Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
File: J7syqoyfjQXFF74q1mUvZlUKjVc.mft (raw, json)
Hash identifier: 4IieMQdokCMN4Eq8DYsVbyL6qRxADEPyGmi/7JcTaa0=
Subject key identifier: B5:B8:9C:70:2A:ED:7A:70:13:54:5E:C6:69:F5:7C:2E:09:18:37:E3
Authority key identifier: 27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
Certificate issuer: /CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Certificate serial: 019D37C00414F0A57628607B8083B551D4EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 04:00:23 +0000
Manifest this update: Sun 29 Mar 2026 04:00:23 +0000
Manifest next update: Mon 30 Mar 2026 04:00:23 +0000
Files and hashes: 1: 3RCjNuMxUkfSYyNOUlggwRfWfc4.roa (hash: UnwrsssJDeDLbtzFhokPg+3DUFYJBO3poSSiUsMCOJk=)
2: J7syqoyfjQXFF74q1mUvZlUKjVc.crl (hash: Y2vcp6NhHA/3zLs/qVRTQhzIHasLdwm1l1oTKZMaLwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:04:14:f0:a5:76:28:60:7b:80:83:b5:51:d4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Validity
Not Before: Mar 29 04:00:23 2026 GMT
Not After : Mar 30 04:00:23 2026 GMT
Subject: CN=b5b89c702aed7a7013545ec669f57c2e091837e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cf:0b:b0:8c:52:d1:fe:94:c6:08:36:e8:34:
09:d6:cd:d5:29:ba:ec:4b:02:54:04:e2:64:72:65:
48:8a:9e:db:9f:03:b8:f1:52:48:35:84:df:20:1e:
d0:81:d7:70:22:02:85:47:16:50:15:ec:25:15:a7:
5a:80:19:3e:cc:74:3c:7b:5f:4b:1a:ef:ec:aa:58:
d1:ee:00:a6:a0:96:d9:8d:e8:a3:05:5c:93:56:f0:
43:69:de:34:f9:0d:45:f2:b0:3d:3e:53:e9:ef:f1:
b5:d2:47:7d:a3:16:a9:68:1b:ec:59:ad:1d:aa:de:
5f:6e:d5:a9:41:13:fa:b4:ad:83:d3:f7:4b:b9:62:
e5:77:8d:ab:62:80:23:a2:75:52:7a:3c:29:61:14:
d6:98:d9:2a:a7:61:5e:90:1d:05:34:1e:ee:67:7e:
46:33:a4:45:f9:e9:cc:ca:96:e4:6b:ef:af:c2:7e:
dd:75:16:59:a0:55:48:36:69:d5:5c:00:e5:d0:8e:
91:5c:29:e4:64:9c:8a:34:8e:37:8f:f9:4b:18:2e:
11:49:25:3d:7e:56:5e:a6:b5:fc:25:d0:6a:81:6d:
12:bf:7d:13:d1:2f:f2:9b:3a:35:ce:4a:26:11:63:
07:6c:7f:4e:0d:0c:61:07:59:47:53:b2:df:8c:69:
10:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B8:9C:70:2A:ED:7A:70:13:54:5E:C6:69:F5:7C:2E:09:18:37:E3
X509v3 Authority Key Identifier:
keyid:27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:64:e8:85:31:dc:6f:85:8c:1e:9f:9e:a8:31:b6:74:b0:b1:
75:79:28:32:2e:25:9f:07:0e:86:2f:98:45:ea:e6:f7:d0:1b:
64:a0:87:9c:2e:25:54:68:69:e7:6e:ad:e4:ae:3f:0d:ad:3d:
cd:fb:c9:dc:44:86:70:ed:1f:fa:14:31:b8:ae:63:fb:d5:b0:
be:ff:e2:55:bf:12:c6:0d:4e:9b:55:85:41:36:05:dc:73:70:
cc:29:d6:70:d3:a8:0d:a4:8b:0e:92:d6:8c:e0:61:44:d2:f7:
94:01:13:f7:8a:93:00:02:50:29:fc:c3:a3:5c:41:8c:eb:5c:
49:e7:78:ad:b8:cb:8d:ed:d3:35:d9:bf:25:72:7b:d6:dd:e9:
cc:66:4b:ba:10:89:9d:c0:c3:8a:7a:10:44:4d:ec:ad:d4:56:
6e:e1:aa:bb:75:25:01:74:3a:65:3c:df:4b:b3:68:ae:2e:af:
85:8c:7f:60:3b:f9:60:cf:32:d8:8d:06:f3:a3:e5:1a:b4:17:
18:4f:bc:8a:1d:85:3b:59:66:13:c5:a8:08:83:30:6a:e9:85:
b9:88:3a:23:38:96:0c:ec:89:b2:da:63:7c:9d:4d:eb:33:97:
fc:96:f9:17:06:3e:d0:5e:a7:e7:70:e6:e3:a9:9e:09:2e:50:
19:77:1b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:14 2026 by rpki-client