Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft
File: J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft (raw, json)
Hash identifier: OYAMInXRpmMuBRXoZ8pf1sSfkG/Da03qgSJxrOD8v6E=
Subject key identifier: 5C:54:EE:A0:48:75:F6:C1:18:D4:D4:40:66:7E:73:84:08:6E:42:27
Authority key identifier: 27:FC:A5:B7:A7:7D:88:76:49:F6:8A:45:C9:0D:66:7C:76:50:01:64
Certificate issuer: /CN=27fca5b7a77d887649f68a45c90d667c76500164
Certificate serial: 01A18375550C35989F84E24DA2D6B97B87B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft
Manifest number: 0427
Signing time: Wed 28 Oct 2026 17:01:07 +0000
Manifest this update: Wed 28 Oct 2026 17:01:07 +0000
Manifest next update: Thu 29 Oct 2026 17:01:07 +0000
Files and hashes: 1: J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.crl (hash: nURRwiEDr3b3ay9klH6Cnajp4mDk9Ok8ej8lM4g1uZo=)
2: Pw54cR_7mXTkLCTeaH82cHb0imE.roa (hash: kgaWLO8vhTm+FZNrLVuG24dAqylNjIiRO5sGejr42ro=)
3: tdhlzfacO8WrsoVHSei0cAaQkIY.roa (hash: rQkZvbNaqYP3J0TMZHz+SZ9Zlj8EyrQh6pS9XIjNqgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:75:55:0c:35:98:9f:84:e2:4d:a2:d6:b9:7b:87:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27fca5b7a77d887649f68a45c90d667c76500164
Validity
Not Before: Oct 28 17:01:07 2026 GMT
Not After : Oct 29 17:01:07 2026 GMT
Subject: CN=5c54eea04875f6c118d4d440667e7384086e4227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:d7:82:5c:7c:5b:9f:df:aa:49:f5:13:13:
c5:2f:1a:6f:65:cf:fa:d8:38:0f:f1:69:64:1e:a1:
32:07:af:f9:a4:95:3d:b7:ae:6a:18:04:bb:e3:7f:
2a:e2:8e:c5:e3:0d:52:c5:37:9b:cd:f6:43:d1:69:
db:18:28:13:7f:f2:94:52:fe:12:8c:d1:fb:6d:56:
d1:fb:19:77:18:55:61:3f:17:88:04:b3:ed:51:23:
60:80:78:ec:e8:b9:66:22:e2:75:2d:6f:c1:36:a3:
9a:19:6c:1c:ca:90:1d:f1:51:46:9c:9b:f8:91:81:
af:8f:b4:a5:26:b3:3d:0e:82:45:f5:b7:2e:6a:49:
54:7d:c7:74:72:1e:de:dc:80:8c:d2:07:8c:f5:56:
c5:c7:0b:87:ef:a4:80:07:67:53:78:33:10:ce:3c:
e6:fe:8b:f5:0e:0e:9b:59:09:22:cc:b0:0e:07:ca:
8d:d1:41:85:7f:59:ed:e4:37:87:fe:1e:c8:3f:58:
ed:b4:13:00:58:56:7f:71:19:6d:5a:d6:f9:e1:06:
80:70:d1:46:e0:ef:e1:d8:22:c7:40:c8:b8:f5:c5:
d1:c4:d5:3d:fc:0f:ed:fe:ee:ab:6c:8b:d6:6b:bf:
55:02:fd:f4:fc:ae:fb:3e:42:0f:81:03:c3:d9:8d:
3c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:54:EE:A0:48:75:F6:C1:18:D4:D4:40:66:7E:73:84:08:6E:42:27
X509v3 Authority Key Identifier:
keyid:27:FC:A5:B7:A7:7D:88:76:49:F6:8A:45:C9:0D:66:7C:76:50:01:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ad:9d:96:82:dc:c1:5e:c8:6e:59:60:8e:b8:62:a8:4b:69:
d0:f4:4b:34:43:30:12:26:0b:f2:04:ff:a1:79:26:a7:a5:d6:
5d:00:5a:82:33:67:f6:60:c0:fe:c4:82:67:e5:08:ea:da:46:
99:ec:dc:df:7a:05:30:f9:b2:85:c8:08:32:26:68:8e:7a:82:
a2:2d:65:e9:d0:99:1f:68:e5:59:6e:12:93:32:f6:24:7c:9f:
fc:19:31:b6:f2:72:4b:af:66:d1:34:c6:eb:7e:d2:91:8e:85:
81:90:41:75:24:ec:a8:0c:03:f6:60:9b:bc:d9:5b:b2:bb:5a:
71:93:f3:a2:62:f6:ff:64:86:ce:3f:02:da:bf:48:d9:82:25:
0e:d9:48:e7:9c:cb:05:39:56:9f:46:36:88:65:50:11:6f:ad:
19:a0:36:de:93:e6:2a:20:47:55:c0:47:04:cb:d4:a6:ea:e1:
bd:a2:c0:db:80:1e:34:f5:21:70:8b:6d:40:48:97:f2:3d:7f:
9c:04:47:d5:18:8c:58:c5:81:64:67:92:80:3e:d7:bc:91:76:
28:2a:92:aa:a3:5a:a0:92:f8:51:15:4f:93:5b:c6:51:3f:26:
cd:94:c7:d7:78:45:63:f3:4c:e0:66:16:6f:e8:34:cb:98:c9:
c8:14:aa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:44:25 2026 by rpki-client