Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
File: J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft (raw, json)
Hash identifier: yc0XsDwOUaoqU4CAJ9uqk2/ctyAXrGllIB7zB++U97g=
Subject key identifier: 63:A9:47:C2:01:DD:FC:38:8D:89:E2:A6:46:6A:EE:C1:76:EB:A9:C1
Authority key identifier: 27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A
Certificate issuer: /CN=278901c061a355a3fdaace0c80b967ad1cd3717a
Certificate serial: 019D3752FF3365AF9D8F24C54938BFA2D6D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 02:01:19 +0000
Manifest this update: Sun 29 Mar 2026 02:01:19 +0000
Manifest next update: Mon 30 Mar 2026 02:01:19 +0000
Files and hashes: 1: J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl (hash: HU+8nFuTefbsDHIBbtKGMSgudowVoKaIWqvIWWkJYRo=)
2: do8SOe-ERpHxMjDsw45T1qLXF5s.roa (hash: r8j5u9eIygVJJMrAiUaqnzsEWnLw7mdb+0WkkpHgFnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:ff:33:65:af:9d:8f:24:c5:49:38:bf:a2:d6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278901c061a355a3fdaace0c80b967ad1cd3717a
Validity
Not Before: Mar 29 02:01:19 2026 GMT
Not After : Mar 30 02:01:19 2026 GMT
Subject: CN=63a947c201ddfc388d89e2a6466aeec176eba9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:0c:4b:44:2b:01:bf:0a:29:36:89:d1:ef:
08:f8:cf:1e:bd:1b:8b:02:3c:07:b2:cb:b1:7c:45:
96:0c:57:49:27:10:fe:8a:cb:8c:fd:1b:f8:ae:45:
b1:a7:8e:a5:bf:4d:f2:20:12:49:88:22:f5:cc:fd:
fb:0c:2b:9b:65:4c:fd:f5:97:64:7d:25:67:a0:92:
e5:a1:8b:6b:bf:7a:4e:b4:98:cb:2d:61:19:f2:eb:
0f:e3:39:6b:8c:26:7f:33:95:43:75:bb:25:ad:77:
d3:15:9f:b0:b6:9e:7e:fd:7c:bd:ff:06:e5:9f:69:
e4:7c:20:b4:61:d9:16:83:55:3f:6f:ed:ee:d6:3e:
08:a0:dc:c0:96:e8:57:48:39:ee:eb:0c:bc:e7:4d:
f6:2f:6f:2d:15:f2:a8:f4:a3:d4:9e:8b:83:c5:ed:
99:1a:91:ea:96:41:ba:6a:60:77:fc:c1:fa:31:07:
44:ce:f8:ec:31:24:de:55:46:0a:62:23:a4:99:cd:
5c:87:2a:39:1f:87:03:26:ce:08:7a:e7:b0:ee:86:
f9:c8:49:00:57:56:9b:17:44:9b:92:59:4d:0e:9b:
cb:53:19:a6:f0:98:0b:ff:c7:0e:61:32:02:d1:1d:
b8:86:d8:29:53:2c:af:0c:8a:5c:2f:83:3e:1a:28:
ed:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A9:47:C2:01:DD:FC:38:8D:89:E2:A6:46:6A:EE:C1:76:EB:A9:C1
X509v3 Authority Key Identifier:
keyid:27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:28:1c:fc:7d:15:9d:53:40:09:53:00:c3:c0:a9:f8:72:b5:
40:e0:ad:e4:75:56:fe:83:31:de:bf:2d:56:c7:79:3c:10:7e:
a3:31:ec:da:e8:7d:d0:74:fa:d0:74:f7:2e:27:7d:01:43:7d:
11:c3:82:87:62:d4:b2:8a:df:12:65:f1:69:94:78:65:0f:a8:
fe:b2:f8:12:6e:c4:69:5e:7e:28:81:8d:51:47:db:60:9e:4b:
24:01:a5:07:09:76:4b:3a:17:07:40:e4:01:12:1f:a5:34:0d:
8f:f5:73:64:88:5d:2e:f3:81:57:ec:c7:67:dc:f6:ad:b0:0a:
31:f3:87:51:09:c9:c6:1d:e1:c8:ee:31:f9:f2:b1:a9:0f:17:
19:a8:72:b5:d5:18:99:93:38:a6:9d:c6:be:ba:e1:5a:90:b5:
e9:a6:85:a8:30:ba:fa:f3:e9:cc:b4:ff:2a:e8:41:59:fc:7b:
70:b8:b3:19:db:29:c1:b6:60:cf:3d:57:5d:b3:0a:19:9a:33:
9d:a4:6f:ce:95:b4:0f:2b:3e:25:0f:72:80:a3:5d:63:48:c1:
4b:12:a5:9c:26:53:5c:9c:15:f1:eb:82:31:ac:0a:5e:6f:e4:
99:e0:45:cd:6b:7e:a1:f1:b6:75:11:ca:a0:0e:f3:43:a2:69:
b1:04:fa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:25 2026 by rpki-client