Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft
File: J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft (raw, json)
Hash identifier: dmcNZD4ZBZ/WeEVkK3dRL/mO2nXS9N2hRE5TZ8mRh2E=
Subject key identifier: E4:67:64:F3:E8:1E:4B:43:16:CC:1C:A8:F6:50:C4:28:66:6E:CE:0A
Authority key identifier: 27:91:A7:B8:EE:84:40:52:2B:0B:55:30:C8:5D:CE:1D:73:F9:67:B7
Certificate issuer: /CN=2791a7b8ee8440522b0b5530c85dce1d73f967b7
Certificate serial: 019D38D2A3F815BA7DE960E733EA3FC9BF52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft
Manifest number: 0857
Signing time: Sun 29 Mar 2026 09:00:21 +0000
Manifest this update: Sun 29 Mar 2026 09:00:21 +0000
Manifest next update: Mon 30 Mar 2026 09:00:21 +0000
Files and hashes: 1: 90bA_1c0b9wqSfAPCrrQL_H-kZA.roa (hash: r0eCLDLHOhzDC6shAKnaCsXhzGuMaX3Bckc660qpoRM=)
2: J5GnuO6EQFIrC1UwyF3OHXP5Z7c.crl (hash: 0qsiilK3AT6xbPyFrrUWN3HHdogFy4NBaHuw7Fgnl2Y=)
3: qx8ZrK3WQLJkbH55xMHBPltKk88.roa (hash: jcmV2sIKz7lybDK1rHLrSEaabC9BpZRW23JHTDg1hhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a3:f8:15:ba:7d:e9:60:e7:33:ea:3f:c9:bf:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2791a7b8ee8440522b0b5530c85dce1d73f967b7
Validity
Not Before: Mar 29 09:00:21 2026 GMT
Not After : Mar 30 09:00:21 2026 GMT
Subject: CN=e46764f3e81e4b4316cc1ca8f650c428666ece0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7e:e2:d1:81:37:0e:1f:dd:04:b2:d6:fa:80:
19:67:7f:40:0a:16:ac:67:47:d1:90:24:d7:af:8d:
c8:05:11:16:e4:b4:fd:73:84:0f:b3:9e:c5:f6:53:
95:d3:9c:ce:ba:fd:d9:fe:d2:e1:45:9e:c6:d1:1c:
88:bc:85:49:79:98:50:4e:1d:da:cb:06:be:7d:1c:
5a:6e:a7:78:ba:31:48:62:c3:0f:d4:52:eb:7b:95:
8e:97:81:2d:b7:e5:09:51:c3:6f:63:c5:92:3e:59:
bd:c1:27:b9:a7:7a:b2:11:73:9c:d1:f9:7f:86:5a:
25:f5:eb:da:46:2d:fd:87:e9:a2:d2:c7:8c:2f:c1:
4c:3c:85:4d:f6:8d:45:c9:a9:0f:8d:de:53:06:e5:
a8:a8:8d:1f:f3:26:f4:8a:73:0e:37:27:2c:dd:d5:
03:0f:2d:7c:1c:35:86:a8:11:d9:af:87:8a:bf:ae:
e2:4f:8a:fd:f2:a0:aa:d1:8d:4f:b5:03:91:8c:d2:
1f:ee:fd:cf:6f:76:4f:9f:7f:5d:63:ad:0b:f9:12:
11:ae:b2:af:77:72:b5:1e:72:ec:ed:63:10:70:16:
64:b1:dc:fc:bb:16:a2:91:b1:f2:89:44:b4:26:05:
86:b5:c6:00:f3:9e:03:b7:26:df:fb:ac:08:59:13:
c6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:67:64:F3:E8:1E:4B:43:16:CC:1C:A8:F6:50:C4:28:66:6E:CE:0A
X509v3 Authority Key Identifier:
keyid:27:91:A7:B8:EE:84:40:52:2B:0B:55:30:C8:5D:CE:1D:73:F9:67:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0e:bf:4e:f0:db:31:ce:d3:80:f3:f4:af:bc:02:4d:2a:7d:
b6:67:2b:b5:db:89:5e:13:df:4e:32:fc:5b:04:ad:ea:88:e4:
c1:c6:14:4a:ee:35:72:07:da:f5:46:6c:4a:1b:e5:ca:b0:08:
70:0d:60:42:02:be:35:f4:d6:5a:c2:19:4b:db:88:38:80:31:
57:32:b9:50:3a:8c:5c:4b:61:37:27:89:77:a4:ba:ee:da:96:
b3:99:8b:81:51:43:2f:be:3a:46:9f:4b:d7:64:e0:e9:bd:d3:
ae:5c:3f:af:7f:ab:e5:1a:c4:a2:1c:57:8b:29:11:44:60:f2:
9c:9e:b7:30:a6:7b:84:8f:c8:3e:b5:f0:0d:10:1d:4b:f0:50:
cd:ef:1a:c4:7c:c3:a5:72:70:14:d8:3e:aa:1d:89:09:1f:43:
ac:09:c3:b6:84:d8:b1:fa:71:ea:b9:18:c8:07:b4:cd:65:12:
3d:bf:f7:26:48:f5:e7:aa:e5:62:1a:2c:ff:16:b0:cf:4c:e3:
b4:6c:24:35:e4:1d:d9:61:58:ac:75:1f:7a:48:6f:3f:26:63:
cb:a4:e2:5b:f2:36:51:6a:5d:93:60:1e:41:e6:c7:96:80:3d:
20:cc:a5:60:f6:79:e0:82:46:88:79:6d:b7:a3:ec:30:d3:58:
90:6e:a9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:13 2026 by rpki-client