Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft
File: J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft (raw, json)
Hash identifier: cIBurkWnFZ3guQhqGZLERhp52+2cSnbTuvPhsZ+nd8E=
Subject key identifier: B4:AC:F7:64:7A:3B:78:0E:2E:A6:9F:36:60:96:CA:6C:A6:C5:F2:F2
Authority key identifier: 27:81:00:BF:DC:37:BC:79:92:41:F8:37:60:C9:AD:11:53:44:D8:B0
Certificate issuer: /CN=278100bfdc37bc799241f83760c9ad115344d8b0
Certificate serial: 019F916DC198F1186BFBD5B74B680E7A3529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4EAv9w3vHmSQfg3YMmtEVNE2LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:57 +0000
Manifest this update: Fri 24 Jul 2026 00:01:57 +0000
Manifest next update: Sat 25 Jul 2026 00:01:57 +0000
Files and hashes: 1: 85mSZls-XHlgJOvWmgk-VtOFBkA.roa (hash: FPNYFDWtHSvEK1gnIwxleo9g0+U1nGpA9pdz6kB33Sg=)
2: J4EAv9w3vHmSQfg3YMmtEVNE2LA.crl (hash: IExdWuhsugOvrZVedRTI6OjfKbpXwbwPDPit3XKMyzY=)
3: kbQFQOWzDlX0E1V08cvnijkeOTY.roa (hash: ZvoM8j+qNFn5EDYwxPR3kym37UjIAoq+nL3E4fERgJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4EAv9w3vHmSQfg3YMmtEVNE2LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:c1:98:f1:18:6b:fb:d5:b7:4b:68:0e:7a:35:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278100bfdc37bc799241f83760c9ad115344d8b0
Validity
Not Before: Jul 24 00:01:57 2026 GMT
Not After : Jul 25 00:01:57 2026 GMT
Subject: CN=b4acf7647a3b780e2ea69f366096ca6ca6c5f2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:14:6d:02:02:5a:53:7e:5e:3a:e5:b2:53:db:
e9:04:1d:9d:d7:78:d8:bf:7c:51:d2:fb:8f:14:52:
d6:a5:49:1e:47:41:55:0f:62:fc:1f:de:13:c2:b1:
28:6a:1d:fd:35:47:06:cf:8d:ff:73:1d:80:87:3f:
c0:a4:f2:c4:5f:17:70:3b:59:db:fb:c6:91:db:ae:
78:fa:b3:b9:6a:07:d5:6b:3b:c0:2d:19:7d:62:5f:
04:4f:b7:ea:cc:e2:a9:05:09:e3:65:ca:47:58:9d:
40:d0:cb:93:3d:98:25:ae:43:00:33:01:cc:7e:32:
87:02:5c:12:f9:7c:05:01:bc:50:b3:9d:6b:0f:16:
94:d8:91:9f:f5:42:a8:97:f1:8c:0f:56:f8:1f:13:
9c:06:ed:d5:d3:bb:d0:62:06:a9:64:41:1a:70:94:
7a:23:8d:a8:7a:17:a8:24:42:7a:d1:ac:38:50:0a:
3b:4c:64:47:a7:98:bb:c0:8f:2b:af:7d:58:1c:53:
ae:d7:1a:64:c8:6a:e4:85:16:f9:fc:be:5e:e3:4e:
31:e0:34:3d:bf:9e:4b:2f:54:4e:45:99:d0:d7:a9:
f7:fa:e4:d4:f8:8f:11:b3:6a:1d:1e:30:0b:6f:15:
c2:a3:c9:84:3e:a5:b8:18:12:1f:ae:b7:79:c3:36:
05:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AC:F7:64:7A:3B:78:0E:2E:A6:9F:36:60:96:CA:6C:A6:C5:F2:F2
X509v3 Authority Key Identifier:
keyid:27:81:00:BF:DC:37:BC:79:92:41:F8:37:60:C9:AD:11:53:44:D8:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4EAv9w3vHmSQfg3YMmtEVNE2LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:25:2d:0f:e3:8a:32:97:e1:d5:53:84:71:e4:7c:dc:b6:55:
7a:f4:06:75:3e:f9:01:9b:57:64:1a:e3:c9:a4:4e:d6:ce:0e:
3c:e7:ab:09:a5:67:79:06:a6:5d:cc:a1:0d:e8:ca:6b:35:bd:
16:6a:64:f1:18:c5:6b:de:70:55:57:d7:17:ca:53:90:72:57:
80:07:06:de:8e:01:5b:40:86:40:76:2f:c2:59:d9:2f:93:92:
ba:a7:9f:00:b5:e7:61:d4:2f:c0:e2:48:e3:5b:68:dc:e0:35:
6a:f2:1a:03:a6:14:9f:eb:93:34:f5:35:2b:37:fb:ea:ff:88:
30:c4:09:bd:8b:52:aa:61:28:90:f1:79:95:20:c9:bc:59:38:
79:fd:d5:fa:53:b5:3d:d0:6a:24:2a:8a:99:59:70:97:05:91:
ee:26:d5:65:3c:87:19:28:b6:ff:07:3d:9c:c1:1d:51:5f:9b:
0f:bd:13:46:ae:89:86:0f:df:10:0c:38:21:34:6f:e0:74:9f:
c3:d1:ab:26:ce:18:48:fb:4b:46:9a:c5:f9:03:b7:90:3d:12:
03:0b:c8:92:b4:f7:b2:26:52:8d:38:e4:2e:fc:14:71:3f:30:
26:ff:11:81:14:02:55:5b:85:df:09:3c:0f:56:cb:b3:84:db:
56:10:92:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:59:30 2026 by rpki-client