Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
File: J9rx4g0ElJnor1-LcVr23PIIpSE.mft (raw, json)
Hash identifier: 7shTfZ6KFtJaivNuvSCN3iPxN3PR+fxlMxlI4GleOyE=
Subject key identifier: E1:BB:E7:22:34:31:5A:36:0F:66:04:74:89:34:4E:0A:8B:9E:55:31
Authority key identifier: 27:DA:F1:E2:0D:04:94:99:E8:AF:5F:8B:71:5A:F6:DC:F2:08:A5:21
Certificate issuer: /CN=27daf1e20d049499e8af5f8b715af6dcf208a521
Certificate serial: 01A183AC735DDC64EBB270EDC78EE2D0399C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9rx4g0ElJnor1-LcVr23PIIpSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
Manifest number: 0135
Signing time: Wed 28 Oct 2026 18:01:19 +0000
Manifest this update: Wed 28 Oct 2026 18:01:19 +0000
Manifest next update: Thu 29 Oct 2026 18:01:19 +0000
Files and hashes: 1: J9rx4g0ElJnor1-LcVr23PIIpSE.crl (hash: BpaLvfBInm/2GBReLyV+Uxd/nhcDV7pVxPxTaXVx5NA=)
2: s3CTsEzepaXlQZBtmGn_vCqhH9c.asa (hash: pkiv835CcXvEGW6xy8WrRo2GTtt82YoHF6DEjpPgKn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9rx4g0ElJnor1-LcVr23PIIpSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ac:73:5d:dc:64:eb:b2:70:ed:c7:8e:e2:d0:39:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27daf1e20d049499e8af5f8b715af6dcf208a521
Validity
Not Before: Oct 28 18:01:19 2026 GMT
Not After : Oct 29 18:01:19 2026 GMT
Subject: CN=e1bbe72234315a360f66047489344e0a8b9e5531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:6b:09:6e:3e:90:65:ad:1f:c6:36:8e:b1:
91:cd:ed:66:f6:1f:32:11:b9:22:1c:71:08:28:52:
d1:36:7f:e3:61:71:10:af:9a:24:d4:25:4f:51:ef:
07:ac:07:05:4c:ec:c2:a1:9f:99:20:1b:19:f5:14:
09:7b:69:20:26:e5:5c:08:29:c8:91:be:0e:0f:1b:
16:5d:1a:90:5f:f9:c7:f6:e7:71:84:e6:84:e1:22:
08:85:f6:b8:76:a1:df:db:b4:66:90:29:b3:f3:28:
62:71:bd:cb:ac:13:44:90:d5:53:7e:61:16:be:05:
03:d2:35:4b:2c:45:9d:1e:29:da:29:6b:17:d9:e0:
ce:29:0e:51:62:1d:4a:04:f1:b3:7b:6e:5c:a5:ce:
2c:03:19:d8:f0:cb:90:05:a9:19:21:37:36:19:18:
9c:51:ab:ee:54:fe:7f:f7:3e:cb:10:85:c7:d7:21:
62:af:62:d0:fe:47:9f:96:5c:4f:68:7a:6c:f5:0d:
d1:39:43:03:75:49:96:be:e5:23:23:81:e1:9a:63:
c3:19:3e:71:e8:b5:81:bb:8f:f6:03:06:f5:92:cc:
30:72:94:b1:0b:b0:ee:02:c6:e9:75:85:1c:ca:17:
40:80:d3:50:75:e6:fb:f4:64:8a:10:b1:ee:d5:8e:
bf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BB:E7:22:34:31:5A:36:0F:66:04:74:89:34:4E:0A:8B:9E:55:31
X509v3 Authority Key Identifier:
keyid:27:DA:F1:E2:0D:04:94:99:E8:AF:5F:8B:71:5A:F6:DC:F2:08:A5:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9rx4g0ElJnor1-LcVr23PIIpSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a4:7f:71:c2:c4:e5:95:3e:f9:8e:94:8f:fa:6c:32:51:f3:
8b:f0:c5:6e:fa:91:d6:e8:80:d1:f3:2c:6f:f5:29:36:2a:74:
18:f8:0a:3f:03:1d:d1:71:ad:67:17:fc:81:be:19:78:c4:f9:
21:61:48:4a:41:f9:b3:2e:2b:9f:f7:ff:85:91:db:ea:a2:63:
94:9c:b4:f7:31:eb:70:d1:31:8b:b0:a9:12:cf:55:df:ae:35:
c8:40:9a:ad:b6:c9:5b:b5:9b:3d:4c:c6:f3:85:25:b4:5a:62:
d9:83:22:32:b0:d3:57:27:e0:fe:7f:c4:45:7b:74:1a:5a:56:
7b:c6:cd:5a:bc:fc:62:69:d9:a8:a9:b8:87:44:2f:43:c8:3f:
90:29:2f:30:42:dd:64:8f:24:32:d6:9a:28:86:79:8b:8e:e6:
fe:3b:92:fa:77:55:ff:ca:74:cb:01:70:1a:07:2b:d7:5f:65:
c7:84:5f:61:f9:28:c0:34:6f:8a:2e:4f:41:98:b5:3d:66:a2:
fe:d2:41:bf:cd:45:7a:6e:a0:d3:4e:51:69:ba:d2:8c:cb:a2:
87:7b:17:ff:32:62:5c:80:30:aa:e8:8c:2b:4b:36:de:05:28:
b6:7d:32:9d:88:09:52:ae:92:13:c4:9e:cc:f5:c7:bc:c4:c4:
c4:6e:15:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:48:04 2026 by rpki-client