Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
File: J9ivflbIDRjclo9NvOyBP4XqMKQ.mft (raw, json)
Hash identifier: bNjJXFR0lJOiUPDopzy0syqXtFpzH0BBY17ZWHOB3IU=
Subject key identifier: 62:B4:0A:C2:71:93:35:9F:34:B1:5D:8A:91:FA:DE:F5:12:06:EA:F6
Authority key identifier: 27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
Certificate issuer: /CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Certificate serial: 019CE17DB92FBE9ED79DFD05591FE0E0E032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
Manifest number: 1020
Signing time: Thu 12 Mar 2026 10:00:38 +0000
Manifest this update: Thu 12 Mar 2026 10:00:38 +0000
Manifest next update: Fri 13 Mar 2026 10:00:38 +0000
Files and hashes: 1: J9ivflbIDRjclo9NvOyBP4XqMKQ.crl (hash: ww9LD9o91dVVH7McW6FtbsJ8qN4AZ9GL/uVZSKx5NXg=)
2: zpBvr7D0ZTnk2RASjPjWwuPCBo4.roa (hash: 6ihXuEihTvHi2kmbZX2/h+YBlObaB/XzKmiIBYoX2XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:7d:b9:2f:be:9e:d7:9d:fd:05:59:1f:e0:e0:e0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Validity
Not Before: Mar 12 10:00:38 2026 GMT
Not After : Mar 13 10:00:38 2026 GMT
Subject: CN=62b40ac27193359f34b15d8a91fadef51206eaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:41:db:43:13:4e:42:ed:75:85:2f:0c:3c:28:
b2:5c:91:d5:c4:2a:5c:6e:5b:40:95:93:6f:62:e3:
6a:02:41:91:eb:24:eb:2f:d5:09:c3:29:90:f3:4b:
42:99:8f:3a:5b:01:79:ad:30:97:2b:b6:1b:4f:df:
7c:97:b4:be:80:bf:13:42:a9:f7:f9:20:a7:88:16:
9a:89:35:2a:0d:76:84:79:03:fd:57:d8:de:92:a8:
d4:9f:48:d0:fc:23:1e:6b:b5:00:dc:33:f0:88:fa:
b7:8a:be:36:14:a3:f4:21:ea:ef:22:a0:f5:44:5a:
e0:2f:23:70:6c:c0:97:95:89:48:e4:f1:26:5a:bd:
e2:21:52:d8:4b:44:10:9c:8a:09:d0:b7:ed:37:da:
f6:dc:2d:16:17:b0:f1:52:d7:45:7d:47:e6:87:e0:
3b:7f:86:80:3f:8f:f2:85:76:1b:d0:cb:46:a2:ca:
da:d0:da:fc:db:b5:79:bb:d8:5f:44:f5:70:b1:fb:
40:23:17:58:37:ff:f9:c1:2f:12:a4:c8:cc:80:5c:
79:d2:2d:9c:72:80:be:70:44:ef:94:88:a2:d9:5e:
b0:0f:6f:be:3a:5d:af:68:13:0e:ab:b3:b9:e1:14:
4f:19:31:4a:23:c5:34:03:9f:ac:2c:ef:79:d8:f0:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B4:0A:C2:71:93:35:9F:34:B1:5D:8A:91:FA:DE:F5:12:06:EA:F6
X509v3 Authority Key Identifier:
keyid:27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d7:1c:4e:2f:8b:6c:83:25:ed:8a:bc:8c:d8:cc:db:b2:14:
76:a8:04:de:9d:3b:13:68:98:3a:a9:13:2b:b4:4c:99:60:05:
16:d6:26:3f:75:14:7d:9d:66:46:7b:a5:ce:e9:e0:70:f7:74:
dd:a2:d3:d5:a5:e0:1e:ae:e7:35:34:fd:1b:46:aa:7a:d9:59:
4a:0d:9a:af:28:fe:cb:4d:1c:9e:8f:f6:4e:51:79:59:42:29:
0c:a6:c4:f1:7a:09:37:a1:dd:68:44:e3:2e:47:c6:45:31:01:
1d:d3:a1:6e:b4:e3:63:d3:14:d7:1f:62:79:25:91:80:b3:f2:
a9:cf:8b:d9:23:ff:ef:4f:90:cb:a2:0a:82:00:33:3b:2b:a0:
78:a9:fe:4c:9c:4f:88:36:2f:e9:eb:f3:b2:5f:b6:6b:e6:70:
8e:57:42:ae:e2:b4:3a:b3:56:18:5d:a8:08:3b:12:3a:b0:c9:
92:52:43:92:05:2d:c9:f9:04:bd:f4:5c:a3:d1:41:e8:83:61:
8b:63:8d:22:75:89:e9:8e:5e:5d:67:f0:81:ba:46:d0:34:7c:
77:24:8d:c9:ec:e3:17:3f:63:60:0c:8f:3f:27:5a:da:0d:6b:
c6:31:63:54:0d:30:49:78:b8:ed:a6:0e:51:c0:29:7d:11:24:
b0:67:b7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 17:11:10 2026 by rpki-client