Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
File: J9ivflbIDRjclo9NvOyBP4XqMKQ.mft (raw, json)
Hash identifier: ywzm+IDtHNv6Pbl5FnNJOr+9degpQ1rdz2SKsNOrZl0=
Subject key identifier: 81:0C:0F:4A:16:49:8D:26:65:87:B2:85:37:65:CD:3E:AF:85:CA:0C
Authority key identifier: 27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
Certificate issuer: /CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Certificate serial: 019DCF07ED04E73FDEA46ED7890D15A6EA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
Manifest number: 109B
Signing time: Mon 27 Apr 2026 13:01:35 +0000
Manifest this update: Mon 27 Apr 2026 13:01:35 +0000
Manifest next update: Tue 28 Apr 2026 13:01:35 +0000
Files and hashes: 1: J9ivflbIDRjclo9NvOyBP4XqMKQ.crl (hash: ujmaAq5dOsrr7EPugQvIqDs+/rWer0shd4Xz/mf5nbs=)
2: zpBvr7D0ZTnk2RASjPjWwuPCBo4.roa (hash: 6ihXuEihTvHi2kmbZX2/h+YBlObaB/XzKmiIBYoX2XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:ed:04:e7:3f:de:a4:6e:d7:89:0d:15:a6:ea:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Validity
Not Before: Apr 27 13:01:35 2026 GMT
Not After : Apr 28 13:01:35 2026 GMT
Subject: CN=810c0f4a16498d266587b2853765cd3eaf85ca0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fb:a6:51:7e:00:75:62:47:28:54:4c:5a:a1:
7a:d9:38:62:c0:04:a1:dd:95:47:98:d5:41:f0:c6:
47:69:89:13:69:cd:82:3b:0e:ca:17:5b:07:65:49:
c2:94:9c:e6:18:38:43:1e:02:a4:bf:5d:85:72:45:
0c:cf:f8:e2:41:f3:cb:46:c1:0d:a7:36:64:fc:f7:
d1:a4:82:ee:77:7c:2c:91:78:be:0c:54:68:14:aa:
f5:d6:97:47:ac:53:c3:b9:42:a1:89:27:99:c4:91:
ee:f6:e8:47:e9:71:f1:56:ff:a4:b9:e4:04:10:1b:
cd:90:ab:14:73:7f:0f:2d:c8:f3:57:60:35:f7:e9:
a0:43:b2:31:f5:e8:58:e0:f2:c0:28:a1:06:96:54:
82:38:4c:3e:67:9c:76:6b:38:d2:ac:c9:4e:ca:16:
3c:99:a0:72:7e:d9:f2:6c:98:7b:03:02:3d:89:26:
01:35:7a:da:0b:b7:7d:58:9d:c4:e2:f8:2a:c7:e0:
0f:1b:c7:0b:3e:f4:ff:4e:1b:a5:13:59:6f:76:7c:
ef:9d:e4:89:5a:e9:ef:19:a9:13:e3:2b:84:95:10:
58:a4:de:c6:32:b5:8f:d1:10:b7:f8:65:33:48:9f:
2b:5e:d5:74:06:1a:e2:33:7b:2a:b7:37:0c:b0:07:
d1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0C:0F:4A:16:49:8D:26:65:87:B2:85:37:65:CD:3E:AF:85:CA:0C
X509v3 Authority Key Identifier:
keyid:27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:75:8c:a1:89:dc:0d:3f:05:1f:99:76:a8:f6:be:cc:57:29:
2a:03:aa:c5:9b:b3:dd:02:8a:1e:7c:e9:a7:70:e3:ac:cf:6e:
f2:15:af:ba:1a:fe:1b:06:0a:9a:54:7c:d4:76:1d:05:35:c2:
6b:56:d8:1c:2e:4d:b4:0b:9d:19:fd:62:60:39:ad:e0:02:d6:
59:bc:a8:15:26:d0:9e:0d:d6:3b:34:68:02:2d:95:88:55:32:
a3:4d:83:06:d3:16:42:ce:c9:cd:42:6e:da:53:0a:ac:84:46:
fc:c0:7f:61:b9:9f:6f:b0:77:89:50:d0:0e:cf:d5:f5:13:73:
50:7b:f5:87:75:d0:a7:fc:f3:ea:9d:e8:59:78:c7:30:43:26:
bb:df:dc:5e:1c:7f:a2:6f:5a:59:98:3d:c6:4f:34:e6:fd:93:
9b:00:4e:1f:7d:f2:20:0f:ac:43:42:35:ca:c5:05:c6:5b:96:
d1:74:91:1d:74:f1:91:a4:78:5d:73:d6:2a:85:32:0d:8a:be:
a0:83:38:66:28:5d:dd:06:61:b4:5b:f0:c3:2a:d5:71:fc:4c:
e8:0f:13:4b:84:4d:9a:1b:50:60:46:b1:9e:e8:b9:e1:d0:16:
c0:ff:7e:ea:59:a8:33:71:aa:3a:cd:df:50:64:f1:12:26:b3:
be:e6:a6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:58 2026 by rpki-client