Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
File: J_lYw7dZsseJb17WY-gHeB8_9aI.mft (raw, json)
Hash identifier: /IbZ5gh6uReWODJ/ipOgsfTX02c9t32HCSvHyXfm3c0=
Subject key identifier: 9D:C3:38:B0:21:D7:BF:74:5C:8A:C1:4E:97:30:59:FF:B5:71:68:82
Authority key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
Certificate issuer: /CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Certificate serial: 019D37F6F304C0742A48635F4E922FBF9325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
Manifest number: 10BD
Signing time: Sun 29 Mar 2026 05:00:23 +0000
Manifest this update: Sun 29 Mar 2026 05:00:23 +0000
Manifest next update: Mon 30 Mar 2026 05:00:23 +0000
Files and hashes: 1: ElTViivmjGxEdxaxj11VFkP14YI.roa (hash: YUVaRGC2xsx0b6XubgQiQ6H3U/a4QTrhpMWWRuXADx4=)
2: J_lYw7dZsseJb17WY-gHeB8_9aI.crl (hash: rYVydMfNv2j1xw/SxpjoeKrXmvKAjuWX2XqgQgQCf8c=)
3: MH507cRFXNNeqadxQdKywhHkylA.roa (hash: SJpj63kNuERbqmJKNAG4loDyhiVzSuV9bopPuk1oXO0=)
4: yXUQWiWAuj52X2blMDF0ySpC9kY.roa (hash: 2dpSoguExI4LCzpUhvwGpd2mxrAlFFlJZgWzZagSNCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f3:04:c0:74:2a:48:63:5f:4e:92:2f:bf:93:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Validity
Not Before: Mar 29 05:00:23 2026 GMT
Not After : Mar 30 05:00:23 2026 GMT
Subject: CN=9dc338b021d7bf745c8ac14e973059ffb5716882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b1:f2:fd:0b:3e:18:f0:04:27:a9:57:7e:8f:
6b:44:2a:1e:88:5a:de:40:c8:17:23:f3:03:59:cb:
b7:5f:a4:d0:a0:42:e3:84:d5:be:ac:0b:4b:9e:2d:
b0:98:0f:82:50:d5:7e:b4:ad:5e:40:13:a4:ed:39:
d7:98:ed:3a:ff:ed:92:93:89:d0:c1:07:09:d5:72:
63:db:a5:b1:a0:89:6a:50:60:d5:78:94:28:a9:9f:
26:2f:b2:7d:6f:d6:d1:7a:5e:8d:b4:66:62:48:17:
72:c6:62:45:ce:41:ce:2a:26:2b:29:fd:eb:d7:38:
d0:56:b3:d2:29:d9:b3:b1:89:d5:25:f0:36:9a:0a:
6c:60:55:16:84:4f:45:47:3a:30:08:10:7d:b3:22:
ee:fd:c9:42:a8:83:c8:65:4d:d6:38:bb:51:78:21:
f7:f4:d4:f3:52:bb:62:10:29:98:2d:8d:f1:a7:89:
ce:3d:c2:f1:71:14:cd:ee:bf:0b:4a:9c:a2:68:03:
d3:e9:0e:f9:c8:7c:15:7b:d0:d1:5f:fd:f0:fe:10:
19:b5:54:63:f1:27:09:02:b5:17:e7:b9:c5:41:7f:
31:65:9b:d7:c7:9c:20:22:89:5a:25:f7:1a:bf:0b:
83:09:5c:d3:d7:92:08:d6:58:6d:fc:28:33:ae:6a:
dc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C3:38:B0:21:D7:BF:74:5C:8A:C1:4E:97:30:59:FF:B5:71:68:82
X509v3 Authority Key Identifier:
keyid:27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:60:f2:3c:57:5a:ee:09:17:7c:51:cf:8a:13:1c:38:f0:99:
47:38:ac:d2:08:ed:6c:50:77:8b:e2:24:95:fe:08:bf:f4:42:
5a:63:52:2f:4a:2e:b2:eb:72:34:f5:a3:7c:f9:e4:ea:ab:a6:
5d:ee:73:c1:f7:cb:ef:61:8b:f4:92:b8:ff:55:0b:d6:33:8a:
00:fe:aa:91:5a:f1:e4:0f:72:46:fa:a9:b9:a5:a4:50:4b:7b:
b9:c6:90:23:a2:99:43:6a:82:a8:a7:0b:c2:f0:ad:31:b4:1c:
f5:6c:09:fc:19:a9:bc:7a:2f:c4:6f:39:34:5e:c2:67:0f:3c:
ae:83:b7:51:5a:d6:2f:87:81:f5:1b:23:56:d1:65:f0:7e:6b:
7a:e3:98:14:c1:b8:ee:6d:50:23:3f:0a:34:92:ab:ad:08:c4:
84:01:54:b9:0d:ec:35:f6:c4:fb:2f:bf:d7:f6:09:c1:e7:9c:
eb:a5:a0:e3:48:ae:d7:16:77:3c:ad:5f:a0:9b:9a:8f:c8:e9:
ac:11:38:5a:05:d5:8f:56:af:7f:7c:e0:4c:38:43:9b:5a:50:
ea:08:17:90:f5:49:f5:d4:49:0b:b1:da:b9:6d:ad:17:d3:74:
f9:3c:d2:12:3d:9d:39:88:8c:29:25:06:be:c2:cd:37:7e:a3:
a3:28:d6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:52 2026 by rpki-client