Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
File: J2PZz8gXMu0vpKZC7a4zTAApUPg.mft (raw, json)
Hash identifier: CJq4j/9f9UayR8xoKMYdN6ws9M8bh0QKSzFM18zYRaI=
Subject key identifier: 72:9D:6E:04:F8:26:B8:02:D8:2A:66:12:88:A8:E9:91:4F:85:3E:02
Authority key identifier: 27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
Certificate issuer: /CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Certificate serial: 01A182D0F5EE1DD3A155B284836111268852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
Manifest number: 0562
Signing time: Wed 28 Oct 2026 14:01:34 +0000
Manifest this update: Wed 28 Oct 2026 14:01:34 +0000
Manifest next update: Thu 29 Oct 2026 14:01:34 +0000
Files and hashes: 1: J2PZz8gXMu0vpKZC7a4zTAApUPg.crl (hash: yja3osGOEd+hX3xb5T+mWpP9JVlI2dp7swk4VJFcUMQ=)
2: v2RhzwzRYxDBxoI8x3qcoCuvcCY.roa (hash: +dNdFFmraUSumCJQ+HT3ZgjMQ3xG8lfqVtX8iY6CtK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:d0:f5:ee:1d:d3:a1:55:b2:84:83:61:11:26:88:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Validity
Not Before: Oct 28 14:01:34 2026 GMT
Not After : Oct 29 14:01:34 2026 GMT
Subject: CN=729d6e04f826b802d82a661288a8e9914f853e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:31:77:29:fa:bf:45:6c:52:12:e4:10:a0:95:
9d:12:c1:8c:d2:3b:7d:f6:c8:ff:f1:4d:47:b4:27:
5d:ef:95:6b:7f:2e:8a:41:c3:d7:1f:4d:bb:6a:28:
9c:ac:c4:5a:a8:f6:fa:41:2a:62:21:7f:58:59:6f:
fc:6c:0c:85:8d:af:c1:37:1a:8b:05:41:a4:6e:64:
11:e0:16:8e:d3:94:71:d9:38:23:a1:e0:91:f8:e7:
85:b2:17:a7:d8:b1:ea:40:7f:3e:e6:fd:31:16:94:
47:8f:da:ff:bc:78:ce:e7:29:f8:a6:df:f0:c2:8a:
78:d4:96:bd:75:dd:72:3d:e9:09:42:d8:8f:1c:90:
e5:ef:50:ca:40:2e:aa:fc:17:1a:31:ce:85:d3:31:
5a:e7:c8:cb:cc:62:47:c5:34:70:4a:96:cd:ae:9b:
cb:be:33:30:43:8f:63:02:62:f7:88:b3:50:ce:d7:
9c:f3:19:2f:cf:f1:2f:0c:78:d7:06:9b:ff:55:ca:
74:6e:5b:b8:7d:e5:2c:97:00:97:b6:3b:71:72:78:
56:ee:5c:e2:78:09:44:9a:06:b8:d7:f9:2c:bd:68:
86:91:eb:72:8a:83:9c:63:cf:f3:83:5c:ed:b4:7a:
67:82:68:df:69:8c:78:5b:a5:27:9e:0f:9a:37:3b:
76:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9D:6E:04:F8:26:B8:02:D8:2A:66:12:88:A8:E9:91:4F:85:3E:02
X509v3 Authority Key Identifier:
keyid:27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:59:f9:41:5c:18:0c:fb:b5:12:22:86:02:f0:05:0e:89:71:
42:84:20:ac:2a:e2:8c:c3:25:89:89:99:57:a1:f2:54:c1:c6:
