Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
File: J0PbfuNKwtTtV49JXgCWy5iv9xw.mft (raw, json)
Hash identifier: aru5FLE3dbcfNy26nkSIzskWm+/J2tslu250YfPISYU=
Subject key identifier: A5:F3:D4:B2:19:60:E3:4B:B2:2F:6E:A2:E7:D0:0B:AB:E9:B4:4D:5B
Authority key identifier: 27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C
Certificate issuer: /CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
Certificate serial: 01A1889B8271130FDF778146F3B36F5D802E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
Manifest number: 0616
Signing time: Thu 29 Oct 2026 17:00:55 +0000
Manifest this update: Thu 29 Oct 2026 17:00:55 +0000
Manifest next update: Fri 30 Oct 2026 17:00:55 +0000
Files and hashes: 1: FSCr9rK0vEudDS9_bQ3O-hGkqrk.roa (hash: ddVmg0mXECaptmy2zncQhSGmVK6AKxm9h3sGTc6VHOM=)
2: J0PbfuNKwtTtV49JXgCWy5iv9xw.crl (hash: g2G6vql/Jlmm/TaERjE+BbdrSVuCE2QjJfXC1WwgU1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:9b:82:71:13:0f:df:77:81:46:f3:b3:6f:5d:80:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
Validity
Not Before: Oct 29 17:00:55 2026 GMT
Not After : Oct 30 17:00:55 2026 GMT
Subject: CN=a5f3d4b21960e34bb22f6ea2e7d00babe9b44d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8d:a8:85:8d:84:d5:bd:d7:07:35:94:80:29:
b8:74:eb:8e:22:2b:14:54:3b:d1:56:ca:52:d2:4e:
36:66:3c:d3:67:5e:5b:a3:63:c2:c4:da:4c:fb:fc:
13:0e:e0:66:3a:71:c5:da:37:36:44:06:77:a4:a4:
37:0b:37:09:9a:af:33:d7:33:cd:41:46:24:12:cd:
e5:e7:27:58:db:04:b3:b1:e3:7c:e0:58:b5:f3:c6:
ac:08:e2:1e:e8:3d:fa:bc:10:99:24:c4:99:37:60:
4b:e5:14:71:ea:64:a8:b1:ec:73:e0:b5:dc:65:26:
54:a6:85:64:fd:e9:9c:dd:34:7d:3d:b0:b0:9d:df:
e5:b4:94:85:9e:42:91:31:52:87:ab:5f:70:38:ee:
e9:a2:34:a2:6b:c8:b4:5e:80:f8:bc:6b:5b:d4:39:
d5:b9:91:0f:fa:ef:b2:45:14:94:8c:5b:9c:79:a1:
31:f5:5f:24:49:63:2a:27:0e:bd:1c:0e:64:98:60:
2d:32:57:76:cc:89:74:87:da:75:36:c9:1a:df:dd:
e4:09:b5:80:4a:33:d1:ad:60:cb:7b:02:b2:ea:90:
1f:60:af:9a:76:f3:8c:35:89:c0:ae:ae:98:65:80:
bb:5e:24:b0:12:6e:f6:fd:bd:c7:03:fc:77:e0:55:
62:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F3:D4:B2:19:60:E3:4B:B2:2F:6E:A2:E7:D0:0B:AB:E9:B4:4D:5B
X509v3 Authority Key Identifier:
keyid:27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c0:ab:a2:ed:47:66:2b:81:14:ad:12:5e:04:80:51:17:f3:
aa:a0:84:52:11:f6:b7:77:26:21:99:f7:5d:80:c8:8a:45:86:
1f:89:d8:d7:ba:03:9e:59:8e:5c:cf:87:5f:88:bb:8a:77:7f:
22:60:10:fa:16:dc:e4:24:1a:df:5b:59:bd:3e:53:69:f1:75:
ca:9e:f9:fb:f8:30:58:1c:92:78:a8:9b:93:b1:7a:1e:c7:d0:
66:8e:f4:8d:4a:a5:93:1f:7e:e1:c8:0c:58:eb:41:0c:a9:51:
0f:b0:3a:17:69:73:5a:74:81:ea:1c:cf:ba:84:2c:e2:20:78:
f8:c0:27:2f:db:ca:80:f3:f5:14:65:aa:37:d5:65:90:76:d9:
00:24:96:eb:03:d7:e9:e4:a3:c6:2b:c8:e5:54:d5:49:ea:a8:
f6:33:a0:97:a6:cd:ef:f2:ff:6a:e1:78:32:bb:2d:82:89:72:
c7:66:d1:ca:c0:bf:b1:fd:72:1c:ab:cb:af:39:c9:ba:bd:10:
9d:5b:e9:44:12:81:68:75:1a:51:0f:9c:2d:b8:f1:74:08:b7:
3e:c6:bf:0e:16:7d:45:d5:b1:82:83:71:89:6e:b2:a1:d5:fb:
a1:b8:0c:3f:4d:2c:02:e5:13:65:c4:98:60:1c:dd:11:3e:c1:
3e:3f:84:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 20:30:45 2026 by rpki-client