Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft
File: J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft (raw, json)
Hash identifier: gMqb0PP7VryqKySD/fXXHHxkwMXYGzYWGHL1nBLDhFw=
Subject key identifier: 73:21:0F:3E:A8:49:72:DD:DF:58:4C:8F:57:50:90:0F:7A:00:4F:84
Authority key identifier: 27:81:00:BF:DC:37:BC:79:92:41:F8:37:60:C9:AD:11:53:44:D8:B0
Certificate issuer: /CN=278100bfdc37bc799241f83760c9ad115344d8b0
Certificate serial: 01A0D9BA37085B672C1AFD012750C3EF0744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4EAv9w3vHmSQfg3YMmtEVNE2LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:00:54 +0000
Manifest this update: Fri 25 Sep 2026 18:00:54 +0000
Manifest next update: Sat 26 Sep 2026 18:00:54 +0000
Files and hashes: 1: 85mSZls-XHlgJOvWmgk-VtOFBkA.roa (hash: FPNYFDWtHSvEK1gnIwxleo9g0+U1nGpA9pdz6kB33Sg=)
2: J4EAv9w3vHmSQfg3YMmtEVNE2LA.crl (hash: hRH78bL2bkrQdEcHw/+oSjyFOi6BgBPo6HrvJyZFtdc=)
3: kbQFQOWzDlX0E1V08cvnijkeOTY.roa (hash: ZvoM8j+qNFn5EDYwxPR3kym37UjIAoq+nL3E4fERgJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4EAv9w3vHmSQfg3YMmtEVNE2LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:37:08:5b:67:2c:1a:fd:01:27:50:c3:ef:07:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278100bfdc37bc799241f83760c9ad115344d8b0
Validity
Not Before: Sep 25 18:00:54 2026 GMT
Not After : Sep 26 18:00:54 2026 GMT
Subject: CN=73210f3ea84972dddf584c8f5750900f7a004f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7a:23:ae:e0:d8:a9:89:c1:93:86:1a:b1:ad:
95:0f:a2:7b:99:3a:a3:38:e2:43:9c:ca:55:e3:0b:
cf:27:9f:b0:5b:27:1d:3e:a0:10:3a:d5:33:24:63:
38:c3:85:d4:26:cc:7b:21:61:ae:ab:10:71:b2:bb:
12:42:a4:f4:7d:19:d4:5f:7f:34:66:26:a7:73:f0:
54:9c:ed:29:f7:52:e0:30:b1:3b:88:9c:f8:d8:0e:
00:e7:ab:67:ea:bc:c0:58:11:1c:ad:fe:05:5a:2b:
96:09:21:63:83:80:0c:bc:14:de:24:7b:f8:06:1f:
63:0a:46:d9:15:4f:70:0a:38:f6:0b:50:ee:a0:25:
f4:8b:4b:6c:bc:09:5e:2c:02:03:75:6a:37:20:b3:
68:d0:56:e6:04:42:25:41:4e:63:63:f4:bb:06:65:
1b:47:de:c6:95:59:d1:d4:c6:29:20:62:41:6a:78:
c1:b9:31:21:b5:21:79:18:08:92:82:c4:bb:a5:25:
52:65:80:ae:9c:52:91:56:b9:56:88:08:53:8f:24:
56:65:48:37:20:d2:8d:3f:46:40:33:6d:51:26:c2:
b0:52:70:7a:bf:5f:e8:92:f0:8e:df:a5:5c:a6:0a:
cf:52:41:ab:4a:95:d8:1c:03:1e:41:84:9c:ab:12:
b8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:21:0F:3E:A8:49:72:DD:DF:58:4C:8F:57:50:90:0F:7A:00:4F:84
X509v3 Authority Key Identifier:
keyid:27:81:00:BF:DC:37:BC:79:92:41:F8:37:60:C9:AD:11:53:44:D8:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4EAv9w3vHmSQfg3YMmtEVNE2LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:04:05:96:9f:e3:4b:e5:7d:45:c9:14:87:9d:fd:e9:3b:8e:
cc:6a:ea:2b:49:3e:09:e6:20:0b:97:d1:31:65:42:5e:ba:29:
13:45:3f:82:b5:76:ec:61:92:9a:f8:61:10:02:eb:03:f2:8a:
25:68:f2:20:ef:48:97:2a:7e:ab:e7:06:b7:4f:81:85:31:0a:
1d:8d:12:44:e3:af:ee:47:30:4b:a3:63:05:af:26:eb:5f:58:
0d:26:0d:dd:87:ff:77:65:3c:2f:66:5f:d0:7f:39:b3:71:85:
fa:8c:cb:53:f4:6e:0b:25:2f:90:02:1d:65:77:d2:3b:ff:20:
fe:6c:84:9d:ef:59:17:cc:50:8e:b7:62:c9:22:d0:43:56:cc:
ba:32:8c:c8:11:e9:e1:48:4b:26:b0:1b:56:d9:a3:c6:83:04:
67:06:8d:25:bd:11:2c:bb:da:3c:21:73:af:b4:90:d9:57:16:
00:2a:bd:ad:5b:ce:94:4c:b6:44:a5:b7:20:62:70:5e:b3:da:
ed:44:4a:48:bb:bf:04:6c:31:42:b2:7e:43:0c:7c:c1:af:d6:
be:b8:7b:2f:f7:5f:e0:f9:78:00:d1:d9:8a:12:55:0c:35:83:
b7:38:d0:6f:2a:93:37:06:b0:7e:04:ab:3a:e3:2a:07:63:09:
2f:ce:8f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:44:39 2026 by rpki-client