Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
File: J5M1a3LBBBztecoRRZUreMtGb8A.mft (raw, json)
Hash identifier: xZ/gGut06bPjUQOLH28TqpgszA8VoOO7QZWhfPUj++0=
Subject key identifier: 74:BE:AA:F4:96:86:64:71:71:0F:E7:21:0D:E8:DF:38:9C:90:4F:E2
Authority key identifier: 27:93:35:6B:72:C1:04:1C:ED:79:CA:11:45:95:2B:78:CB:46:6F:C0
Certificate issuer: /CN=2793356b72c1041ced79ca1145952b78cb466fc0
Certificate serial: 019E1D59D0ED45DDCFD8996B0BC127499370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
Manifest number: 4B
Signing time: Tue 12 May 2026 18:01:25 +0000
Manifest this update: Tue 12 May 2026 18:01:25 +0000
Manifest next update: Wed 13 May 2026 18:01:25 +0000
Files and hashes: 1: J5M1a3LBBBztecoRRZUreMtGb8A.crl (hash: 9KOZgzXkpjdv0X8taDtU2g5Xi8uE4IxQrfiY5cCfgs8=)
2: iXFt1KY0aqsyx-9Vdc9e4RKOA5Y.asa (hash: UPxLBpOmrMbXDNQ7hogNRA77L99FxDK6/MOEI7JjMOY=)
3: k3PO0XiLFwevKSf5kgFB8CckAoo.roa (hash: 3ZT0fPbZiRqzWH4bsacy5YP5K85Xrhz1kRXfC2g2D9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:d0:ed:45:dd:cf:d8:99:6b:0b:c1:27:49:93:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2793356b72c1041ced79ca1145952b78cb466fc0
Validity
Not Before: May 12 18:01:25 2026 GMT
Not After : May 13 18:01:25 2026 GMT
Subject: CN=74beaaf496866471710fe7210de8df389c904fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:23:17:d9:50:02:22:e2:4a:95:50:1f:c9:
3c:96:8b:52:9e:13:29:a4:df:06:25:59:ae:af:e7:
6b:85:63:fb:23:36:66:8c:d8:b4:48:12:59:3a:50:
e1:76:43:e4:43:ea:69:92:33:5e:ec:da:f3:36:5e:
d7:de:6c:48:ec:20:3d:61:0e:b2:12:fd:49:0c:35:
c2:19:18:96:2a:b9:93:ff:c0:40:f4:b8:1d:77:6e:
56:3a:ac:a1:15:7a:a2:8c:23:11:79:9c:41:54:35:
66:16:5b:ec:2f:19:f1:f6:1c:b1:24:05:89:81:5d:
12:ef:67:6f:41:d1:42:8b:73:00:e5:df:6e:3f:1e:
0c:59:21:18:e1:7d:91:ad:c1:43:97:54:d2:d2:e4:
3d:da:fc:ae:b9:77:6e:8d:92:d8:d1:a3:a3:64:ab:
4a:7e:0e:73:c1:71:03:76:d5:79:5c:40:29:95:e2:
23:ab:48:aa:52:10:b9:f4:54:0e:5c:67:6e:82:9e:
33:67:92:8d:e3:55:b6:39:ff:0c:d6:16:25:cf:c5:
b3:f0:08:8c:eb:e7:5a:03:6b:70:9b:36:9f:20:b4:
a5:a6:25:e8:dc:81:d5:77:e2:cb:d6:98:bc:64:e8:
af:b9:5e:78:4e:25:0a:8c:f0:9c:a8:91:6a:bb:a6:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BE:AA:F4:96:86:64:71:71:0F:E7:21:0D:E8:DF:38:9C:90:4F:E2
X509v3 Authority Key Identifier:
keyid:27:93:35:6B:72:C1:04:1C:ED:79:CA:11:45:95:2B:78:CB:46:6F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:14:7f:54:71:2e:b7:21:90:b2:f8:c9:26:b9:bc:1f:13:81:
70:03:93:eb:61:6b:4f:eb:ba:36:01:e3:91:0b:be:44:2b:b8:
f3:99:fd:56:03:67:df:d6:dd:4b:6a:04:7e:a8:f1:01:a3:6a:
e4:c0:e7:eb:c4:37:bf:dd:10:bf:2b:d2:da:94:7d:3f:7b:67:
12:9d:1b:28:b0:34:f1:e2:46:a3:56:9b:f5:b6:c5:f6:55:d9:
b2:32:df:4d:ee:41:a4:8c:74:ec:c1:19:4c:ee:35:7a:4d:80:
61:00:03:db:be:05:53:da:2c:aa:0f:71:63:7f:2a:75:5f:f4:
a9:ba:80:ed:99:5c:17:dd:47:59:3f:15:8e:e4:46:a1:d9:9c:
b1:36:a6:be:9f:7c:fe:5e:9e:4f:cc:25:9c:3f:25:f0:5b:e1:
27:9a:1a:68:4a:95:b4:2c:52:4b:88:f7:e2:77:41:c6:76:b4:
73:94:dd:75:69:d2:28:38:ef:98:0e:2a:d1:d9:9b:1b:29:40:
97:d4:87:e8:14:f8:fe:36:47:45:98:2c:5c:d7:e9:b0:56:54:
de:c9:67:44:1e:d6:a3:e9:b1:76:1f:36:86:49:19:73:58:5d:
6f:9d:2b:a6:57:d2:e2:a6:20:0b:10:91:04:4c:2e:d7:40:81:
35:a0:cc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:25 2026 by rpki-client