Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
File: J2PZz8gXMu0vpKZC7a4zTAApUPg.mft (raw, json)
Hash identifier: /Z0YtKwqlteF8XKnyXREbM6A+NaY1WsZKE+ECGy8+ec=
Subject key identifier: F1:3F:7B:72:72:C9:03:27:32:48:97:39:75:C7:3E:0D:89:9F:8C:41
Authority key identifier: 27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
Certificate issuer: /CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Certificate serial: 019DD465132E22D5FC8B034F7AA88CC8E06D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
Manifest number: 037A
Signing time: Tue 28 Apr 2026 14:01:26 +0000
Manifest this update: Tue 28 Apr 2026 14:01:26 +0000
Manifest next update: Wed 29 Apr 2026 14:01:26 +0000
Files and hashes: 1: J2PZz8gXMu0vpKZC7a4zTAApUPg.crl (hash: hYMte3SEBcGwkPYfjgwBC56D7xk9O+SfNrwxoRMvsDY=)
2: xqDiTE82VfBKD9rVWVzUaZpsTPI.roa (hash: 9m/z8uOFFSLz+xo2V7/xt7po1ubSIknfY+Jf0uQ8ei0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 14:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:65:13:2e:22:d5:fc:8b:03:4f:7a:a8:8c:c8:e0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Validity
Not Before: Apr 28 14:01:26 2026 GMT
Not After : Apr 29 14:01:26 2026 GMT
Subject: CN=f13f7b7272c903273248973975c73e0d899f8c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:da:00:32:d6:05:d7:d9:7b:a3:41:08:4f:
03:47:e1:25:9a:7f:19:3c:25:22:b4:9f:ce:30:4a:
6e:20:60:33:d6:8c:7d:46:b9:58:29:47:89:34:12:
34:4a:8b:6f:1a:9e:f3:1e:e5:df:b9:e9:6d:6c:0c:
92:16:1c:8c:36:f0:1c:63:eb:3f:98:01:d2:67:c3:
8b:bd:38:a5:e9:61:06:b4:8f:11:cc:2b:1b:3f:6f:
b5:bf:e4:01:75:a5:9d:55:f6:cc:d4:1f:f7:f9:84:
7a:e1:46:a0:fa:09:f7:54:fc:d3:d5:ba:00:f4:7f:
35:7f:09:1f:71:00:09:1f:dc:b8:e2:64:8c:e2:99:
00:d7:be:ca:87:66:aa:14:a8:13:80:3d:c3:2a:06:
20:84:fe:30:25:5e:08:5b:86:e6:f1:71:03:ef:f2:
e9:c8:2b:f8:e1:8c:5e:9d:f3:8b:9a:32:82:f3:e7:
de:98:f7:0d:06:3b:6a:13:1b:66:b1:f5:03:89:68:
58:15:ca:77:e3:7a:1b:b5:35:32:5c:8d:1e:0b:bb:
35:92:3b:e1:37:51:13:9a:64:ef:ca:58:95:a0:50:
41:51:63:d6:79:41:94:dc:da:97:c8:62:05:85:cc:
57:3e:d0:b9:4e:6b:ce:5b:0e:43:06:dc:3d:09:65:
6f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3F:7B:72:72:C9:03:27:32:48:97:39:75:C7:3E:0D:89:9F:8C:41
X509v3 Authority Key Identifier:
keyid:27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:94:b4:27:0b:cc:4b:70:bc:c9:e3:5f:d6:2f:56:c6:a3:c7:
25:32:dd:39:66:9c:43:e9:f0:92:aa:23:30:a4:10:1c:9c:fb:
0c:da:e1:7d:f0:f2:4f:33:c0:fc:c7:c5:44:47:1c:7e:d3:8f:
d1:dc:e1:c0:14:44:16:4c:b1:20:d7:50:3c:69:75:74:f6:f2:
f3:9f:d0:bb:03:be:42:f0:c5:47:96:af:14:cf:c6:17:4e:2d:
49:fb:da:7b:a7:0d:40:75:eb:00:1f:39:c0:c0:60:44:f0:2d:
85:89:e1:f1:5a:fa:b4:48:ce:89:da:fa:00:97:b5:f9:ac:8c:
3e:8a:96:9c:3a:10:51:28:26:18:da:d0:fc:41:cd:b7:c3:20:
36:41:e1:43:e8:ff:d3:0f:12:17:81:22:29:4b:5a:2a:19:d0:
94:73:61:cd:93:83:32:4d:28:08:ea:17:8c:3f:e7:ff:97:b7:
f0:b3:86:85:da:1d:3f:b1:db:5d:ff:75:f1:2e:cf:63:7d:b9:
47:3d:37:9b:60:4d:13:86:18:a0:64:86:0d:9f:a9:ec:38:d5:
e3:d4:eb:8c:d0:7b:e7:f5:d8:0c:67:40:03:c7:0d:95:c5:ac:
5e:0e:d6:9d:21:4d:3a:04:ea:21:b3:4d:88:0a:47:4a:da:c8:
23:19:ea:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 00:03:07 2026 by rpki-client