Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
File: J-cRzjQCblevMpDH3izSHcZx4Pw.mft (raw, json)
Hash identifier: sWHGYl1hSxYalS2L9cRZM4c3lHSunkiDfNj/s442Yjc=
Subject key identifier: F7:1A:BB:13:D9:81:A6:3E:6D:9C:09:19:40:1F:BB:73:52:C3:AC:18
Authority key identifier: 27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
Certificate issuer: /CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Certificate serial: 01A15A0BE54D8A196D39E1DC06E701A87058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
Manifest number: 1AB6
Signing time: Tue 20 Oct 2026 16:01:31 +0000
Manifest this update: Tue 20 Oct 2026 16:01:31 +0000
Manifest next update: Wed 21 Oct 2026 16:01:31 +0000
Files and hashes: 1: J-cRzjQCblevMpDH3izSHcZx4Pw.crl (hash: llPIYovWJK508PfHEGVpLsW9wzzYzx8PiXvRuhVaFp8=)
2: _n04tbHejANq8Ug_J-BPx0EeIOY.roa (hash: XtKxscitCuMv9T8d0VZ6njYDJbqu3csyAljLvKPr+l0=)
3: y_SBLUhzBtU72NxeeIak4RRDnEU.roa (hash: x10yvxp0EebXuA7j4nfdDlIV0rhNw6PWqLB8KW20YOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 16:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:0b:e5:4d:8a:19:6d:39:e1:dc:06:e7:01:a8:70:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Validity
Not Before: Oct 20 16:01:31 2026 GMT
Not After : Oct 21 16:01:31 2026 GMT
Subject: CN=f71abb13d981a63e6d9c0919401fbb7352c3ac18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b2:21:00:a5:f7:bd:56:2e:42:c9:84:82:a8:
1d:7f:b5:27:e3:b1:40:06:82:76:41:4c:0f:4c:c1:
98:ff:76:9d:bb:ca:55:bd:15:c5:5f:20:5e:ee:30:
ec:e3:69:5a:7a:b9:5d:37:50:ca:a9:f1:e0:dd:3f:
0d:69:bb:d2:88:b8:c6:60:56:7d:fb:cb:38:d0:e0:
e9:00:54:16:d2:d4:2a:b4:35:55:9e:3a:f0:ee:5c:
3b:75:bc:1d:1b:bd:d6:9c:cb:cc:ec:4b:4d:e9:3d:
97:dd:e0:64:26:68:f3:0f:cd:f4:cd:ba:73:3b:a8:
a6:6c:70:60:2a:b0:bd:f4:f8:6f:24:9d:33:f0:2e:
48:f6:68:d2:53:af:83:f1:d4:59:95:e1:d3:ea:e9:
6c:85:94:4c:b4:45:b4:75:75:cb:df:a2:f8:f1:e1:
2c:6f:9c:b2:56:15:a8:0f:a2:2d:14:8f:9b:f4:1a:
ac:f4:31:20:98:2a:f4:f1:e6:ad:af:5e:bf:fa:74:
07:fb:30:c7:a3:a7:1f:a3:64:68:77:a8:9e:72:cc:
b1:c5:b3:79:35:b9:9d:8c:96:71:f8:18:38:16:eb:
17:d8:10:f9:b9:29:69:27:41:65:65:e4:64:4d:81:
53:06:ed:da:fa:5e:8f:a1:b4:4e:20:d2:8d:cf:30:
32:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1A:BB:13:D9:81:A6:3E:6D:9C:09:19:40:1F:BB:73:52:C3:AC:18
X509v3 Authority Key Identifier:
keyid:27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f7:35:e4:33:62:ab:ac:fd:62:5e:03:ce:e9:75:80:a9:61:
06:33:88:71:15:af:78:b5:6a:a6:72:7c:ae:14:8f:76:1a:a4:
80:6d:43:a9:7d:af:c4:26:b8:12:a9:e0:f0:b0:31:fe:25:f6:
61:37:70:e6:44:88:58:44:a1:7a:f8:2f:b5:69:e4:9b:b6:d4:
5b:6c:05:2a:bb:9f:40:b3:7f:c0:8c:ae:34:3c:d3:36:8f:3d:
ed:92:12:cc:e4:8e:05:dc:29:a2:08:76:40:0e:e9:d6:91:86:
91:1a:41:7b:e6:e5:b3:54:0f:43:91:07:1f:46:38:00:d3:4f:
61:c3:65:aa:8a:db:c7:da:45:a3:42:a7:83:da:9b:7d:79:cd:
87:e9:52:f7:e6:dd:df:31:70:63:1e:18:d5:6f:67:f3:7e:0a:
3d:d0:e0:6e:31:56:e2:23:f2:ad:f7:14:29:74:17:8d:25:09:
13:e8:49:07:9b:e4:39:f3:e7:b2:de:44:9f:b0:42:cc:01:b6:
7a:c9:bd:6c:a6:6a:73:41:c7:4a:d9:94:0d:28:67:37:96:7a:
4f:76:d8:0c:74:ee:10:1a:17:4b:d9:15:37:3e:52:b4:f2:6e:
ba:6d:cc:d9:57:a6:d7:e2:b6:e5:74:27:0d:a9:8d:f4:a0:a9:
25:33:92:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 02:27:31 2026 by rpki-client