Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
File: J0PbfuNKwtTtV49JXgCWy5iv9xw.mft (raw, json)
Hash identifier: AosBoglMGsFlhIjvkG1cU//c2o7O+dFoRSvQoD/wmpk=
Subject key identifier: F3:3D:23:A8:CC:27:57:65:FB:87:44:D1:3E:43:E0:75:01:79:39:F0
Authority key identifier: 27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C
Certificate issuer: /CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
Certificate serial: 01A08D8D61DEF4BD07128427764679C8A83C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
Manifest number: 0594
Signing time: Thu 10 Sep 2026 23:00:48 +0000
Manifest this update: Thu 10 Sep 2026 23:00:48 +0000
Manifest next update: Fri 11 Sep 2026 23:00:48 +0000
Files and hashes: 1: FSCr9rK0vEudDS9_bQ3O-hGkqrk.roa (hash: ddVmg0mXECaptmy2zncQhSGmVK6AKxm9h3sGTc6VHOM=)
2: J0PbfuNKwtTtV49JXgCWy5iv9xw.crl (hash: ovs6vLpTrniSrDy/6KM4F6aJUhvgOCMRwyYKoUPgQtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:61:de:f4:bd:07:12:84:27:76:46:79:c8:a8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
Validity
Not Before: Sep 10 23:00:48 2026 GMT
Not After : Sep 11 23:00:48 2026 GMT
Subject: CN=f33d23a8cc275765fb8744d13e43e075017939f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:42:be:5b:2e:3c:a9:fe:3f:94:a7:b0:d6:4e:
98:f3:5a:2a:12:bc:a5:10:71:b9:2e:d0:2c:91:6e:
0a:65:68:36:c8:a8:d3:ac:d7:60:4d:e2:2d:61:2a:
06:50:ac:d6:83:0b:df:12:68:f0:93:82:87:8b:80:
c5:32:c7:c7:5a:be:db:60:40:eb:e6:94:8d:b8:fa:
a6:fa:e4:bf:78:eb:0c:cb:2c:da:e8:70:a7:29:03:
04:c5:22:f3:c5:de:1e:9f:40:77:85:22:b3:5c:04:
f3:74:f1:72:b2:b0:e3:8c:2f:1d:3e:87:d9:ba:a9:
7f:af:a5:b0:70:34:ee:e1:a4:4f:b1:a3:78:74:34:
e7:ff:1a:02:9f:64:b5:57:45:12:35:12:b4:f7:61:
53:42:87:7f:26:77:79:e8:20:3f:03:17:59:81:c8:
0f:16:b8:37:1e:3b:14:92:bf:4c:2b:43:a0:3c:77:
22:21:31:b9:ce:dd:92:e3:24:27:bd:f6:31:ff:e4:
ef:0a:a2:8f:6c:2f:07:3d:92:99:7a:a5:6d:a7:26:
59:4d:b1:a3:df:14:f7:6f:02:33:b7:51:b7:80:e1:
ea:9c:cd:62:09:d4:12:d4:1c:4b:0a:c9:ae:35:c4:
ca:cf:ad:c6:8a:2d:8f:ea:a7:cc:3d:fd:55:07:26:
d4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3D:23:A8:CC:27:57:65:FB:87:44:D1:3E:43:E0:75:01:79:39:F0
X509v3 Authority Key Identifier:
keyid:27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:df:68:de:29:53:6e:e7:0c:f0:42:26:52:43:9e:27:41:a4:
23:03:06:ac:d7:06:ee:40:bd:9c:d7:a9:47:7f:7c:5c:32:11:
b7:b4:bd:b5:f7:9d:00:1d:64:9c:61:56:bb:ef:3a:e6:c9:1f:
b4:36:4a:ca:96:3c:ce:4a:30:b7:06:95:84:9a:ae:74:1d:44:
e1:8c:f7:f9:51:2c:ec:88:20:22:36:0d:8f:14:b7:b5:e6:aa:
b8:20:a3:df:aa:7e:0a:35:39:ec:a8:b7:2e:9f:ee:ee:55:24:
7b:db:94:96:20:eb:58:97:7b:4e:80:69:dc:50:61:56:80:99:
11:cc:0b:dc:ca:de:f0:fb:d0:28:d3:af:01:c4:81:15:ca:47:
cb:af:76:da:f6:4e:f2:14:3f:b2:d5:34:54:df:35:52:7a:50:
d6:10:6a:5d:f6:c4:ef:76:4d:58:1c:46:98:27:3e:33:bc:3d:
25:52:af:bf:ab:71:83:7f:9b:3e:62:42:aa:99:e7:ff:6b:2e:
95:9f:be:8e:5c:01:2e:5c:90:58:36:94:0a:e1:f7:5a:ef:c9:
16:b6:34:10:26:b7:8c:b9:6a:e7:34:e1:16:05:19:57:7b:24:
a6:00:8a:35:47:ef:d4:cc:ef:20:88:bd:f9:4b:3a:b3:cb:93:
92:6e:a6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:07:30 2026 by rpki-client