Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
File: J9rx4g0ElJnor1-LcVr23PIIpSE.mft (raw, json)
Hash identifier: qjA0KUDfa315dt7JQsv6WdhmqaVvxKX40eJbKjJh57Y=
Subject key identifier: E7:18:38:20:14:31:7D:DB:90:2E:A8:2D:87:6D:4A:54:F5:33:89:DE
Authority key identifier: 27:DA:F1:E2:0D:04:94:99:E8:AF:5F:8B:71:5A:F6:DC:F2:08:A5:21
Certificate issuer: /CN=27daf1e20d049499e8af5f8b715af6dcf208a521
Certificate serial: 019F85D6E16D95E1C5383B53C916B68B6BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9rx4g0ElJnor1-LcVr23PIIpSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
Manifest number: 2D
Signing time: Tue 21 Jul 2026 18:01:19 +0000
Manifest this update: Tue 21 Jul 2026 18:01:19 +0000
Manifest next update: Wed 22 Jul 2026 18:01:19 +0000
Files and hashes: 1: J9rx4g0ElJnor1-LcVr23PIIpSE.crl (hash: SG2q7gaWBlmh+aqR5fGSNvvXUVnSdQeEBSCk1CYvST0=)
2: s3CTsEzepaXlQZBtmGn_vCqhH9c.asa (hash: pkiv835CcXvEGW6xy8WrRo2GTtt82YoHF6DEjpPgKn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9rx4g0ElJnor1-LcVr23PIIpSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:e1:6d:95:e1:c5:38:3b:53:c9:16:b6:8b:6b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27daf1e20d049499e8af5f8b715af6dcf208a521
Validity
Not Before: Jul 21 18:01:19 2026 GMT
Not After : Jul 22 18:01:19 2026 GMT
Subject: CN=e718382014317ddb902ea82d876d4a54f53389de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:03:8e:9f:4a:40:04:95:76:6e:09:cc:c1:36:
ee:dc:a7:53:dc:4f:fc:f7:b1:1c:d2:44:2f:10:37:
26:fe:0f:2c:54:29:2f:31:38:13:9a:a3:14:0a:25:
04:da:6e:b5:b4:96:73:79:2b:0c:b8:71:ea:3d:38:
d3:a0:84:ec:69:bc:12:c1:5a:c1:ab:cf:0b:30:d0:
2f:6a:79:cd:6f:de:ac:c6:85:aa:13:a6:3f:20:4c:
f1:c2:61:79:27:db:2a:3b:3c:e9:98:17:62:04:35:
33:7d:92:e0:19:97:a5:4d:15:64:63:d7:78:ca:31:
5c:a2:27:5e:57:6d:8c:11:eb:17:61:2a:90:a4:a2:
70:31:4f:e1:aa:8b:ac:2b:81:fd:c1:e1:59:11:7f:
66:ac:55:2d:a0:dd:aa:85:82:cd:84:02:c4:1d:f0:
b8:ad:03:b8:10:fa:5e:63:b2:92:f0:20:f9:83:0c:
18:c2:88:8b:4e:5e:ba:6a:77:66:58:ea:78:6a:70:
97:50:75:c1:96:dc:2b:58:6f:aa:e2:e2:63:1f:89:
ec:99:ae:16:34:98:36:9e:d3:38:8f:c9:62:c2:2f:
1c:2e:d2:b2:3e:3f:e5:6e:1c:4c:03:dc:b5:27:bb:
f1:77:44:a5:0d:5b:a8:42:b7:e4:65:7f:e3:53:bc:
a2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:18:38:20:14:31:7D:DB:90:2E:A8:2D:87:6D:4A:54:F5:33:89:DE
X509v3 Authority Key Identifier:
keyid:27:DA:F1:E2:0D:04:94:99:E8:AF:5F:8B:71:5A:F6:DC:F2:08:A5:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9rx4g0ElJnor1-LcVr23PIIpSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:33:8b:2a:08:25:92:5f:cf:0b:25:ae:7f:d8:38:cf:ee:e9:
26:d3:ec:51:c7:0c:ab:de:aa:05:15:ae:ff:79:d9:10:b3:a3:
2c:59:e9:24:a9:aa:1d:1a:b0:bf:f4:20:b3:d9:f0:ad:ad:2f:
70:74:c2:5a:7a:8c:fa:5c:e8:2d:e4:e0:4f:18:da:d8:82:42:
d5:2e:ae:f0:11:2c:4f:fe:a3:bc:dd:dc:c4:16:8e:4d:6f:5b:
21:72:42:23:de:40:68:4d:ff:33:86:a3:af:3b:b9:55:dc:df:
18:46:1a:fc:fd:4b:37:ba:ba:8a:8c:34:46:c0:1d:dd:3f:6d:
e5:03:47:3c:7c:73:c0:25:e4:7e:7f:19:c1:40:a2:e0:f4:72:
a9:cc:59:63:8f:1d:ce:9d:3c:92:86:e0:b0:d5:a1:bb:d6:9a:
02:6f:7a:1b:13:ec:a6:38:a8:ac:d9:06:b9:1a:d2:ec:85:b0:
52:9b:74:74:78:d7:a9:68:0c:53:6e:93:95:35:d7:11:89:2a:
83:60:b6:6d:9c:3c:48:31:88:cb:57:37:9c:a9:b2:33:69:7c:
ed:9d:43:8c:db:54:27:8b:1e:61:a9:c3:fd:91:2f:9f:ca:a5:
67:42:60:20:56:41:01:3d:4b:4c:6f:82:a2:30:e7:4d:36:c8:
2f:c2:a4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:12:53 2026 by rpki-client