83:b1:cd:a3:42:8d:e9:2b:e0:72:d2:76:ea:dd:15:fe:d5:99:
a6:8a:17:f9:1a:21:1d:ae:72:13:b6:5c:af:87:75:39:fd:00:
36:6f:a2:2e:06:c7:97:fd:e2:5f:7e:3d:ea:37:6d:2e:1e:8a:
cf:da:03:26:ab:e3:a5:c7:82:48:1c:93:5c:f1:7b:ca:a5:2b:
f0:41:39:7e:32:d6:38:35:5a:f2:2a:f9:8d:b8:ed:0f:c2:21:
f6:92:c7:d0:93:a4:01:b4:a9:e0:01:f0:57:ba:27:ac:ac:15:
d7:39:67:12:19:22:eb:5e:a7:e9:4a:8e:4c:bc:b7:6b:46:bd:
df:19:9b:1e:ec:15:bd:94:82:1a:9f:a6:a1:4c:9b:46:00:91:
db:06:cc:10:ff:5b:58:06:6e:c3:7a:22:e3:8b:0e:d1:fb:c8:
d1:72:a4:2d:da:0a:f3:4e:79:b2:8c:30:70:a3:41:9d:12:a3:
bb:b5:4b:c7:b7:37:97:7e:96:e0:47:fd:52:e9:71:73:60:aa:
cb:aa:c5:47:7a:80:d2:9e:94:5c:fa:b3:11:63:38:58:3e:82:
91:b1:fc:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGC0PXuHdOhVbKEg2ERJohSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NjNkOWNmYzgxNzMyZWQyZmE0YTY0MmVkYWUzMzRjMDAy
OTUwZjgwHhcNMjYxMDI4MTQwMTM0WhcNMjYxMDI5MTQwMTM0WjAzMTEwLwYDVQQD
Eyg3MjlkNmUwNGY4MjZiODAyZDgyYTY2MTI4OGE4ZTk5MTRmODUzZTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DF3Kfq/RWxSEuQQoJWdEsGM0jt9
9sj/8U1HtCdd75Vrfy6KQcPXH027aiicrMRaqPb6QSpiIX9YWW/8bAyFja/BNxqL
BUGkbmQR4BaO05Rx2TgjoeCR+OeFshen2LHqQH8+5v0xFpRHj9r/vHjO5yn4pt/w
wop41Ja9dd1yPekJQtiPHJDl71DKQC6q/BcaMc6F0zFa58jLzGJHxTRwSpbNrpvL
vjMwQ49jAmL3iLNQztec8xkvz/EvDHjXBpv/Vcp0blu4feUslwCXtjtxcnhW7lzi
eAlEmga41/ksvWiGketyioOcY8/zg1zttHpngmjfaYx4W6Unng+aNzt2nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKdbgT4JrgC2CpmEoio6ZFPhT4CMB8GA1UdIwQY
MBaAFCdj2c/IFzLtL6SmQu2uM0wAKVD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjJQWno4Z1hNdTB2cEtaQzdhNHpUQUFwVVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83YWMxYzItMTQwZi00YzFhLTgxY2Mt
MWQxMjI4MGJhMzIyLzEvSjJQWno4Z1hNdTB2cEtaQzdhNHpUQUFwVVBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS83YWMxYzItMTQwZi00YzFhLTgxY2MtMWQxMjI4MGJhMzIy
LzEvSjJQWno4Z1hNdTB2cEtaQzdhNHpUQUFwVVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVn5QVwY
DPu1EiKGAvAFDolxQoQgrCrijMMliYmZV6HyVMHGg7HNo0KN6SvgctJ26t0V/tWZ
pooX+RohHa5yE7Zcr4d1Of0ANm+iLgbHl/3iX3496jdtLh6Kz9oDJqvjpceCSByT
XPF7yqUr8EE5fjLWODVa8ir5jbjtD8Ih9pLH0JOkAbSp4AHwV7onrKwV1zlnEhki
616n6UqOTLy3a0a93xmbHuwVvZSCGp+moUybRgCR2wbMEP9bWAZuw3oi44sO0fvI
0XKkLdoK8055sowwcKNBnRKju7VLx7c3l36W4Ef9Uulxc2Cqy6rFR3qA0p6UXPqz
EWM4WD6CkbH8ow==
-----END CERTIFICATE-----
Generated at Wed Oct 28 20:02:40 2026 by rpki-client