Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
File: J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft (raw, json)
Hash identifier: oS8a0JuviaJZ4+7L2ey0MqSnzV6OB3xj1zqLeB4Jmuk=
Subject key identifier: 61:8C:D4:A9:6C:F2:6F:DB:5F:3F:FB:59:38:90:A9:CB:8D:3F:35:2A
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Certificate issuer: /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial: 01A06E027705663C5872144770BB5B298008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
Manifest number: 1899
Signing time: Fri 04 Sep 2026 20:00:50 +0000
Manifest this update: Fri 04 Sep 2026 20:00:50 +0000
Manifest next update: Sat 05 Sep 2026 20:00:50 +0000
Files and hashes: 1: 8pRpGLC7ufdVgfYDDUF6Zet2ESs.roa (hash: N6b81cttyVRNjS1aPTuek9kLwNALHCKPqaI95N5VpXM=)
2: J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl (hash: JLKHdsJartQoOLgc3zwTf2RsnKe3aHJYdmxBbhCQ0jw=)
3: iLJXM2riD2xLyWPgVHhFPJznv3A.roa (hash: htQVMbTQl+9gmW8aaJPtyq2ErZGw3e/ACgLnMofyCY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:02:77:05:66:3c:58:72:14:47:70:bb:5b:29:80:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Validity
Not Before: Sep 4 20:00:50 2026 GMT
Not After : Sep 5 20:00:50 2026 GMT
Subject: CN=618cd4a96cf26fdb5f3ffb593890a9cb8d3f352a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:25:2b:0e:9f:21:81:c3:ba:de:6a:24:fd:21:
fe:1c:66:fc:d8:98:7c:35:ac:43:54:46:5b:ce:07:
ed:7a:23:5c:94:f3:d8:46:4b:47:df:85:51:4f:f0:
0f:55:83:82:a1:16:42:a8:59:cd:34:74:94:5d:c3:
90:2e:dd:90:83:a6:fd:d0:87:52:77:14:e7:7d:d9:
94:41:73:43:58:c9:59:59:cb:b8:7b:eb:20:7e:16:
4e:6f:ee:29:ce:35:37:ca:1f:2b:8f:b0:a2:0a:72:
7e:13:3d:37:78:98:16:9c:9f:b6:07:58:36:34:e9:
69:1f:25:54:93:93:f0:13:fd:0a:a4:1b:c7:e8:36:
29:cf:d2:d6:39:b0:2f:b0:fe:ea:69:df:ef:3b:82:
b5:91:ed:fb:64:4b:df:69:14:a6:95:c9:d6:0c:93:
20:ad:bd:87:ac:0d:e8:a9:a9:24:ae:e5:c1:cd:d1:
4a:7c:9b:e5:ab:d8:49:58:b0:c8:4f:e9:a7:7e:24:
c7:b4:80:9e:4f:1f:ef:52:b0:e9:69:ea:47:d8:ca:
5f:dc:fd:03:0a:7e:03:51:ae:2d:e3:b0:af:a0:b6:
06:c8:0f:e1:52:75:2a:d3:9e:aa:33:0b:22:58:de:
56:1d:c1:54:f2:de:48:e7:37:d6:38:73:43:b7:8b:
bb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8C:D4:A9:6C:F2:6F:DB:5F:3F:FB:59:38:90:A9:CB:8D:3F:35:2A
X509v3 Authority Key Identifier:
keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8b:0a:82:60:5a:e0:d1:b5:16:f9:7a:9e:a8:01:4f:6a:09:
86:28:9a:a7:a9:1e:8c:d4:56:5a:0f:23:80:30:a5:f1:cd:e7:
3a:b9:c6:a3:dc:28:e0:a1:13:eb:a2:9f:93:e2:92:c1:6f:5a:
f6:ae:a7:e4:17:59:f8:6a:74:f7:a4:7a:3e:71:31:9e:7c:d8:
45:d8:49:a5:fa:d9:85:15:40:e7:35:57:1f:c1:7f:52:24:d5:
7e:8c:f9:5b:47:0a:ec:95:1c:95:59:af:d6:72:5c:5b:89:de:
43:6e:4a:28:6c:df:2c:9a:36:dc:66:4a:bc:45:68:e7:bb:65:
e7:1e:dd:bc:de:68:76:4a:90:27:ee:13:0c:02:50:58:62:c2:
8c:a6:a4:be:72:1b:15:95:ce:4b:d3:8f:43:e9:c3:06:64:c7:
d5:13:1a:33:61:32:0c:80:71:10:d6:f1:a8:46:0d:c6:e2:bc:
b7:ec:fa:a3:e1:82:5c:b6:fb:82:0c:a3:f7:a7:43:cc:62:ec:
32:54:a7:5d:25:02:0a:13:be:08:86:4c:ac:92:05:2f:67:3b:
c7:70:17:af:91:95:72:2c:61:0f:b6:1c:95:d9:f2:0f:90:47:
bc:1c:4c:c5:db:c1:58:8c:18:f2:44:25:d0:60:71:13:10:c9:
e9:ff:3c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:11:47 2026 by rpki-client