Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
File: j9-HylMGV5hEdkUlX4KbU7wdohU.mft (raw, json)
Hash identifier: brYhyzoISLI/pWbn0IHe4wqWpsRIcPH36GhiCN81r74=
Subject key identifier: 92:93:D2:33:19:96:C8:57:12:28:B5:CF:31:F4:34:37:33:5A:13:EF
Authority key identifier: 8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15
Certificate issuer: /CN=8fdf87ca53065798447645255f829b53bc1da215
Certificate serial: 019D3941506DC39EAD023D30C6925EF6894D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
Manifest number: 07DA
Signing time: Sun 29 Mar 2026 11:01:14 +0000
Manifest this update: Sun 29 Mar 2026 11:01:14 +0000
Manifest next update: Mon 30 Mar 2026 11:01:14 +0000
Files and hashes: 1: aiNfAtwLgUKsL4qA7akVZhQU1bA.roa (hash: Hw2VjFxuxUBTnIvwm5B0o1nhy9vvmSj+hAxZVQnZIws=)
2: j9-HylMGV5hEdkUlX4KbU7wdohU.crl (hash: wGrkD3MK4MoE6PR99MutInYoIskaPdU/P/rKJ8Rvyto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:50:6d:c3:9e:ad:02:3d:30:c6:92:5e:f6:89:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fdf87ca53065798447645255f829b53bc1da215
Validity
Not Before: Mar 29 11:01:14 2026 GMT
Not After : Mar 30 11:01:14 2026 GMT
Subject: CN=9293d2331996c8571228b5cf31f43437335a13ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4a:ba:82:4e:d7:e9:cf:7c:ca:c4:5c:c1:72:
a1:c2:94:28:90:c2:9c:e5:17:70:b7:24:ce:4a:9a:
50:ed:8b:04:e7:93:d5:1d:20:9d:b7:7b:81:00:58:
c0:4c:17:30:10:e4:85:3c:25:71:07:c2:56:63:ab:
b1:3b:24:71:aa:d8:f3:f9:9d:df:c1:0b:55:c5:9d:
3c:60:75:72:12:e2:be:f3:ea:11:d4:d7:07:b7:78:
e5:f1:6d:b8:4e:9f:41:86:93:47:04:1c:6c:29:51:
0a:81:83:a1:bf:1b:63:bd:0d:f6:e2:eb:57:34:e2:
33:61:1e:ab:15:7d:b4:72:bd:56:4f:e8:43:fd:08:
44:89:50:9e:74:dd:da:bb:a1:95:38:88:a7:ac:43:
95:90:be:27:37:dc:5b:d6:65:ba:85:3c:6f:65:55:
6f:53:12:e9:89:3d:1c:d1:ee:31:ea:0a:e5:1f:c6:
44:a8:02:5f:3f:77:58:e6:a4:ed:2f:58:a2:35:98:
39:4d:03:a8:c3:62:aa:10:98:57:d2:1e:a1:69:a3:
f3:90:80:aa:b2:8b:ce:81:d1:b5:57:26:d9:00:ad:
56:3a:39:1f:59:d6:5a:3b:7d:e7:48:5a:6e:3d:26:
27:30:ff:bb:40:82:0a:0a:9c:36:46:2b:ef:26:de:
13:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:93:D2:33:19:96:C8:57:12:28:B5:CF:31:F4:34:37:33:5A:13:EF
X509v3 Authority Key Identifier:
keyid:8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4f:0b:f0:4f:98:b1:40:7b:7d:b7:2f:e7:a5:ba:1b:30:f9:
d4:eb:ab:83:33:01:6f:1a:41:5c:e3:82:05:af:64:b1:6c:eb:
e1:40:eb:ed:66:19:ed:70:15:df:81:de:e0:d9:c9:a2:fa:60:
8e:33:de:6c:64:06:87:cf:01:c2:bc:73:c5:d5:98:99:4c:f4:
ee:f1:2e:fc:05:cd:f2:cb:6d:3f:cc:c1:c0:6d:81:23:0a:d3:
00:a2:f7:e6:21:1f:7e:0c:c1:81:7f:dd:5c:33:0d:a9:de:20:
01:4d:10:9a:4a:95:fd:35:d2:bf:e6:fa:31:17:64:21:d0:e2:
e2:18:1c:41:33:09:d0:17:63:fd:dc:d4:a3:2c:68:b8:3d:9d:
37:56:f5:b8:a0:85:8d:4e:02:9f:8c:bb:96:0f:7b:88:3a:16:
d3:78:e7:53:d7:e3:ec:b0:29:6f:24:20:ba:05:8c:ef:76:f7:
47:94:3d:18:75:fc:90:af:f0:c7:78:3f:51:f1:84:ad:31:ab:
cb:83:a5:58:6d:7e:04:5c:b8:9c:6a:52:59:74:03:8c:96:19:
8d:30:7d:f0:52:34:6f:22:f3:06:89:ab:c3:3a:a8:a9:5a:3c:
6c:64:a2:0f:70:cc:59:29:02:d6:7b:47:74:45:9a:8d:5f:7e:
b2:ca:54:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:33 2026 by rpki-client