Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
File: J9rx4g0ElJnor1-LcVr23PIIpSE.mft (raw, json)
Hash identifier: 3RDAQVccVZCNzwyOiwuGkCCIndbHHChyQiP1GCM2w2k=
Subject key identifier: E7:D7:D8:E3:CB:94:A1:AD:04:A3:55:42:E0:32:49:17:64:40:D6:F6
Authority key identifier: 27:DA:F1:E2:0D:04:94:99:E8:AF:5F:8B:71:5A:F6:DC:F2:08:A5:21
Certificate issuer: /CN=27daf1e20d049499e8af5f8b715af6dcf208a521
Certificate serial: 01A06D9517EC9DBB30A972EDB0C37A05E12B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9rx4g0ElJnor1-LcVr23PIIpSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
Manifest number: A5
Signing time: Fri 04 Sep 2026 18:01:22 +0000
Manifest this update: Fri 04 Sep 2026 18:01:22 +0000
Manifest next update: Sat 05 Sep 2026 18:01:22 +0000
Files and hashes: 1: J9rx4g0ElJnor1-LcVr23PIIpSE.crl (hash: kuZ7O5AxENYjMGJ92Rmm0+d96AgqsDI/Y2hjaD0Nfpc=)
2: s3CTsEzepaXlQZBtmGn_vCqhH9c.asa (hash: pkiv835CcXvEGW6xy8WrRo2GTtt82YoHF6DEjpPgKn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9rx4g0ElJnor1-LcVr23PIIpSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:17:ec:9d:bb:30:a9:72:ed:b0:c3:7a:05:e1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27daf1e20d049499e8af5f8b715af6dcf208a521
Validity
Not Before: Sep 4 18:01:22 2026 GMT
Not After : Sep 5 18:01:22 2026 GMT
Subject: CN=e7d7d8e3cb94a1ad04a35542e03249176440d6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:97:2e:2c:d1:40:83:f4:c2:9f:75:99:9c:00:
51:86:a5:6c:b8:52:02:4c:79:c1:1c:5d:f4:fa:64:
a3:3b:57:0c:ea:39:3f:7a:30:32:78:55:22:a5:f3:
e3:0b:69:b8:e4:60:60:dd:80:c4:5c:67:eb:60:6a:
22:8c:fc:3c:66:b5:41:01:79:5c:24:71:c7:ae:df:
fe:d5:35:ad:89:cd:c6:61:fd:80:9d:6e:5d:96:15:
89:d1:e0:cd:6f:d9:5f:39:41:44:fb:12:39:e9:96:
dc:8f:23:0d:2f:9a:e3:98:98:8a:e3:5a:1f:d3:20:
ab:18:ac:b0:03:ee:96:ec:a7:6d:55:4c:4a:71:12:
5c:57:dd:b0:66:09:79:66:1d:56:29:f6:3f:23:a2:
d9:e8:fd:7e:50:f7:6f:61:af:da:6d:8d:f0:d3:8f:
e7:7c:dd:f0:48:6f:c9:99:37:f6:a4:d3:ca:98:9f:
14:1e:06:75:6c:46:d3:e7:59:b5:a7:42:4a:f6:c2:
d0:1b:8e:34:af:90:8c:a3:5e:3d:a2:7a:95:72:02:
8a:0b:90:73:ce:f6:f5:dc:bc:f0:57:1a:44:21:da:
64:fa:3f:17:86:46:4e:5c:c6:38:f3:01:ee:c3:e7:
bf:c0:e3:27:a1:4d:2d:15:a6:6b:5e:80:ff:8a:52:
08:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D7:D8:E3:CB:94:A1:AD:04:A3:55:42:E0:32:49:17:64:40:D6:F6
X509v3 Authority Key Identifier:
keyid:27:DA:F1:E2:0D:04:94:99:E8:AF:5F:8B:71:5A:F6:DC:F2:08:A5:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9rx4g0ElJnor1-LcVr23PIIpSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:44:fc:81:99:03:78:e1:18:0d:dd:2b:97:b5:50:5b:63:1b:
0a:52:81:b6:bc:c4:43:fc:54:99:27:80:c4:da:88:a8:bf:3a:
44:a9:18:07:0e:d5:3e:80:62:1c:fd:e9:9e:e8:43:f2:9b:b9:
c2:cd:a8:43:c4:65:ae:87:08:10:0f:0c:02:b4:1e:ea:70:08:
65:5c:b6:c3:26:c0:13:7a:a5:c9:59:27:f6:f7:a5:cd:54:55:
7c:78:18:09:07:77:3e:e5:2d:7c:91:d8:f3:6f:5e:a0:3e:87:
0a:7e:c0:13:37:45:37:cd:1d:b3:9b:db:4c:c0:0f:58:52:5e:
f5:42:4e:8f:ac:c4:19:a7:fd:bd:98:f7:1d:e3:87:3e:87:82:
e5:a3:27:ef:3f:aa:63:db:9f:24:80:3e:b7:fe:a5:7d:61:b8:
7c:ed:5e:0a:16:18:d5:5e:c0:5d:f1:d4:13:27:c7:c1:3f:2d:
22:eb:92:32:a8:b1:80:70:dc:b7:25:91:f6:b2:f5:ca:1e:55:
73:23:c1:15:52:53:c4:86:ed:be:77:a4:3b:21:a1:f0:64:bc:
96:d3:af:1c:18:3d:d3:34:49:4c:31:a8:52:b9:7f:82:f0:c1:
7b:6d:5f:dd:54:23:c5:bc:0a:e9:0a:31:0c:9a:19:46:36:52:
88:8f:a7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:26:24 2026 by rpki-client