Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
File: J2PZz8gXMu0vpKZC7a4zTAApUPg.mft (raw, json)
Hash identifier: VFxAUOOPU1CBRwRmzc4peRULs3AQqqIbSizRGUfPrfY=
Subject key identifier: E0:8A:6D:32:CE:B6:7E:AC:B9:F4:D5:23:6C:4E:4C:E2:49:B4:87:7B
Authority key identifier: 27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
Certificate issuer: /CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Certificate serial: 019CECA6BC2410EA6DD90A4C6FFD250744F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
Manifest number: 0302
Signing time: Sat 14 Mar 2026 14:01:15 +0000
Manifest this update: Sat 14 Mar 2026 14:01:15 +0000
Manifest next update: Sun 15 Mar 2026 14:01:15 +0000
Files and hashes: 1: J2PZz8gXMu0vpKZC7a4zTAApUPg.crl (hash: L4eQpw5HxALxz3TqWyoXJGNAjnOCNSVByqYPwP8NMAo=)
2: xqDiTE82VfBKD9rVWVzUaZpsTPI.roa (hash: 9m/z8uOFFSLz+xo2V7/xt7po1ubSIknfY+Jf0uQ8ei0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:a6:bc:24:10:ea:6d:d9:0a:4c:6f:fd:25:07:44:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Validity
Not Before: Mar 14 14:01:15 2026 GMT
Not After : Mar 15 14:01:15 2026 GMT
Subject: CN=e08a6d32ceb67eacb9f4d5236c4e4ce249b4877b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:63:e9:da:68:8e:43:2a:5f:93:b6:18:2c:
1e:61:60:e8:c7:3f:34:e9:cb:2b:09:9a:f2:82:a1:
69:10:54:66:b8:4f:8e:16:aa:e1:38:7a:3f:30:b8:
16:e8:37:4e:eb:93:d4:00:c0:ba:6b:cb:5f:23:03:
85:fd:b0:17:54:18:9a:69:0d:85:4f:4a:9c:be:cc:
07:da:37:e6:a1:ad:1b:ac:a7:64:fb:3f:b7:49:38:
d6:00:7a:80:89:2c:66:ed:61:84:25:73:7a:f6:ed:
2c:21:01:61:8d:59:56:a4:9e:f3:36:54:74:4d:a2:
a6:43:73:67:4c:2c:f2:20:6e:4f:78:d0:bc:93:01:
2e:9a:23:bc:4e:42:e5:f2:8c:00:fc:ce:4b:16:2f:
5f:02:0d:92:1a:2e:20:1a:a1:2d:c9:a0:37:d6:46:
3e:17:e8:81:fc:f4:7d:86:de:cc:7d:4d:cc:c0:ac:
40:55:91:e3:a3:cd:30:16:19:bd:ed:d3:2a:cc:06:
13:80:c4:b0:be:aa:26:c5:61:fb:81:4a:98:9d:95:
d7:e9:7c:f2:fb:8f:04:a3:fb:b8:43:c2:c6:66:61:
0c:bb:e6:6f:99:43:72:09:21:b2:e8:c6:ca:23:36:
31:bb:67:7a:ed:6e:51:ce:80:41:fe:9c:2e:3e:3d:
ec:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8A:6D:32:CE:B6:7E:AC:B9:F4:D5:23:6C:4E:4C:E2:49:B4:87:7B
X509v3 Authority Key Identifier:
keyid:27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2c:e5:9c:1a:9f:11:f9:c0:a7:bb:53:71:dd:c8:6d:ab:02:
e3:e1:e2:d2:30:d8:3f:d4:85:52:7e:8e:40:d8:c4:81:9f:ec:
79:bd:3c:06:0f:bd:07:00:9d:39:69:f8:dc:61:59:37:d8:27:
7f:72:38:ad:b3:dd:57:68:81:f7:4c:62:1e:a2:c1:c2:8c:87:
6d:82:a3:4b:4f:f3:ad:c1:ca:87:6d:a6:b3:b5:52:5e:22:92:
a6:fd:82:e5:0e:83:19:fc:c4:c5:a4:2d:67:c6:40:e8:6d:4c:
15:e7:69:e3:3e:45:ab:1c:6c:fb:68:8a:f0:5f:b1:4c:e7:95:
e6:5b:ee:12:41:9c:50:47:a9:22:a4:ef:13:d4:8c:1b:b0:0c:
24:3f:1b:63:e9:77:69:fb:33:10:2f:ed:66:fe:66:e9:9a:fe:
2d:1c:e9:f4:9f:59:1b:6a:c7:6b:65:36:60:49:5b:61:d4:b4:
e2:a3:7d:0a:28:09:d9:da:4b:0c:52:ff:30:d6:2a:e1:22:86:
57:69:b2:8f:9d:06:b5:dc:95:e4:25:a0:2e:f2:c6:32:98:fa:
95:d4:d4:c0:fd:3d:8c:42:be:89:09:25:f2:38:13:c8:6c:2b:
7f:16:aa:41:92:67:5e:b6:0b:29:76:22:cf:e0:f9:c8:fa:f4:
b0:8e:05:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 21:56:10 2026 by rpki-client