Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
File: J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft (raw, json)
Hash identifier: M65Oi3phZaUTazR6BtTbI2huXCAnAdRfIuxrvztKxeE=
Subject key identifier: F5:7B:7E:B1:FF:27:6B:AE:D2:D0:23:C0:48:66:F4:C5:A0:06:8B:10
Authority key identifier: 27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE
Certificate issuer: /CN=277b3683307c6fcc32bed177232f1d474541fbae
Certificate serial: 019D39AF3657D3FBC95480DE6B6407818558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
Manifest number: 145E
Signing time: Sun 29 Mar 2026 13:01:17 +0000
Manifest this update: Sun 29 Mar 2026 13:01:17 +0000
Manifest next update: Mon 30 Mar 2026 13:01:17 +0000
Files and hashes: 1: J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl (hash: KjuUpCL0dqctmvfVqZcH2O/bcVA+L6C7m1t8VPTdljk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:36:57:d3:fb:c9:54:80:de:6b:64:07:81:85:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=277b3683307c6fcc32bed177232f1d474541fbae
Validity
Not Before: Mar 29 13:01:17 2026 GMT
Not After : Mar 30 13:01:17 2026 GMT
Subject: CN=f57b7eb1ff276baed2d023c04866f4c5a0068b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7c:49:3a:11:d5:17:c7:52:09:71:8e:6e:9d:
dd:c4:2e:ee:e1:34:02:21:51:7f:e8:6c:12:b7:b4:
50:94:ef:dc:b6:5a:5c:fa:bb:a5:79:24:e1:55:cd:
0f:f5:6a:02:6e:fd:69:0b:12:bf:a8:48:2e:5a:2d:
65:47:b0:e5:1e:05:71:7d:dd:cb:f7:47:ca:88:4b:
a0:e8:86:91:84:e3:50:23:8e:c2:40:c0:ca:44:ca:
66:95:57:c9:7c:67:8e:60:32:dc:e7:d8:d3:e1:2d:
53:a0:e8:06:20:15:7c:28:9e:8c:ac:45:ba:12:c7:
4b:66:4f:60:4e:4c:63:a1:e9:95:66:cb:1a:33:05:
2a:12:c8:01:9d:33:9a:e3:7c:3d:93:57:6f:40:4a:
35:5c:81:d0:85:5b:ae:e7:09:81:e9:e9:24:a8:dd:
f7:aa:f0:1d:12:c3:71:59:64:a0:d7:5b:fa:2c:97:
5d:27:d6:a3:ec:aa:f8:99:5b:66:23:b4:58:09:a8:
f2:66:84:90:1f:61:f8:1f:5c:37:ed:ec:88:71:ed:
de:51:c8:42:ef:11:6e:ce:f6:c2:c5:7b:6f:98:a9:
4d:51:2d:33:87:0b:4a:d7:bd:08:32:4c:ec:ba:95:
15:82:be:4b:64:b3:6c:61:10:8c:57:9e:e7:0f:77:
00:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7B:7E:B1:FF:27:6B:AE:D2:D0:23:C0:48:66:F4:C5:A0:06:8B:10
X509v3 Authority Key Identifier:
keyid:27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c2:98:0d:59:21:d4:61:5a:65:ed:ff:50:cf:6e:6f:37:22:
b9:cd:d2:5c:99:ae:3f:ec:37:cd:8c:82:00:10:8c:09:91:9f:
62:22:3d:cc:c0:6f:36:91:00:2e:22:bb:cd:47:de:82:79:88:
a2:61:61:7c:5c:b4:c4:45:ca:24:c9:f9:81:af:33:b3:3f:aa:
4d:16:92:fa:71:72:ab:aa:30:5c:43:9a:04:86:0a:47:0b:57:
64:f2:2f:7f:e1:97:d2:22:ff:93:e7:75:d6:ea:8c:c9:17:eb:
13:80:86:b5:2e:84:ae:5e:c3:15:24:ee:7f:f6:22:0c:be:3c:
87:65:f1:dd:f1:b0:f5:d6:16:c2:14:b5:c3:84:66:52:7a:82:
19:c9:ad:2f:33:9f:b4:47:1d:cb:46:96:e5:24:08:ed:05:dd:
a3:59:82:d4:b4:f6:76:d9:6e:9c:b5:59:b6:42:81:96:6a:8d:
fb:f1:aa:63:3f:cb:b1:4f:d3:98:74:d3:7b:ce:60:81:7b:82:
2c:87:13:de:12:30:11:0a:10:6c:02:75:d2:cf:0e:88:55:56:
c7:5c:fa:60:19:8c:48:fb:3b:37:f2:5e:3a:d7:70:12:6f:77:
7e:0e:39:56:c6:b3:2a:84:7e:1d:8a:40:c6:55:48:db:87:5f:
06:6b:d7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:48:34 2026 by rpki-client