Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft
File: J1qrffuxUqZGrfMnOzGqXd5kod8.mft (raw, json)
Hash identifier: c0bERbFK9nobmYe8uRhtoC4OUi9bqcltzeSLuuptQVQ=
Subject key identifier: E2:35:4E:B3:7A:F2:9E:E5:F5:6C:8F:A9:A9:80:14:F8:D5:6D:5C:C6
Authority key identifier: 27:5A:AB:7D:FB:B1:52:A6:46:AD:F3:27:3B:31:AA:5D:DE:64:A1:DF
Certificate issuer: /CN=275aab7dfbb152a646adf3273b31aa5dde64a1df
Certificate serial: 019D38D3C365C95E670261CFBD6FF4E46AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft
Manifest number: 0EBE
Signing time: Sun 29 Mar 2026 09:01:35 +0000
Manifest this update: Sun 29 Mar 2026 09:01:35 +0000
Manifest next update: Mon 30 Mar 2026 09:01:35 +0000
Files and hashes: 1: 0lwp4oYsVqGcXPYJsbA37ojFUOY.roa (hash: Xr1TyxzvlPR09HeBPc7XwVXyf4HkStFhIXRKsCvU9zI=)
2: J1qrffuxUqZGrfMnOzGqXd5kod8.crl (hash: NbItE+91+FRuimXcXSvCDDrJfqsweZadMfA1cH4AovA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c3:65:c9:5e:67:02:61:cf:bd:6f:f4:e4:6a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=275aab7dfbb152a646adf3273b31aa5dde64a1df
Validity
Not Before: Mar 29 09:01:35 2026 GMT
Not After : Mar 30 09:01:35 2026 GMT
Subject: CN=e2354eb37af29ee5f56c8fa9a98014f8d56d5cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fb:27:c4:9e:e0:90:5f:e7:21:b7:ab:fb:8c:
c7:ad:41:8c:05:fd:68:e7:ba:59:97:4a:00:bd:4b:
db:5e:fa:27:6e:1f:02:0c:1a:7a:6e:e6:90:55:a2:
31:a3:ff:01:1f:32:4e:e4:fc:f1:dd:53:25:d7:e5:
ca:a9:50:f7:73:c4:be:59:30:06:89:a5:07:4e:ae:
89:b7:78:b7:b3:53:ce:b6:6f:84:4d:db:a0:a6:f8:
3f:29:46:cb:d8:a2:7e:87:01:34:94:5d:a9:e3:b9:
97:74:48:40:52:5f:75:c3:79:a4:ea:b6:50:8b:0f:
9d:38:c9:fa:8b:82:ed:2c:c8:74:98:9f:d2:a7:81:
d1:7d:52:06:03:dc:7e:d8:ab:39:99:be:65:8b:89:
75:fd:da:c7:8a:49:53:62:94:2c:6b:1d:81:ed:9d:
50:90:81:70:1a:f5:ce:e7:59:5b:69:ab:12:19:49:
e3:8b:7d:d3:cb:02:07:6b:c4:90:ed:0d:b7:ef:a9:
52:10:4b:78:a0:0b:9a:47:6e:f4:90:ae:ca:6e:42:
65:af:69:6c:0f:ec:01:36:d8:2f:7a:31:a1:bb:76:
bb:d4:10:f0:ed:f1:34:6a:6f:2a:b9:36:bb:df:97:
2c:78:c0:1d:d4:55:a8:0c:5e:6b:dc:75:85:bf:03:
99:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:35:4E:B3:7A:F2:9E:E5:F5:6C:8F:A9:A9:80:14:F8:D5:6D:5C:C6
X509v3 Authority Key Identifier:
keyid:27:5A:AB:7D:FB:B1:52:A6:46:AD:F3:27:3B:31:AA:5D:DE:64:A1:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:81:ee:a1:60:82:b4:dc:83:27:18:87:ab:7b:c8:45:1b:0e:
e2:da:8b:93:8f:49:51:ba:6e:bb:bb:94:66:62:41:36:1e:fd:
77:ba:f3:b8:9e:d5:45:f8:89:61:41:18:9c:e3:c2:e4:fc:91:
b2:b3:74:5b:f3:d2:f8:63:28:b3:da:03:d5:62:55:d7:54:61:
ec:5d:f9:c9:58:e2:c1:f8:c1:85:bd:b6:1f:73:af:bc:ae:f5:
b7:45:6f:b6:b0:b2:53:66:54:db:56:2a:9c:bb:9e:38:1b:16:
df:80:07:b2:c5:83:86:d8:ca:a9:16:f9:be:fa:2d:55:f4:be:
6e:6f:f4:52:0a:0a:e6:80:75:2c:f0:71:65:00:38:20:e4:45:
72:00:41:95:55:38:17:ed:e4:3b:cc:47:7b:09:a3:ff:70:eb:
d9:ec:b2:a0:4c:15:1f:fd:bc:2b:5a:a6:f2:4b:7d:53:d9:08:
a8:dd:06:df:8a:70:f6:b6:71:be:ff:d2:c6:97:2b:53:ac:2a:
8e:46:af:e2:44:e6:c9:c6:ae:d7:9e:9c:68:6f:4f:b5:0f:98:
b2:3e:42:db:17:f6:83:7b:c8:6d:0b:c0:53:db:06:1a:b5:a5:
7b:0e:17:6d:55:d8:8b:8d:58:7f:2c:33:ee:53:5c:3a:4f:37:
d9:d2:50:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:22 2026 by rpki-client