKtDEuto1KOPni6FCAwmBDxllf0ZtyrFlRKS7Ck=
Subject key identifier: 37:13:BB:25:D1:01:1D:98:F3:56:2C:BD:63:53:BF:47:8C:9C:CE:CB
Authority key identifier: 27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
Certificate issuer: /CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Certificate serial: 019D38D2F410DCDC244886DF43F2BFD69F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
Manifest number: 0E51
Signing time: Sun 29 Mar 2026 09:00:42 +0000
Manifest this update: Sun 29 Mar 2026 09:00:42 +0000
Manifest next update: Mon 30 Mar 2026 09:00:42 +0000
Files and hashes: 1: 9eN7qSejmD6NfaFbsmt0-Q4AgoA.roa (hash: EthJtYsvDPJskDLNQI0HAM0yvVrJhOQozB0uYpm7BsE=)
2: J97R2QxNUraHECO8cSltCKmMTNs.crl (hash: wXCzjBinuqPHe2IICkz7rTihVUT2uFa/OQgQCqirUts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f4:10:dc:dc:24:48:86:df:43:f2:bf:d6:9f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Validity
Not Before: Mar 29 09:00:42 2026 GMT
Not After : Mar 30 09:00:42 2026 GMT
Subject: CN=3713bb25d1011d98f3562cbd6353bf478c9ccecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:41:0b:30:7e:85:bf:81:06:37:27:87:be:8b:
9f:83:02:6e:c9:c7:cf:92:f2:e3:aa:ec:a9:d5:b4:
25:48:ba:1a:9f:ff:37:84:06:3e:cf:af:48:f0:a3:
a7:c1:40:45:6e:16:5f:7e:31:4d:6d:54:19:87:05:
6c:0a:14:13:15:37:77:a0:f0:5c:22:e6:e4:78:98:
91:9b:ce:7f:c2:36:52:47:5e:a1:dd:38:c6:30:c4:
04:6b:54:8f:67:93:4e:b2:32:66:60:12:ec:ad:ec:
34:95:72:0f:fc:4a:e1:74:18:88:23:dd:09:c4:5c:
05:99:c2:61:a2:34:74:11:4b:4f:16:af:59:5a:14:
cb:f1:a3:b1:92:0d:a1:3f:e8:0f:2a:0a:cc:ec:59:
2b:f8:87:55:31:1e:84:2f:8a:63:1b:70:e3:0e:a2:
64:3f:63:3d:1f:f7:a5:60:c3:29:c5:9f:2b:a1:6b:
1b:79:da:db:57:09:14:5a:6d:74:01:e5:5d:c7:97:
36:c7:2b:b5:24:18:2f:be:f5:d6:fb:b2:38:22:ee:
b4:41:6d:a0:74:a5:7f:5f:d9:1d:d6:30:37:77:01:
b8:bc:48:80:01:90:7f:df:44:80:d8:9a:c8:23:fc:
49:18:ae:a1:e3:93:52:88:fa:d1:d3:af:44:af:5a:
0f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:13:BB:25:D1:01:1D:98:F3:56:2C:BD:63:53:BF:47:8C:9C:CE:CB
X509v3 Authority Key Identifier:
keyid:27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:02:13:d9:93:a0:46:7a:a5:95:22:d0:c6:f2:07:0d:35:a8:
4c:b1:9f:ce:56:c3:d7:df:e5:92:84:2c:bd:93:12:e2:df:e8:
ea:25:7e:8c:7a:35:aa:08:7f:05:a3:97:97:b7:10:a4:cb:ae:
c4:29:13:e3:76:3b:b8:0a:78:df:b3:f5:72:89:3f:d4:54:63:
5c:95:e4:89:88:e9:1d:06:01:9a:3e:c3:5b:6d:71:72:db:33:
f6:eb:f8:31:71:51:38:a2:32:fc:c2:0d:67:6a:7e:97:39:3e:
74:c2:c0:12:b0:4b:08:16:19:a6:1f:ab:9f:5b:30:82:c6:6e:
96:02:9a:78:a3:c1:0d:87:89:13:61:6f:d3:a7:0a:e7:14:03:
27:0f:ed:fd:84:40:ec:4a:38:b5:46:73:3a:41:f3:72:01:f0:
5b:f1:2a:63:f8:72:91:69:28:f8:f8:e9:33:08:8a:83:cb:b5:
52:87:61:80:fa:64:77:c1:5d:80:1f:e2:e9:9f:cf:10:05:9b:
d1:0a:6b:16:46:c2:b7:c0:be:c4:7e:7d:9f:4c:fb:d2:9c:5c:
e5:e2:fc:bb:07:59:4d:2b:55:66:f3:a4:60:c6:d0:b1:87:5e:
60:17:a2:93:cf:50:b4:af:1f:f7:b9:c4:c7:02:d0:6b:c5:77:
c0:26:69:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:16 2026 by rpki-client