Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
File: J0hgAkaZUbaABwTI8CysdLX4KQU.mft (raw, json)
Hash identifier: c8JlBNXAhpD0U+uelxtg9hl5hXGwNsXgGbzUUg9Hlw8=
Subject key identifier: 82:23:CE:8D:38:BB:A3:79:E1:20:F4:E3:D1:44:9A:8F:82:D4:F0:43
Authority key identifier: 27:48:60:02:46:99:51:B6:80:07:04:C8:F0:2C:AC:74:B5:F8:29:05
Certificate issuer: /CN=27486002469951b6800704c8f02cac74b5f82905
Certificate serial: 019D3865B2AFD2B59DD7B4016BC4D6928DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
Manifest number: 0750
Signing time: Sun 29 Mar 2026 07:01:22 +0000
Manifest this update: Sun 29 Mar 2026 07:01:22 +0000
Manifest next update: Mon 30 Mar 2026 07:01:22 +0000
Files and hashes: 1: J0hgAkaZUbaABwTI8CysdLX4KQU.crl (hash: oXpQZwYD7FepmDcOTkHMMwLLrW1K4DGSSvcWOiMo1m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b2:af:d2:b5:9d:d7:b4:01:6b:c4:d6:92:8d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27486002469951b6800704c8f02cac74b5f82905
Validity
Not Before: Mar 29 07:01:22 2026 GMT
Not After : Mar 30 07:01:22 2026 GMT
Subject: CN=8223ce8d38bba379e120f4e3d1449a8f82d4f043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c0:7f:48:8c:54:f3:ff:b8:99:95:67:2c:2a:
8a:3b:d6:96:50:72:10:56:a2:af:d3:c1:ca:97:55:
66:19:20:48:9b:0e:24:19:a6:e6:2d:a0:f0:4c:0d:
40:43:b9:97:8e:76:2d:c6:d1:9e:2e:56:5d:59:92:
2f:e4:f1:dc:d2:4a:54:4e:1a:8f:4b:52:7b:eb:3e:
95:6d:21:59:a8:13:75:36:12:37:91:c1:f8:3e:f1:
65:d9:64:cb:3d:7e:ca:52:a8:86:dd:81:f7:ae:e0:
d7:70:cd:4e:4c:79:1e:00:4e:d3:c0:8e:d6:5b:71:
aa:84:bc:c1:eb:70:24:bd:3c:82:73:13:d2:be:19:
d4:2f:26:ee:95:d9:6b:e6:53:59:0e:8f:6e:98:db:
80:79:b1:28:6d:a5:e4:10:53:ef:c0:9f:59:ac:ca:
5c:48:da:b8:47:b6:39:fd:4e:7b:4e:28:5b:19:9f:
89:dd:fe:95:5f:cc:b2:19:21:ea:58:1b:d3:c9:32:
2d:cd:53:88:7b:50:61:a1:14:bc:c7:59:96:3e:3c:
60:ad:b1:0a:fe:f9:08:02:9f:6b:6a:3d:24:d0:fe:
fb:47:ba:48:46:bd:9c:17:ce:90:95:bf:d5:4e:3d:
a0:ff:7d:f5:b3:cc:d8:b3:5e:a6:c1:b4:1c:f8:b4:
ce:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:23:CE:8D:38:BB:A3:79:E1:20:F4:E3:D1:44:9A:8F:82:D4:F0:43
X509v3 Authority Key Identifier:
keyid:27:48:60:02:46:99:51:B6:80:07:04:C8:F0:2C:AC:74:B5:F8:29:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8a:67:c7:fd:62:0d:34:c5:1b:06:48:ee:4d:30:db:3f:76:
d2:d8:14:15:20:7e:93:85:cb:1b:71:4a:29:fd:ca:de:12:01:
dd:fd:9f:4b:38:1e:e7:fb:6c:a6:26:fd:64:84:28:f2:97:49:
40:93:14:77:3c:ef:8e:38:50:21:fe:f2:aa:b8:98:9c:60:1a:
c9:50:30:e8:74:58:46:8e:5a:18:e8:80:ab:76:ba:7c:9f:23:
7f:f3:07:17:22:90:1e:a3:31:ab:a2:67:b8:cc:21:7f:aa:d1:
fc:2c:97:0f:f8:85:39:f0:7d:a2:41:b3:cc:41:3b:b9:86:85:
1e:ba:c3:37:15:00:b2:29:62:d8:bb:a6:ab:92:aa:e7:9d:70:
6f:4c:8f:1f:8c:8a:09:4c:4a:a4:4f:93:57:df:42:95:9a:d9:
fa:47:5c:3d:f6:dd:c1:4a:6c:20:8a:6f:06:16:e4:6e:fc:10:
ce:d0:87:5e:08:79:fc:ea:f5:0b:90:23:66:ab:d1:b1:40:04:
9b:b6:65:36:eb:7c:dd:de:00:0b:aa:8a:78:cb:b4:79:71:bf:
6e:6c:86:10:13:f4:cc:77:31:f4:30:ed:d5:c9:7f:71:4b:c9:
d5:9f:a1:9c:64:06:b3:70:6f:5b:de:cb:7c:58:1a:85:95:c6:
75:42:91:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:01 2026 by rpki-client