Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
File: J_lYw7dZsseJb17WY-gHeB8_9aI.mft (raw, json)
Hash identifier: vmEYAVjsDv6xRAYydB3cPBHPiUmcfFu5fAb8GEEv4nw=
Subject key identifier: 3C:09:A5:9E:51:ED:C1:89:FD:36:51:E7:6F:49:4B:E6:2D:26:60:3C
Authority key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
Certificate issuer: /CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Certificate serial: 01A0216840FAB1B1C09BDBB5ACC36828A5A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
Manifest number: 123F
Signing time: Thu 20 Aug 2026 23:01:15 +0000
Manifest this update: Thu 20 Aug 2026 23:01:15 +0000
Manifest next update: Fri 21 Aug 2026 23:01:15 +0000
Files and hashes: 1: ElTViivmjGxEdxaxj11VFkP14YI.roa (hash: YUVaRGC2xsx0b6XubgQiQ6H3U/a4QTrhpMWWRuXADx4=)
2: J_lYw7dZsseJb17WY-gHeB8_9aI.crl (hash: zhVGpDuM6J/QdyCmBITyCYQkOAjgnMNHORYayBrejp8=)
3: MH507cRFXNNeqadxQdKywhHkylA.roa (hash: SJpj63kNuERbqmJKNAG4loDyhiVzSuV9bopPuk1oXO0=)
4: yXUQWiWAuj52X2blMDF0ySpC9kY.roa (hash: 2dpSoguExI4LCzpUhvwGpd2mxrAlFFlJZgWzZagSNCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:21:68:40:fa:b1:b1:c0:9b:db:b5:ac:c3:68:28:a5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Validity
Not Before: Aug 20 23:01:15 2026 GMT
Not After : Aug 21 23:01:15 2026 GMT
Subject: CN=3c09a59e51edc189fd3651e76f494be62d26603c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9c:97:ee:7a:63:a4:d1:4d:0a:4e:dd:27:d1:
34:ce:10:d1:4b:46:13:4d:47:46:7c:1a:70:91:f5:
a8:65:7b:54:7d:ea:9b:de:cc:50:48:f6:16:a2:f4:
f7:aa:b8:1b:8d:6c:22:8f:d0:ac:8b:ba:5d:eb:a9:
fb:8b:ce:b1:6b:43:2f:8d:44:3a:41:3f:f9:54:ae:
fa:52:21:c9:35:b1:c6:9e:82:32:da:6d:c6:cc:48:
16:56:25:b4:36:14:95:c7:f9:0c:cf:76:3f:a4:dc:
ff:7e:be:17:99:94:74:17:93:4e:3f:67:c6:07:2e:
d6:a8:08:fa:f2:f3:1d:a7:20:c2:c5:b1:59:99:2e:
01:b7:4a:ac:09:a9:6f:7b:26:bf:ed:d6:da:f7:72:
30:1b:90:1d:8a:62:64:be:0e:1b:b4:f6:44:f1:0b:
c5:b3:70:87:31:b2:16:b1:d1:11:3b:2c:6a:24:60:
97:b6:96:11:96:0d:ed:53:11:64:97:7a:b6:01:ce:
00:72:b4:f4:3c:71:b6:12:0e:4d:1f:8c:98:aa:41:
e3:87:68:ff:b8:e1:6b:de:91:43:46:6b:e5:b4:bb:
2a:8c:30:c1:a3:e9:e7:e5:6b:ff:5d:41:24:0e:cc:
0d:78:a1:4e:38:69:ee:db:72:3a:aa:34:1f:b4:0b:
9a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:09:A5:9E:51:ED:C1:89:FD:36:51:E7:6F:49:4B:E6:2D:26:60:3C
X509v3 Authority Key Identifier:
keyid:27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2a:cc:1c:4e:56:e1:8e:26:3e:a1:8a:e0:82:9b:0a:19:31:
51:14:31:6c:ea:24:bf:1d:63:f1:d8:77:90:fa:7f:ca:c5:1a:
f6:27:a1:d1:18:98:cd:89:50:3f:ea:f4:6d:54:b9:d4:af:55:
2f:8a:60:a9:17:4b:bf:ee:38:9d:ae:1a:b8:81:58:a1:04:07:
21:60:59:4e:ea:0d:80:37:ff:46:7b:cf:55:b8:93:ff:31:7a:
f3:3d:59:82:d7:f3:d7:f6:e8:fe:cf:38:c2:f6:8e:84:13:ba:
db:2d:1e:c8:ef:0d:c5:2f:ad:6b:29:c6:ff:78:9e:23:06:72:
06:9e:fe:68:6e:bb:c4:fd:93:69:bb:1c:82:ac:9d:13:c6:cf:
94:5e:1f:45:05:20:af:8a:03:bf:0c:b9:f7:c5:3e:d4:59:ba:
7c:25:75:8d:4a:82:cf:d8:6e:5c:a2:9c:48:61:e3:6c:0b:13:
e6:3b:95:fe:1b:93:6f:6c:60:ba:d6:b5:cb:d9:7e:5c:09:6c:
ac:cc:10:b7:d5:b5:a4:9c:fc:ab:ab:f1:f1:17:d7:34:c1:f3:
da:4d:0e:f8:15:15:e1:f1:61:ac:90:17:86:34:7b:03:d7:ea:
10:5d:4f:54:8b:12:d4:6d:c6:be:bd:8e:c3:f8:4b:c0:49:ce:
69:63:3c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:06:58 2026 by rpki-client