Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
File: J9TWlrrbEJTKoV176Gw5pxLg7hI.mft (raw, json)
Hash identifier: PlMLR50VnAHIeTklO+FQT6Ll0k6QIg6KlJVdyJHaC8I=
Subject key identifier: FB:AB:35:D5:50:2D:09:49:BB:1C:FA:97:E3:9B:5F:23:33:35:B3:C4
Authority key identifier: 27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
Certificate issuer: /CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Certificate serial: 019D375340C35B5769A72B1CD847390F4C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
Manifest number: 181D
Signing time: Sun 29 Mar 2026 02:01:36 +0000
Manifest this update: Sun 29 Mar 2026 02:01:36 +0000
Manifest next update: Mon 30 Mar 2026 02:01:36 +0000
Files and hashes: 1: J9TWlrrbEJTKoV176Gw5pxLg7hI.crl (hash: czjGC5TaICuqO+tWPv62xaNN7ZxW9Vzh08O0ZiG1zIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:40:c3:5b:57:69:a7:2b:1c:d8:47:39:0f:4c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Validity
Not Before: Mar 29 02:01:36 2026 GMT
Not After : Mar 30 02:01:36 2026 GMT
Subject: CN=fbab35d5502d0949bb1cfa97e39b5f233335b3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8e:87:6f:82:40:f5:91:b9:26:68:09:ca:c8:
18:2c:a1:ee:f5:a2:09:0c:a0:f4:72:5a:c4:e3:0e:
54:3e:bf:03:c6:94:06:00:83:41:83:37:fc:0a:71:
31:ff:a6:7a:e2:e0:7f:d1:64:47:57:0b:52:7d:0b:
1a:f0:e9:fb:b9:18:1b:df:9a:7f:7a:c3:cb:a8:77:
b0:b7:b8:64:cc:18:e2:1f:16:9e:8a:15:2b:d2:6c:
5a:fb:29:52:0c:51:b5:d5:81:1e:32:47:84:74:7f:
73:a2:37:8e:77:d6:df:55:b3:21:a0:66:b3:be:6b:
e3:3a:df:33:c1:e8:7e:0f:90:30:1b:2a:ce:6f:8c:
de:a9:91:27:9b:05:84:f4:44:24:e4:34:2c:db:4c:
54:56:27:e9:01:12:0a:d4:aa:33:d9:5c:3a:4c:d5:
c7:d1:88:89:6d:5d:77:49:ac:6f:1f:4f:7b:7b:74:
a6:4a:25:93:1d:e9:82:96:98:e5:d7:bb:5b:f0:7c:
a5:56:72:e3:05:e4:5a:8a:1c:f5:29:6d:77:45:d6:
60:c7:c4:45:58:6e:37:65:01:a1:9d:ad:77:32:b9:
8d:44:af:90:27:8b:10:86:e3:8b:1d:e8:4c:b3:22:
ee:e4:88:b5:8e:01:db:00:e6:e8:f7:bd:46:27:cc:
ca:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AB:35:D5:50:2D:09:49:BB:1C:FA:97:E3:9B:5F:23:33:35:B3:C4
X509v3 Authority Key Identifier:
keyid:27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d1:4e:2e:4d:ab:0e:d9:5e:6c:03:75:be:34:67:b6:a4:3b:
d1:e8:21:55:e6:cd:3b:b0:5e:ab:fb:4e:0f:31:6d:f1:04:13:
1f:28:9e:a8:f8:f9:a6:35:ad:63:14:c4:9e:c5:e2:70:2c:68:
51:b3:65:76:6c:7d:a4:e0:80:d4:65:d1:29:67:3a:44:04:16:
17:d1:87:be:70:f4:fe:33:13:cd:45:90:43:4c:46:53:9c:85:
d2:95:b0:df:64:20:25:18:a1:f3:80:b8:2b:79:67:bb:35:82:
12:48:83:66:99:c2:9b:d1:b7:df:e0:de:53:61:45:dc:68:8c:
e8:ea:af:ed:86:23:8f:5a:65:b0:4b:4b:d1:e4:9d:87:d7:f8:
cc:51:9a:8a:62:29:37:46:bd:e2:e0:3a:6c:a0:33:6c:c5:d2:
94:f1:60:18:b5:50:78:68:45:9d:da:3b:ec:f8:83:14:52:bf:
22:02:cf:25:5f:1a:ff:94:b5:4f:92:33:34:38:7b:91:a2:ba:
20:e5:6a:9d:a7:0e:03:d1:ba:4c:75:7a:79:83:28:34:dd:32:
e9:d5:a2:bc:0c:87:6e:78:18:c0:cc:dd:dd:d0:73:b8:bc:68:
de:50:93:d2:cb:f3:2d:94:a4:4b:54:ac:fb:b5:ac:58:11:e5:
40:99:91:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:55 2026 by rpki-client