Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
File: J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft (raw, json)
Hash identifier: tz1kvcej37NV8hx1Cw20fWFgjdIAJs3HPn1hi6FWVMs=
Subject key identifier: CC:74:D3:5D:B4:77:B2:3D:B7:95:DB:1B:88:18:37:93:DB:DF:31:07
Authority key identifier: 27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7
Certificate issuer: /CN=27f0b737715114ded20f68ef0347d9f752a0e0b7
Certificate serial: 01A16646A277738386A46F78B1B8D5DF8574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
Manifest number: 1ABC
Signing time: Fri 23 Oct 2026 01:01:07 +0000
Manifest this update: Fri 23 Oct 2026 01:01:07 +0000
Manifest next update: Sat 24 Oct 2026 01:01:07 +0000
Files and hashes: 1: J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl (hash: ikePkxtHynBRnSIcpk64n529+HS8GGhiCAmq8i2zpuU=)
2: SPWsU8T9PLAubzeedd1G0T5GSAM.roa (hash: UkMo0FW619fM25TcBwQ8m/aK6wdUQ2mji2t/icRA2rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:46:a2:77:73:83:86:a4:6f:78:b1:b8:d5:df:85:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f0b737715114ded20f68ef0347d9f752a0e0b7
Validity
Not Before: Oct 23 01:01:07 2026 GMT
Not After : Oct 24 01:01:07 2026 GMT
Subject: CN=cc74d35db477b23db795db1b88183793dbdf3107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:49:a5:ce:c2:31:dd:db:ff:7a:0a:26:36:4a:
07:3e:28:1a:a6:03:7d:6a:7e:ce:3f:64:bc:a6:76:
07:8a:7c:35:86:d0:4f:9e:0c:23:8e:1c:29:59:d3:
59:81:f3:63:03:77:4a:f7:c9:4b:37:0d:cb:56:6a:
ee:c6:e4:2c:51:cd:f8:f7:73:a4:cb:a5:1e:4c:dc:
ca:a1:c3:32:ea:ea:c5:71:19:06:79:1d:25:13:3f:
2a:22:4b:36:73:0b:3c:0f:85:ed:1e:8a:c3:8a:e5:
85:7a:2d:3f:b7:ea:b6:51:85:ec:da:8c:6b:d7:c6:
6a:cf:45:4d:24:c8:17:94:24:e1:4e:14:8b:d6:28:
06:b9:5b:49:f5:b5:84:ff:03:b2:a7:49:98:38:b3:
77:51:13:64:85:02:d3:98:19:51:c3:42:28:e3:58:
c3:34:bf:01:35:14:33:96:c8:92:4b:d0:c2:f5:dd:
f7:52:74:22:90:33:67:4d:69:aa:fd:75:a7:73:65:
86:0b:f4:94:71:c1:da:5c:8a:5f:74:75:bb:00:7d:
62:1b:f4:93:67:19:0d:31:25:9d:a8:a1:b6:76:f5:
3c:59:8c:8b:8f:c0:2d:12:0d:3f:f8:11:bd:f4:7c:
43:82:44:78:8e:fe:c6:ce:78:ed:fa:cd:57:a7:f3:
20:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:74:D3:5D:B4:77:B2:3D:B7:95:DB:1B:88:18:37:93:DB:DF:31:07
X509v3 Authority Key Identifier:
keyid:27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b5:af:f0:eb:ec:66:a2:15:c8:f7:fe:3c:0e:b0:c8:7c:10:
a2:08:82:ae:fb:e6:e8:32:9d:6b:57:0f:9f:be:c1:4d:dd:a8:
9f:b1:c3:9d:01:b9:02:e1:dd:1b:9c:93:61:0e:56:5c:b4:51:
c7:44:de:c1:aa:6b:18:3d:80:b1:07:37:6a:4e:28:8f:39:93:
20:84:65:70:3d:8a:9b:b9:d6:85:5d:9f:50:b9:4e:00:fd:6e:
c6:dd:de:e4:3a:61:fe:73:ab:fb:8d:a9:e0:31:1e:85:7f:1d:
c7:e3:05:a2:48:47:05:63:4d:50:a9:48:7d:19:5c:09:87:dd:
44:78:2e:b8:07:7f:eb:9d:36:2c:55:46:40:2e:7c:fc:48:42:
a4:8a:fb:b3:35:16:b3:5b:a4:a0:1e:eb:e1:66:b4:d5:35:dc:
b7:bd:32:6c:98:f7:ae:fc:a9:ce:8d:e8:eb:1c:b6:df:8f:ed:
3a:1d:3b:39:71:c7:26:ae:f6:07:e4:1e:7a:08:e5:24:23:7f:
5c:c7:6f:6d:06:2f:bf:51:fe:23:d1:2c:e3:80:e2:80:bd:7e:
08:46:9a:39:2c:06:18:fc:ca:f0:72:87:27:69:5a:bb:59:01:
9c:92:57:cf:d6:f7:9f:8b:6b:0a:7b:b1:a0:dc:6f:21:80:d4:
47:70:be:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 11:13:24 2026 by rpki-client