Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
File: J9VOSniNaWei7vOmaSYiYm9U760.mft (raw, json)
Hash identifier: wK/6Hi1bSQ2fOfscxkhWuTAbZxgPb/cL8BxQS4zbY9I=
Subject key identifier: 00:F0:1D:8F:99:C9:AD:51:C1:F9:3F:1C:8F:0D:83:9F:D0:48:64:B3
Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
Certificate issuer: /CN=27d54e4a788d6967a2eef3a6692622626f54efad
Certificate serial: 019D382EA6DCC85F40DF87EA60B519002B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
Manifest number: 0DB7
Signing time: Sun 29 Mar 2026 06:01:14 +0000
Manifest this update: Sun 29 Mar 2026 06:01:14 +0000
Manifest next update: Mon 30 Mar 2026 06:01:14 +0000
Files and hashes: 1: J9VOSniNaWei7vOmaSYiYm9U760.crl (hash: VIjGuFWnz6/IGEXNuXX/7kIxfoIfs73HNLUkC7MoJwo=)
2: tDGcwqlaTPnixLkEemSY0dR8oEE.roa (hash: dntAFtICbpLiWSfID0C/faNT0VRienZetlVV8mxC9ro=)
3: zm911m8cc8YZZfJbwYQ5aTAaoOY.roa (hash: ReJF3cVbfAIqGPp+g2zOsYcwozrF/qsi8DLjV5pxna8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:a6:dc:c8:5f:40:df:87:ea:60:b5:19:00:2b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad
Validity
Not Before: Mar 29 06:01:14 2026 GMT
Not After : Mar 30 06:01:14 2026 GMT
Subject: CN=00f01d8f99c9ad51c1f93f1c8f0d839fd04864b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:00:8a:ac:4c:a1:ed:0d:21:c7:6a:bb:86:
a9:2c:4b:af:b9:19:72:c7:88:af:13:7c:d4:89:9f:
91:b8:9a:ff:6d:27:8c:9a:53:a8:07:18:33:db:ca:
3d:34:33:56:46:27:8a:1b:36:99:42:e1:d2:f5:12:
29:88:97:e2:6a:d8:88:41:c7:8d:3b:0f:29:11:e1:
89:ed:71:62:c4:fb:82:85:27:6b:68:74:bf:ad:74:
0a:96:14:05:19:d1:38:85:90:df:1c:51:57:d7:5c:
0b:d7:78:36:1a:2c:83:38:08:8a:96:13:c9:fc:87:
7b:cb:35:b6:f6:54:55:c1:93:87:b7:50:ee:63:fe:
08:bc:9c:79:90:51:19:98:1c:b8:38:3a:13:a0:67:
2a:30:7d:20:04:af:90:e8:41:d5:a1:30:23:11:ed:
32:31:59:b7:1a:77:5a:8e:66:73:f3:2c:73:29:57:
8a:17:07:ec:8e:ad:0f:41:65:06:3e:81:d4:46:b0:
93:cc:70:b6:40:72:9d:a3:7c:4f:54:94:48:a7:1d:
b6:4f:74:d4:56:92:6b:33:f9:90:a7:2d:81:71:24:
b7:44:3f:41:50:47:90:3f:ff:e6:65:23:1b:43:1e:
2f:9c:9e:83:d0:28:7f:65:1b:b4:50:b2:d8:80:97:
6f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F0:1D:8F:99:C9:AD:51:C1:F9:3F:1C:8F:0D:83:9F:D0:48:64:B3
X509v3 Authority Key Identifier:
keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8e:fb:f5:87:a6:f2:e2:f4:42:cb:cc:4a:f9:73:35:65:a1:
46:8f:0d:d5:a0:57:36:cb:82:b7:ec:4a:4f:2b:be:ff:b6:dd:
30:be:a5:98:40:69:f8:2b:b0:85:38:e5:25:fd:a4:e2:67:fb:
5d:c7:20:5c:9f:43:fb:cf:7d:ed:14:bd:85:58:14:2f:32:c4:
98:2e:91:98:8c:78:26:ba:da:e4:4d:38:ad:3a:b5:4f:74:f7:
77:d4:7a:a3:45:16:80:84:a2:70:81:57:69:f0:1f:54:9e:37:
f6:cd:0c:d8:15:53:0d:64:ff:96:bb:bf:ef:37:56:ee:1d:3c:
cf:23:48:f6:ca:b9:81:e5:40:5b:e0:25:1a:6e:26:e5:8f:30:
03:76:4e:63:36:06:df:c1:41:f2:19:0e:b3:a8:40:50:a0:35:
d7:d5:7a:33:3e:e6:d0:87:e0:12:8d:48:29:56:cf:81:b4:71:
9c:e3:59:04:18:30:cc:ac:d7:93:70:d5:03:5a:46:82:53:d5:
15:05:1b:1d:64:78:ad:5e:9d:cc:aa:74:3c:b5:75:6e:6a:ae:
e4:1c:85:d9:98:c2:97:16:c0:81:75:8f:b4:76:a5:ed:ef:f0:
60:74:9c:3e:96:43:87:80:a3:7e:01:ff:7a:df:f9:bf:da:30:
26:a1:99:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:20 2026 by rpki-client