Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
File: J7irrCClmMyksS9ddV2OiTIfTsk.mft (raw, json)
Hash identifier: zLn4D8qO0UaHzu0/K5Ildqi+bTUgKsaDHdK5qE1ZKeA=
Subject key identifier: 86:39:59:EE:97:E3:F0:DE:AA:E0:FA:46:51:B5:83:24:B5:C6:6F:BB
Authority key identifier: 27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9
Certificate issuer: /CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
Certificate serial: 019D27E05F1ADBDB1B9EA0A43F7F5BAE5EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
Manifest number: 11FC
Signing time: Thu 26 Mar 2026 02:01:48 +0000
Manifest this update: Thu 26 Mar 2026 02:01:48 +0000
Manifest next update: Fri 27 Mar 2026 02:01:48 +0000
Files and hashes: 1: EXA4SpEwX1vQWpFirH7mk4IJU8M.roa (hash: Lyc+y0k9pCkViy1JNMhW8hiC3bm7cXEkAowTAltTXTA=)
2: J7irrCClmMyksS9ddV2OiTIfTsk.crl (hash: ZzEeNVtxe5FFkAer53zQyu9KxQAUpMx72KnSZItVJgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:5f:1a:db:db:1b:9e:a0:a4:3f:7f:5b:ae:5e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
Validity
Not Before: Mar 26 02:01:48 2026 GMT
Not After : Mar 27 02:01:48 2026 GMT
Subject: CN=863959ee97e3f0deaae0fa4651b58324b5c66fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:4f:1e:d9:40:5e:6a:75:d9:99:b4:c8:60:
05:dc:6e:e0:c0:f6:0b:05:31:7e:b2:30:c0:a8:29:
92:10:8e:72:2d:43:0c:5e:85:18:37:61:50:1c:5d:
bb:d3:e4:41:61:1d:f8:c2:cf:25:eb:7c:ab:0a:e2:
8d:75:63:16:37:ce:26:86:2e:16:70:9a:db:87:ce:
24:3a:cd:14:9d:bb:36:f9:6f:a6:cc:21:46:2d:06:
dd:34:bd:4e:49:e1:ab:28:aa:a2:1a:2d:af:9f:ad:
26:ff:7d:b9:66:dc:59:1d:fd:ec:24:3d:d2:ba:a9:
fe:e0:de:69:ee:4c:7a:4d:3f:07:f6:bb:17:e9:7b:
86:09:12:3a:aa:32:5f:60:0e:33:5e:b0:43:60:e4:
d5:47:dd:33:1f:fe:f1:92:bd:1e:41:4f:ee:e7:fe:
86:20:67:d0:59:2b:71:a8:6b:5a:38:7a:27:8f:23:
92:2d:55:3f:49:02:b5:d7:4f:cc:95:eb:b6:0b:48:
6e:83:b4:32:7b:cc:57:9c:7f:73:a8:14:2f:84:e8:
d6:d5:e6:1f:59:ce:0e:6d:d4:e1:6e:dc:28:fc:93:
af:37:9a:45:64:c1:a6:4f:e3:61:fb:f8:bc:40:df:
c2:72:ab:ca:2e:fb:a6:9a:af:39:15:d3:5c:f5:80:
76:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:39:59:EE:97:E3:F0:DE:AA:E0:FA:46:51:B5:83:24:B5:C6:6F:BB
X509v3 Authority Key Identifier:
keyid:27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2c:bb:d7:3f:9a:e5:07:c8:36:5d:2c:c7:40:74:72:8a:3e:
a0:15:41:88:1a:f2:df:a9:7b:05:99:4a:5f:8c:8c:fc:1e:fd:
05:de:4e:af:a5:cb:9d:c6:c1:1c:0a:13:15:b8:10:8c:4d:0e:
a3:06:84:4a:90:13:26:d7:3c:88:d8:e8:da:3b:72:ee:9b:6d:
e2:c9:21:83:74:3a:0e:35:c3:0a:03:ab:05:21:20:cd:ca:69:
39:83:1a:b9:a6:08:1f:6d:35:01:3a:55:fe:9f:d6:74:56:4b:
c7:ad:e2:50:90:b5:18:4b:fe:29:db:cd:21:5e:bd:7d:91:6d:
b7:88:20:08:99:49:53:d6:bc:99:bd:99:ab:82:88:6c:62:34:
2c:15:6c:7f:85:e7:71:86:75:44:b0:e7:22:91:64:da:f0:65:
f2:65:6a:f1:1b:b5:7b:e3:65:2e:01:8c:8e:7b:0a:fd:c1:ea:
05:7a:00:4c:3a:f6:c0:64:93:2e:c9:f9:7c:e4:90:13:1f:f7:
6c:d6:70:b7:dd:c6:5a:5e:f0:a9:5e:3b:d0:fc:88:9a:52:a2:
62:1b:ea:e7:25:e0:5f:f7:4f:c1:b2:9b:65:e9:29:e7:9f:77:
f9:85:c3:97:d4:d3:f9:be:bf:d7:84:71:af:ff:92:cd:fc:34:
ea:dc:f0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:36 2026 by rpki-client