Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
File: j5h_qG-uztjKekRir38AXqsneag.mft (raw, json)
Hash identifier: Xxi52RIAr2e+pfVj8QWqIKzN8XeC6/xQxs+C/NQioz4=
Subject key identifier: BD:22:9D:27:F0:69:10:12:23:A2:EE:2A:6B:8D:33:E2:19:1E:54:32
Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
Certificate issuer: /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Certificate serial: 019DCDBE087E9BCCF71615028F8947675279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
Manifest number: 0FBE
Signing time: Mon 27 Apr 2026 07:01:16 +0000
Manifest this update: Mon 27 Apr 2026 07:01:16 +0000
Manifest next update: Tue 28 Apr 2026 07:01:16 +0000
Files and hashes: 1: S3xjSwjayGWQbrifgsC5G7Sh0Xg.roa (hash: tQnt0AxldpTLTefUEnKzHOLj+HzmMNDMI0YZ04Hh8vg=)
2: j5h_qG-uztjKekRir38AXqsneag.crl (hash: DwOnz3HY2PUOuLeHEcDC2uBUnZObSpocnu0UYgFtrPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:be:08:7e:9b:cc:f7:16:15:02:8f:89:47:67:52:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Validity
Not Before: Apr 27 07:01:16 2026 GMT
Not After : Apr 28 07:01:16 2026 GMT
Subject: CN=bd229d27f069101223a2ee2a6b8d33e2191e5432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:36:0e:08:0d:29:4e:0c:65:8b:5c:70:43:c5:
50:b2:4a:2e:3d:22:93:f2:4f:ae:77:72:cb:d2:52:
df:86:db:cd:76:a0:d2:b0:e3:a3:9e:0c:20:08:a7:
98:31:bd:31:b6:3f:b9:5c:cc:f9:54:fc:a1:e3:9d:
00:f7:c2:8f:6b:b9:72:e9:49:a7:0b:a3:89:0a:6e:
cf:68:c0:f0:3b:16:64:77:44:ca:45:f5:e9:cd:ed:
60:ee:df:8f:e8:f4:83:d2:37:2e:16:fb:84:f4:27:
b6:2f:fa:0e:b4:a5:d2:04:a1:bc:04:30:3e:fd:26:
e6:bf:53:dc:13:56:57:73:6f:ee:24:10:bb:9a:68:
ed:36:f1:72:f5:0d:b3:57:04:96:de:47:21:b2:86:
88:cb:66:10:8f:69:66:03:68:be:1a:c6:84:6c:45:
32:a8:4e:19:98:4c:25:2b:de:6a:50:6b:1d:87:19:
aa:34:7e:68:c0:bc:db:00:ac:44:5a:22:b6:bb:3f:
52:57:1e:2a:dc:f0:74:13:20:cc:63:a4:47:00:5c:
d8:61:26:6e:35:a2:de:2f:a8:8c:1d:f0:97:a2:9c:
82:e7:31:11:60:b9:7a:1a:85:22:45:e1:ef:01:84:
97:00:ba:eb:cd:5e:d6:12:a1:e1:f0:cd:b7:38:59:
d6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:22:9D:27:F0:69:10:12:23:A2:EE:2A:6B:8D:33:E2:19:1E:54:32
X509v3 Authority Key Identifier:
keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:52:56:16:8d:37:5d:b7:12:8c:df:f8:70:c8:2d:7f:3b:05:
bf:7f:9f:5c:0d:c4:2f:ef:26:62:01:f0:a1:46:c9:a1:4d:25:
e9:0b:aa:37:b1:cc:1f:5c:5a:63:2c:9a:1b:31:47:01:86:79:
c5:13:04:1c:f5:66:b8:60:c8:e9:51:9e:ed:f5:c0:3e:3b:2e:
3c:83:a0:a9:03:de:f4:08:06:5c:a4:fa:68:d6:db:3e:e7:65:
3d:b2:e9:54:03:2f:f7:51:51:66:31:34:48:c8:28:e4:39:d4:
73:b2:3e:2a:f3:4e:47:3b:f7:52:a9:7d:f4:a8:9b:46:8a:e0:
26:c2:ca:77:f7:e3:c8:fa:bd:e6:79:3f:39:58:5c:2b:59:2e:
b2:06:95:5f:12:39:3b:1f:c5:ab:75:05:f2:62:bc:8a:d4:b7:
48:f3:cb:71:27:d7:12:48:e6:51:e2:5c:d3:36:b2:f8:36:fc:
5f:ae:8c:33:42:ed:67:b4:ed:25:39:04:7c:c0:9a:64:bc:4a:
c9:e6:21:c6:dc:be:03:6b:2a:94:7f:39:f2:c4:87:85:af:f7:
83:48:27:2a:80:41:50:de:d0:54:53:81:46:3a:10:7a:f1:bd:
71:df:04:c1:52:09:47:00:b3:22:48:e8:c2:99:77:fc:a9:51:
28:55:2b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:06:02 2026 by rpki-client