Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
File: J3bWTqj9AotoiON0VXu5HwXuDsY.mft (raw, json)
Hash identifier: G6r4PIo+t86leu/KaapPvWWHRcustz/7ejxreLuE40Y=
Subject key identifier: 4C:72:4F:83:A4:64:D2:A3:EB:10:52:C2:5E:89:BE:AF:E2:4A:DB:98
Authority key identifier: 27:76:D6:4E:A8:FD:02:8B:68:88:E3:74:55:7B:B9:1F:05:EE:0E:C6
Certificate issuer: /CN=2776d64ea8fd028b6888e374557bb91f05ee0ec6
Certificate serial: 019D38D3D02EFEC77392CB1E84C4AB033CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
Manifest number: 0EA4
Signing time: Sun 29 Mar 2026 09:01:38 +0000
Manifest this update: Sun 29 Mar 2026 09:01:38 +0000
Manifest next update: Mon 30 Mar 2026 09:01:38 +0000
Files and hashes: 1: J3bWTqj9AotoiON0VXu5HwXuDsY.crl (hash: zK5FAIl26WV2aAIjCUnaZUFoJBuGk0co9sCL6XSeq/8=)
2: sdhGA-D8N0DheaeqCdaBETgkfIk.roa (hash: 4XflHV7qg++MD8lYex2YKEHuIVOaLfMa2L7b2xLJq54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:d0:2e:fe:c7:73:92:cb:1e:84:c4:ab:03:3c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2776d64ea8fd028b6888e374557bb91f05ee0ec6
Validity
Not Before: Mar 29 09:01:38 2026 GMT
Not After : Mar 30 09:01:38 2026 GMT
Subject: CN=4c724f83a464d2a3eb1052c25e89beafe24adb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e6:d8:31:e9:59:4d:a5:50:28:bd:85:b2:85:
6f:8d:93:ce:a1:ea:77:bd:95:51:10:20:26:3b:3d:
ec:4b:b9:ad:0a:7c:70:54:03:fb:0d:65:8e:fc:72:
ab:7b:41:af:6c:8c:55:e0:47:f6:ce:95:3d:da:bc:
e1:0c:21:aa:54:4e:dc:59:07:4a:88:e3:96:f0:7e:
4c:14:cf:8b:66:90:74:1b:82:a9:87:96:8f:34:78:
f0:34:06:85:03:d1:3d:46:07:c8:af:46:bb:e3:19:
20:bb:92:f8:bd:af:cd:07:f1:cf:02:69:14:df:2f:
50:36:34:f0:81:1a:c5:68:d1:d9:f1:96:62:0e:dd:
9f:ef:01:09:43:81:88:c2:65:d4:50:6c:71:f6:4b:
44:e7:78:97:f0:be:5a:7b:82:ca:b3:80:39:2c:69:
94:f4:16:fc:e4:d9:14:52:39:97:3c:71:26:33:0f:
66:0d:8f:a5:8f:7f:31:d5:c5:9b:49:fc:80:c0:02:
d4:41:f0:4c:ba:98:39:38:e6:29:4f:02:0f:2f:4a:
f5:9b:3a:51:35:98:7b:27:a5:6e:fc:12:5b:86:58:
c2:17:1d:c7:ed:51:52:07:b3:4c:fc:61:94:32:bb:
76:ec:e3:e3:f1:44:61:15:4d:ef:6d:07:ed:74:3a:
ce:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:72:4F:83:A4:64:D2:A3:EB:10:52:C2:5E:89:BE:AF:E2:4A:DB:98
X509v3 Authority Key Identifier:
keyid:27:76:D6:4E:A8:FD:02:8B:68:88:E3:74:55:7B:B9:1F:05:EE:0E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:41:bc:64:ad:2d:6d:a5:fa:4f:56:46:26:2d:f6:95:0d:c4:
