
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
File: J_lYw7dZsseJb17WY-gHeB8_9aI.mft (raw, json)
Hash identifier: b884ZQrLy0QkuWuiLVEToQVFsGlWQqhE1+syTjp6Oic=
Subject key identifier: 66:19:5A:5E:D1:92:B7:E3:61:17:A1:08:65:2D:E6:D1:E0:0B:C4:97
Authority key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
Certificate issuer: /CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Certificate serial: 01A122416F698628855F1A781D8C3D46533D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
Manifest number: 12C4
Signing time: Fri 09 Oct 2026 20:01:16 +0000
Manifest this update: Fri 09 Oct 2026 20:01:16 +0000
Manifest next update: Sat 10 Oct 2026 20:01:16 +0000
Files and hashes: 1: ElTViivmjGxEdxaxj11VFkP14YI.roa (hash: YUVaRGC2xsx0b6XubgQiQ6H3U/a4QTrhpMWWRuXADx4=)
2: J_lYw7dZsseJb17WY-gHeB8_9aI.crl (hash: 0g6Gh3OpoLt0DlX9szi9chV/9O/ttwWglbuju+0EYnc=)
3: MH507cRFXNNeqadxQdKywhHkylA.roa (hash: SJpj63kNuERbqmJKNAG4loDyhiVzSuV9bopPuk1oXO0=)
4: yXUQWiWAuj52X2blMDF0ySpC9kY.roa (hash: 2dpSoguExI4LCzpUhvwGpd2mxrAlFFlJZgWzZagSNCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:41:6f:69:86:28:85:5f:1a:78:1d:8c:3d:46:53:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Validity
Not Before: Oct 9 20:01:16 2026 GMT
Not After : Oct 10 20:01:16 2026 GMT
Subject: CN=66195a5ed192b7e36117a108652de6d1e00bc497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:1e:5c:24:7f:c7:ee:2c:35:9a:32:90:4d:
da:5f:36:d6:a8:46:31:27:d1:6a:68:aa:ef:3b:12:
7e:e6:e9:48:3a:ed:4d:f6:69:c7:9c:02:24:26:0d:
35:51:9f:a5:d8:0e:4e:38:23:4c:c0:53:ac:54:05:
ae:10:fc:d6:b8:2d:cf:d3:c4:84:80:64:66:7b:4f:
3a:29:05:6d:04:82:d0:ae:46:92:26:3d:7e:78:73:
cb:d0:31:27:34:01:d8:7d:f6:70:ef:bc:3a:05:91:
b9:dc:cb:08:f2:51:4f:49:dc:98:37:e0:b3:8b:67:
d4:81:69:81:db:21:7d:92:b0:04:23:6b:a7:6d:6e:
ad:07:22:22:95:81:35:21:92:ec:60:98:6c:a2:6d:
81:84:3e:e4:ab:d9:7a:25:be:2e:a1:9c:89:0f:c9:
0c:55:84:88:a6:f5:49:37:a0:cd:32:f5:95:5f:22:
8b:a6:7c:a0:68:b1:b6:a7:56:21:1c:8c:3b:2a:ad:
07:b6:60:7a:1b:f4:cc:53:04:02:e0:af:3e:b2:70:
b6:5d:ce:de:7f:e5:ef:41:99:a4:f2:6e:4e:b1:d9:
9e:02:42:f3:1b:dd:d5:a7:38:b0:a5:e2:32:0d:60:
91:1e:17:26:f0:f7:b8:8d:9a:b7:bf:e4:ad:41:30:
40:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:19:5A:5E:D1:92:B7:E3:61:17:A1:08:65:2D:E6:D1:E0:0B:C4:97
X509v3 Authority Key Identifier:
keyid:27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:50:ba:18:a7:2e:63:fc:40:ae:6a:32:79:14:a5:58:be:90:
f5:ea:6c:3d:d6:19:77:5c:af:b0:f4:73:00:d4:e4:be:a1:2a:
9e:56:0e:66:5a:3e:d0:08:c3:b5:81:83:94:72:5e:3d:06:57:
48:a4:d0:13:be:7c:cf:ad:8f:2f:a3:16:cb:ee:f8:4a:c5:f6:
a5:81:2c:da:49:ed:00:e0:17:1f:96:b2:5d:41:56:fe:49:26:
8f:71:41:17:60:b8:5c:db:c8:54:b2:55:e5:d8:e2:2c:2c:7b:
5c:e4:d1:59:e6:d5:9e:3b:b8:86:a6:41:1e:13:d0:df:6b:ea:
33:1e:38:57:dc:d9:9c:cd:80:12:49:a2:54:8f:b9:9e:95:7d:
88:57:6c:cf:d9:c7:1a:a1:b4:24:7d:df:78:a6:7e:f8:80:fd:
f9:72:5b:22:a1:d9:02:ad:7b:77:bf:50:b7:3f:21:4f:3e:d1:
e7:98:be:8f:77:ef:f7:0c:cd:d3:ad:01:4d:9e:8e:50:66:1a:
20:36:0b:98:f1:e4:e2:71:e9:b8:56:9e:c0:ff:0d:6e:0f:27:
5a:d2:2b:6e:e7:99:be:2e:2d:6e:0b:43:e1:e7:8d:3d:94:27:
84:22:ce:41:1f:b6:d4:ff:4f:1c:41:80:5f:a1:75:bc:c7:99:
cc:ec:a9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:39:42 2026 by rpki-client