Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
File: J49i86X4RyKFL8cPBSzxPeojdNA.mft (raw, json)
Hash identifier: NWwEBEzR9aaQUrw4wAodcDhSceSRDvFxXvfbVLficqc=
Subject key identifier: 4E:51:19:CF:3C:FD:41:31:07:E6:29:A9:FA:DB:3F:52:6A:E7:4A:9D
Authority key identifier: 27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0
Certificate issuer: /CN=278f62f3a5f84722852fc70f052cf13dea2374d0
Certificate serial: 019D39AE911BC7CD6AEE5E408E3D03339AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
Manifest number: 0B70
Signing time: Sun 29 Mar 2026 13:00:34 +0000
Manifest this update: Sun 29 Mar 2026 13:00:34 +0000
Manifest next update: Mon 30 Mar 2026 13:00:34 +0000
Files and hashes: 1: J49i86X4RyKFL8cPBSzxPeojdNA.crl (hash: DFDYZmS9oI3YbTG2cIXUqcQAorfm8RSS3Y1fIzyGJyo=)
2: tjHQL9126jSlMadUbx0UtwRmVpI.roa (hash: KKrhOiqiGWD/PXAF5L7Zxc0Yltf6jS4noyHNe6KHHoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:91:1b:c7:cd:6a:ee:5e:40:8e:3d:03:33:9a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278f62f3a5f84722852fc70f052cf13dea2374d0
Validity
Not Before: Mar 29 13:00:34 2026 GMT
Not After : Mar 30 13:00:34 2026 GMT
Subject: CN=4e5119cf3cfd413107e629a9fadb3f526ae74a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:bb:5b:60:e2:e7:57:1c:1e:d1:96:50:e8:e2:
58:b3:c3:35:cb:2f:50:f6:9a:23:85:16:32:e1:1e:
ea:52:2d:59:09:60:87:06:05:2a:d9:8b:67:b5:c9:
95:f4:76:7d:25:11:c6:06:01:37:8b:db:e5:4b:37:
7b:24:a7:13:59:3d:e1:bb:33:98:5f:7a:fe:b5:5c:
39:40:02:58:fa:c8:07:68:ec:f9:86:08:33:ca:61:
91:84:df:a6:b1:9b:dd:79:21:88:41:4b:15:e4:fe:
44:cc:de:68:46:13:80:aa:0b:49:0e:32:71:77:7d:
43:6e:43:aa:04:0e:e1:67:d2:5f:f1:26:81:80:ff:
24:f3:f6:f4:fb:0e:1d:6d:95:fb:98:67:92:8c:f3:
87:43:b5:e2:e4:bf:a3:eb:e9:1c:d3:7d:bf:c8:02:
06:cb:c0:ee:8f:68:d9:af:f9:8a:72:f8:c8:fa:10:
5d:bb:a3:d3:8c:55:1b:fc:d9:3d:5c:ab:87:30:2c:
75:32:a0:26:b9:21:3c:b1:e6:c2:e3:91:8b:fc:e4:
1f:9a:bd:6c:2f:c8:19:6f:82:bf:ea:38:ed:55:fb:
8a:86:7a:03:b7:e1:cc:fe:82:34:1d:62:f8:fd:db:
c4:fd:6b:cf:8c:ad:29:19:a1:cd:40:e0:35:06:c7:
73:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:51:19:CF:3C:FD:41:31:07:E6:29:A9:FA:DB:3F:52:6A:E7:4A:9D
X509v3 Authority Key Identifier:
keyid:27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:77:cb:cb:d3:c2:9e:91:ea:19:66:cf:af:ae:f4:a6:3d:db:
27:43:92:77:82:48:be:15:84:c0:f5:cc:3f:ff:89:ac:90:7f:
2d:f0:19:ee:e7:bb:a8:8d:1a:16:55:94:a7:1e:5d:97:70:e6:
a8:c2:fa:c8:52:7e:35:d5:bf:45:88:7d:51:75:07:cd:e6:26:
81:3c:d6:12:f1:ee:a8:35:3a:2b:fa:76:c9:cd:05:8b:13:43:
26:d7:52:a9:4f:df:25:8d:55:e8:6b:40:17:66:35:a7:44:1b:
47:63:9d:c0:28:03:f7:0d:b4:37:c8:34:da:2e:e8:d9:08:ba:
12:c2:02:06:4a:3e:1e:46:c6:76:2a:63:c9:9d:01:22:dc:c5:
83:a2:eb:01:3a:6a:b7:7b:6f:ee:40:0c:b7:2e:8f:50:17:1f:
43:65:f0:78:5e:f4:74:78:dd:9c:41:8b:70:ce:83:19:9f:ed:
07:84:3b:60:61:8b:fa:a3:4d:5c:50:a7:fd:8a:a6:57:c6:8e:
8c:54:eb:a0:45:35:24:c8:6b:23:a2:f1:a8:a3:1d:37:b1:29:
c1:0f:09:54:0c:55:d0:89:6d:0e:38:a3:3b:89:3b:42:7c:7a:
ef:cd:8a:f1:69:df:ec:84:60:29:3f:8d:81:95:5a:9c:30:1c:
20:f9:1c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:45 2026 by rpki-client