f4:49:ba:72:5a:1e:02:59:33:8f:f1:57:c3:41:38:88:1b:82:
f8:bf:ca:4b:e2:71:fc:e0:1c:eb:e4:bb:c7:86:44:ca:81:1d:
e1:dc:cf:3b:9c:ab:f5:70:c0:45:05:44:50:24:ae:49:35:0b:
e6:7a:88:66:35:d9:5d:10:4a:99:9f:d1:46:45:d2:ec:ce:f5:
c6:7f:f6:3d:be:2b:5c:56:e6:80:d4:18:12:2f:17:b3:d3:3a:
f8:be:e6:82:5e:fe:01:66:d0:00:ed:95:a9:36:24:e8:01:28:
cd:8c:be:dc:aa:28:37:76:4c:aa:8a:76:ce:d9:ab:95:00:b9:
e0:7b:99:2a:de:22:85:7d:15:b2:2b:8b:fb:b1:f1:d7:67:2f:
8d:06:12:fc:5d:36:f1:6b:e6:ae:25:b2:4b:7a:15:3a:44:30:
f6:9b:14:75:1d:43:48:26:4a:32:88:ef:3b:9b:82:f2:da:63:
6d:5f:d2:70:7b:c2:e9:21:a7:ce:f6:a3:d4:e5:a7:59:0a:33:
3e:01:45:74:4c:ff:22:45:17:14:88:6a:59:58:3c:7b:97:2e:
04:1b:f3:85:a4:8f:3a:55:aa:e3:d6:72:e9:a5:00:e1:74:49:
c9:bf:b3:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0409Au/sdzkssehMSrAzygMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NzZkNjRlYThmZDAyOGI2ODg4ZTM3NDU1N2JiOTFmMDVl
ZTBlYzYwHhcNMjYwMzI5MDkwMTM4WhcNMjYwMzMwMDkwMTM4WjAzMTEwLwYDVQQD
Eyg0YzcyNGY4M2E0NjRkMmEzZWIxMDUyYzI1ZTg5YmVhZmUyNGFkYjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+bYMelZTaVQKL2FsoVvjZPOoep3
vZVRECAmOz3sS7mtCnxwVAP7DWWO/HKre0GvbIxV4Ef2zpU92rzhDCGqVE7cWQdK
iOOW8H5MFM+LZpB0G4Kph5aPNHjwNAaFA9E9RgfIr0a74xkgu5L4va/NB/HPAmkU
3y9QNjTwgRrFaNHZ8ZZiDt2f7wEJQ4GIwmXUUGxx9ktE53iX8L5ae4LKs4A5LGmU
9Bb85NkUUjmXPHEmMw9mDY+lj38x1cWbSfyAwALUQfBMupg5OOYpTwIPL0r1mzpR
NZh7J6Vu/BJbhljCFx3H7VFSB7NM/GGUMrt27OPj8URhFU3vbQftdDrO+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExyT4OkZNKj6xBSwl6Jvq/iStuYMB8GA1UdIwQY
MBaAFCd21k6o/QKLaIjjdFV7uR8F7g7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjNiV1RxajlBb3RvaU9OMFZYdTVId1h1RHNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zZWQ5N2QtZTg2Ny00MjVmLTg3NDMt
MGRhZWQzYWE2MjQ5LzEvSjNiV1RxajlBb3RvaU9OMFZYdTVId1h1RHNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8zZWQ5N2QtZTg2Ny00MjVmLTg3NDMtMGRhZWQzYWE2MjQ5
LzEvSjNiV1RxajlBb3RvaU9OMFZYdTVId1h1RHNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkG8ZK0t
baX6T1ZGJi32lQ3E9Em6cloeAlkzj/FXw0E4iBuC+L/KS+Jx/OAc6+S7x4ZEyoEd
4dzPO5yr9XDARQVEUCSuSTUL5nqIZjXZXRBKmZ/RRkXS7M71xn/2Pb4rXFbmgNQY
Ei8Xs9M6+L7mgl7+AWbQAO2VqTYk6AEozYy+3KooN3ZMqop2ztmrlQC54HuZKt4i
hX0VsiuL+7Hx12cvjQYS/F028WvmriWyS3oVOkQw9psUdR1DSCZKMojvO5uC8tpj
bV/ScHvC6SGnzvaj1OWnWQozPgFFdEz/IkUXFIhqWVg8e5cuBBvzhaSPOlWq49Zy
6aUA4XRJyb+zVA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:14 2026 by rpki-client