
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft
File: J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft (raw, json)
Hash identifier: w9heeBtkapuDiCatfx9Z71Du7+jEaCuUdpMNrDjTdU4=
Subject key identifier: 0C:AB:45:FD:53:C7:D5:D3:6A:1A:B3:9A:9B:4D:C8:47:51:A5:1A:86
Authority key identifier: 27:DC:31:A9:63:6E:1C:1E:9A:5F:51:90:93:62:76:A6:79:E1:64:6A
Certificate issuer: /CN=27dc31a9636e1c1e9a5f5190936276a679e1646a
Certificate serial: 01A08C7B0BC6E1A863524DAB526694CD8143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:01:09 +0000
Manifest this update: Thu 10 Sep 2026 18:01:09 +0000
Manifest next update: Fri 11 Sep 2026 18:01:09 +0000
Files and hashes: 1: AlUMjDs1AMrse1G7Mm4Ls5MOqbg.roa (hash: 1qWTrC8IRHVNBmVAFfK+oN6U6pjXzgDE6zNivII8rew=)
2: FQ-cn1xD6KsvCiukzaSyL7Bi5fs.roa (hash: 9/gq5XTu7uOiRhd+dP7NFtGAPJ4cf/D1aTBzP0UWPcg=)
3: J50zmCtQdo-LbJV1zf8tg_pspRY.roa (hash: rmMwifoRriqaztxBUMCiGtVjFrOwYaPJiXLxhJjafM4=)
4: J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl (hash: e6IGKmQPU9Ssufc/13a6huqiSai9PxB8W5nA9E9tfYs=)
5: Jq-ed1QLe89-gO6ULPwLKZ71NmE.roa (hash: 1NLRbyHK8osbUIIyQ+NGdNAbsIQXKp6uKjtiu7OYwC0=)
6: b80T5aKo89J4YEAP6bAiheKe6EY.roa (hash: CLeP0I5fgLyLMgId9gEX6E6rFzYBTw+ow8e/05qzkMY=)
7: icPfEymP4sS-B5f6ECwDv6uqJfE.roa (hash: dEtKNt+6pxMCaYnPSrEzFG7rO6REUpLEotnEHbtCIIY=)
8: r0qZ8D2aTVCBnUaFMEdO5JjY_WE.roa (hash: vpPL8rRx0AJAgJ6HwLPSPxj+S6uKrcpsWXCyy/Hr0EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:0b:c6:e1:a8:63:52:4d:ab:52:66:94:cd:81:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dc31a9636e1c1e9a5f5190936276a679e1646a
Validity
Not Before: Sep 10 18:01:09 2026 GMT
Not After : Sep 11 18:01:09 2026 GMT
Subject: CN=0cab45fd53c7d5d36a1ab39a9b4dc84751a51a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d6:88:20:3b:38:36:dd:bf:83:3e:d9:20:75:
8d:e4:e7:b7:4f:94:a7:fd:bb:ca:eb:d6:ee:38:1e:
50:cb:9b:15:45:f2:76:12:50:dd:23:6e:7b:6b:98:
0b:94:40:2b:32:f1:4d:6f:85:3d:20:ea:d1:9b:c3:
4e:30:4d:dc:11:4e:20:b6:5b:8f:73:a4:9e:c1:05:
08:47:d4:98:2f:aa:28:3c:08:25:ee:94:b0:2d:d9:
ad:6d:21:f0:20:d4:b0:5c:27:43:8a:b8:ab:65:fc:
87:bd:c5:11:21:e9:a9:fd:e4:97:72:47:e0:dc:c6:
72:47:95:54:9a:6a:cd:89:fc:2a:bb:37:8d:12:7f:
a9:4c:b8:5f:7c:0f:72:5a:48:21:3f:30:a2:4d:9c:
a2:23:dc:b0:8a:00:f5:da:ad:90:f1:5f:9b:74:c0:
f9:e6:c6:ae:23:bd:01:a7:5e:d4:e3:c5:8f:ca:44:
00:e2:b4:5d:ea:25:4b:11:6f:9e:30:be:a6:92:5f:
f2:e7:ad:36:cb:c3:1d:d0:76:cb:35:70:35:08:bd:
05:a2:a5:f7:7f:68:72:5b:c4:6f:a8:e4:fb:3f:41:
41:d2:6f:b5:3f:29:b6:a6:40:bd:84:a7:92:4c:ad:
ed:a7:7a:22:78:3c:19:cf:15:46:6c:aa:0c:fd:cc:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AB:45:FD:53:C7:D5:D3:6A:1A:B3:9A:9B:4D:C8:47:51:A5:1A:86
X509v3 Authority Key Identifier:
keyid:27:DC:31:A9:63:6E:1C:1E:9A:5F:51:90:93:62:76:A6:79:E1:64:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a0:4f:83:3d:4c:f6:86:48:c4:a2:91:b4:a5:5a:09:bf:69:
aa:29:38:03:62:11:ef:a5:7f:07:40:2a:18:34:98:09:bc:1e:
8e:50:e9:f1:86:33:7a:9c:f6:bc:2e:39:d8:30:a3:c8:f3:91:
84:63:07:27:a6:cf:a5:df:d0:b5:7f:2c:ef:ff:38:f2:b3:e5:
b1:a2:7b:8a:ca:eb:94:bc:60:2c:19:e4:76:48:7a:1e:76:ce:
06:88:df:da:aa:4e:dd:96:58:1d:38:97:44:65:34:f0:0e:b5:
5b:41:e2:15:2c:f1:47:10:23:a3:fa:98:b1:64:f2:b1:7e:69:
65:0e:66:f2:01:13:02:2b:2c:77:f2:f0:89:f5:7d:6e:10:b4:
15:13:23:60:1e:4f:c8:8d:f6:71:dc:8c:c3:e0:1b:af:04:37:
38:30:1f:4c:57:a9:35:f6:02:ac:da:88:be:57:72:98:98:11:
75:a0:2f:bc:f6:be:1b:c5:c9:7b:54:d4:6f:30:5d:b2:94:98:
31:88:d8:cb:10:57:a0:ce:16:51:d9:0f:53:15:66:68:a0:29:
f3:b8:2f:3b:ec:8e:db:ab:71:8a:3a:60:86:ed:ad:dd:50:e2:
bc:37:0e:e3:2a:a0:11:80:e5:f0:29:fa:34:00:df:09:4f:17:
f2:55:e5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:56:24 2026 by rpki-client