Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
File: J_lYw7dZsseJb17WY-gHeB8_9aI.mft (raw, json)
Hash identifier: GJ1Qj4xhJcNeNGMi5jHoyqWpqxsQhzlAcpyCWDt2HgE=
Subject key identifier: 24:09:C4:24:56:CD:31:9F:B3:93:70:0A:C7:94:A3:84:4B:59:4A:B7
Authority key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
Certificate issuer: /CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Certificate serial: 019E4A32125AE656725A9FCC65DC213B10A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
Manifest number: 114B
Signing time: Thu 21 May 2026 11:00:55 +0000
Manifest this update: Thu 21 May 2026 11:00:55 +0000
Manifest next update: Fri 22 May 2026 11:00:55 +0000
Files and hashes: 1: ElTViivmjGxEdxaxj11VFkP14YI.roa (hash: YUVaRGC2xsx0b6XubgQiQ6H3U/a4QTrhpMWWRuXADx4=)
2: J_lYw7dZsseJb17WY-gHeB8_9aI.crl (hash: bi4gMluQERXOX5EAY1O7advF161VGaQ12WVhG8u3Ibo=)
3: MH507cRFXNNeqadxQdKywhHkylA.roa (hash: SJpj63kNuERbqmJKNAG4loDyhiVzSuV9bopPuk1oXO0=)
4: yXUQWiWAuj52X2blMDF0ySpC9kY.roa (hash: 2dpSoguExI4LCzpUhvwGpd2mxrAlFFlJZgWzZagSNCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4a:32:12:5a:e6:56:72:5a:9f:cc:65:dc:21:3b:10:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Validity
Not Before: May 21 11:00:55 2026 GMT
Not After : May 22 11:00:55 2026 GMT
Subject: CN=2409c42456cd319fb393700ac794a3844b594ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:81:b0:a1:68:75:ce:4c:ac:dd:fb:ac:51:
f0:9f:96:31:8d:4a:9e:2f:d6:42:96:ea:78:cc:f0:
38:d5:d1:c4:c1:e4:a9:8d:c5:c2:1e:5c:94:d2:3b:
dd:50:0f:68:91:8f:78:60:0e:c6:1d:b1:f2:96:ec:
21:db:72:e6:02:bb:92:99:83:e2:12:49:cd:42:c8:
84:bb:d7:6b:76:c1:bf:b7:c7:0d:60:f7:39:a0:23:
a2:14:7c:7f:43:b0:31:46:7e:a1:0e:c5:9b:9b:a0:
ba:2f:b5:55:d8:96:66:2b:57:9f:0a:f5:1a:09:5d:
15:d7:d3:32:f6:1b:86:7f:b6:54:63:b3:ed:b0:57:
29:85:8d:67:e9:bb:7c:9c:11:13:5d:ea:28:a1:c8:
43:15:f0:d5:2a:e9:87:3f:52:28:10:ca:13:22:52:
12:f6:16:e7:73:fb:ce:19:e4:58:c0:fb:d0:3f:d3:
cb:e7:7a:31:c8:51:75:33:ba:a7:66:1c:10:fc:be:
76:21:ad:94:c7:94:42:56:10:85:93:01:7f:cd:6c:
c8:6b:f3:ce:78:6c:37:a0:54:5f:89:93:b4:39:47:
c8:e6:01:af:da:53:55:db:a9:e6:c2:b5:32:bf:ee:
4d:3a:87:35:f8:f8:78:6c:79:21:0f:e6:e4:34:2f:
43:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:09:C4:24:56:CD:31:9F:B3:93:70:0A:C7:94:A3:84:4B:59:4A:B7
X509v3 Authority Key Identifier:
keyid:27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:6d:20:7f:2d:0e:8d:4d:7c:d2:e3:42:ae:40:79:41:f8:01:
ef:38:ac:c9:9e:03:a1:3b:8a:a6:78:21:34:77:83:22:99:a6:
7b:3e:8d:d4:4d:55:bb:87:c6:21:60:01:de:c8:22:dc:04:4d:
76:d3:48:78:98:47:4d:64:8a:7b:76:0d:6c:29:03:6a:4f:0c:
aa:e3:5f:36:52:a4:78:b7:b8:c9:f9:c5:fd:ae:e7:53:9f:79:
eb:c3:1f:4c:87:a2:0b:49:12:eb:2f:3e:fd:f9:38:62:bf:79:
fd:33:2c:68:8e:14:26:c9:48:db:84:eb:8d:79:0b:e7:c2:c7:
87:80:59:ff:05:a8:f4:12:4f:2d:24:8c:20:2d:05:ac:9a:5d:
28:fd:6a:8e:77:25:55:c9:99:2b:25:d7:7c:30:57:97:7f:ab:
07:e1:64:0a:14:74:4f:0f:7d:ed:87:0a:a6:74:13:e3:d8:71:
80:1f:94:5b:6e:0c:c1:20:41:8a:b5:d8:65:b5:2a:17:f5:0e:
b7:75:c7:e2:f3:97:9d:94:f4:13:87:cc:db:12:b9:82:29:11:
5d:c6:94:5e:ac:cc:cb:bd:51:43:88:0c:4c:9a:dc:3e:f4:8b:
ae:c7:7b:65:e3:fd:97:2b:af:3c:a7:2a:ec:9f:60:b7:87:7c:
4e:70:58:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 15:40:26 2026 by rpki-client