Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
File: J7jb2X3kzUBZtS5RPc81zTgaMrM.mft (raw, json)
Hash identifier: f3V0kag1r5jQrukTB5e+pHeQ0tolP+Uy9XAvFcnFbxU=
Subject key identifier: 81:65:92:42:45:97:15:43:DE:EC:68:C5:E4:9D:FB:1C:D3:7E:95:29
Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
Certificate issuer: /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Certificate serial: 019D382E42EA93DB95C4DE37057927EF84B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
Manifest number: 1169
Signing time: Sun 29 Mar 2026 06:00:49 +0000
Manifest this update: Sun 29 Mar 2026 06:00:49 +0000
Manifest next update: Mon 30 Mar 2026 06:00:49 +0000
Files and hashes: 1: 0oxdyMukMZaAGBeo9l9rFsh78pk.roa (hash: DX6ZwX+iC1cN81KUv6aS7NPJaf7Awa86RPypXOmFS5E=)
2: J7jb2X3kzUBZtS5RPc81zTgaMrM.crl (hash: vsy5gfqElmqMYUpQlSfIAy4XNW/2B9xpwIEvUF0NHjU=)
3: dyVWHuwmCwNemfhA3NEDaxJ2sdw.roa (hash: Q8NYEk98UWxN0ux4Y6DtAD9386w6kojLNf1xUJ5/UcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:42:ea:93:db:95:c4:de:37:05:79:27:ef:84:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Validity
Not Before: Mar 29 06:00:49 2026 GMT
Not After : Mar 30 06:00:49 2026 GMT
Subject: CN=8165924245971543deec68c5e49dfb1cd37e9529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:27:c4:4f:57:71:18:97:58:45:83:df:6e:87:
7b:25:f3:98:8c:b3:31:d6:5f:3b:7e:57:e2:77:f7:
85:00:2d:b1:3c:b6:78:b4:c3:f6:4b:d5:00:34:b0:
79:ba:09:bd:e7:9c:0e:95:b8:d0:8f:7c:95:da:f2:
91:3d:4d:4d:f1:13:d8:ae:3c:eb:f2:4b:e0:5e:ec:
3e:5b:8c:71:73:44:0f:85:8a:cf:8f:74:ee:b3:16:
ee:fa:9e:95:b2:e7:2b:3a:a7:9d:a4:23:6b:63:4e:
26:2c:fc:92:18:9c:1c:41:0c:91:8e:ee:b6:fc:53:
59:eb:f3:ae:e9:87:9c:a7:a8:ef:67:f3:cf:ae:68:
70:db:2d:33:41:fb:12:40:8b:66:d5:08:c9:96:3c:
9d:16:8e:80:5a:5d:67:d4:31:12:41:c8:37:c0:c0:
2c:0e:d7:7b:3b:4f:9e:55:5a:38:8e:dd:ac:68:b2:
53:19:74:76:8e:e9:eb:3c:7c:bb:bc:51:6b:d8:bd:
2a:b5:50:4e:cc:70:39:5c:fc:d6:eb:87:aa:6f:31:
a8:77:b9:af:f0:58:29:44:72:a4:bd:8e:f0:dc:12:
65:26:33:09:67:44:f8:48:ce:65:1d:9f:93:09:af:
ee:94:9f:3b:4a:13:b7:70:7a:95:61:77:95:6f:b0:
e4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:65:92:42:45:97:15:43:DE:EC:68:C5:E4:9D:FB:1C:D3:7E:95:29
X509v3 Authority Key Identifier:
keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:8f:34:bb:0d:6f:85:cf:88:b4:a8:06:b0:4d:0c:b8:14:89:
a5:90:f7:ab:ee:11:5e:a9:d6:a3:93:cb:18:67:ba:37:61:48:
20:d0:fc:53:2b:b6:65:ca:c3:02:4b:0e:82:2a:7d:6d:2f:81:
b5:8f:5c:c0:e8:c9:e5:f5:54:c0:e3:db:3f:a1:5d:0c:05:73:
ce:eb:91:fd:8d:01:cd:9c:dc:d3:d7:22:8d:37:36:b8:ae:bf:
10:ec:eb:0a:9e:67:4e:55:14:88:bb:f1:c2:39:71:eb:b3:7a:
91:f5:66:d2:7b:53:6a:dd:98:72:01:83:93:1e:c2:85:89:00:
cf:ce:f3:65:d7:13:b6:e1:e3:64:6a:bd:68:d2:d8:41:4f:60:
0a:61:54:3e:a7:ec:b8:56:83:8f:bd:89:57:69:97:0a:65:fb:
d8:f7:ac:70:45:39:a5:b3:34:5b:c7:66:27:96:74:53:9f:89:
f8:b1:cd:c8:24:41:c9:9c:19:11:03:77:4d:17:c2:80:aa:78:
25:ea:2a:5e:4f:ce:03:a3:ec:45:dc:dd:e3:eb:6e:49:e0:07:
1e:99:fb:eb:6e:29:30:66:2a:59:5f:6b:82:c5:ef:d6:86:02:
4a:66:1e:18:94:f0:ac:c3:b7:1a:7e:0b:35:0a:58:ab:9b:12:
25:c5:13:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:12 2026 by rpki-client