Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
File: J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft (raw, json)
Hash identifier: SqlwWOVlPlo79ZZ9y/oqHhFMbR3OJmfxPXY/TMpj/Jw=
Subject key identifier: F2:D9:1A:AE:E1:4E:88:D9:D2:BD:B4:5F:79:4E:F2:05:60:8C:B1:A9
Authority key identifier: 27:47:C1:71:78:6E:88:31:67:D8:62:BE:10:1F:35:21:35:B9:23:B4
Certificate issuer: /CN=2747c171786e883167d862be101f352135b923b4
Certificate serial: 01A0D0122B2D5CE48D628585A314178B9698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
Manifest number: 01BF
Signing time: Wed 23 Sep 2026 21:00:46 +0000
Manifest this update: Wed 23 Sep 2026 21:00:46 +0000
Manifest next update: Thu 24 Sep 2026 21:00:46 +0000
Files and hashes: 1: J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl (hash: XOMzwORcJLQPKhzlTBfHuVX8C/YJx8Iq80koRUiEpFg=)
2: O_GvhJ3AIu5IJuqpQ4uX03ArEEA.roa (hash: GC8qNwD4vLhbf1Ux7vQLpVBwBRtyOha518PQltW/PIg=)
3: hFukJ1Me328-WPvDybOfx7SqLNM.asa (hash: HFJhYuc006ijF+saTkFV1K0a6wbtr7JpRGOKmayJt1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:2b:2d:5c:e4:8d:62:85:85:a3:14:17:8b:96:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2747c171786e883167d862be101f352135b923b4
Validity
Not Before: Sep 23 21:00:46 2026 GMT
Not After : Sep 24 21:00:46 2026 GMT
Subject: CN=f2d91aaee14e88d9d2bdb45f794ef205608cb1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:d9:58:bb:e3:6f:09:51:3c:13:65:af:13:
9a:38:3b:2b:70:b5:9b:48:ad:39:64:ec:9b:40:a1:
50:aa:16:8b:7b:6c:53:04:f6:aa:8f:f6:5f:a3:60:
04:33:30:66:1c:f5:d5:51:36:78:58:4e:4f:7c:05:
03:ef:bb:51:2f:11:4b:da:78:b6:e7:97:f0:78:e5:
b6:12:1e:f5:a5:7e:36:4d:4e:82:63:ce:10:2e:fb:
78:14:a8:67:6e:4a:26:e2:62:d0:cd:91:5b:96:f7:
c0:ab:2d:2a:ec:03:41:05:1f:f4:84:96:7b:15:6d:
8f:84:e5:6f:35:12:92:7f:ea:aa:b1:38:13:ae:12:
19:9d:ec:20:93:e3:84:94:e1:b5:b5:39:c5:89:3c:
fa:57:0b:f4:7c:cd:dc:f8:5d:b5:7c:5b:31:56:9d:
60:99:e2:b1:f5:e1:1f:98:1a:97:9b:5f:ee:09:83:
a7:8d:41:a9:d1:22:1f:91:a6:21:09:25:9b:4b:92:
1e:81:65:9c:94:1d:bc:cb:6b:2a:00:01:b3:02:8d:
c6:01:da:80:d7:75:a5:2f:1f:6f:d7:d1:80:fd:5c:
d2:72:e0:5e:10:ab:a0:18:c6:c3:7b:f6:28:f1:35:
93:46:bd:d8:c0:41:ff:fc:75:a3:4a:7a:1f:34:05:
d8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D9:1A:AE:E1:4E:88:D9:D2:BD:B4:5F:79:4E:F2:05:60:8C:B1:A9
X509v3 Authority Key Identifier:
keyid:27:47:C1:71:78:6E:88:31:67:D8:62:BE:10:1F:35:21:35:B9:23:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1b:e6:01:7f:b5:8f:30:3e:9f:87:6a:5d:98:a8:5f:93:4c:
16:4b:bd:93:96:6e:1a:79:0e:4f:a1:2a:94:e7:f4:62:61:87:
32:c2:fd:ad:9d:16:03:d5:8a:f1:12:df:bd:a6:68:5b:66:fc:
f3:77:d7:9c:28:db:af:f9:df:9b:0f:a7:a6:33:4e:9a:db:7c:
43:33:44:ba:91:a8:2d:f2:3d:88:9e:c7:a4:d4:d4:0e:b4:9a:
2a:29:d4:12:57:11:12:ba:bb:8b:3e:0c:ea:a8:1a:89:d5:32:
d8:a0:44:f8:6e:6a:31:85:7b:49:df:96:c8:2a:3b:2a:e7:5c:
b9:1a:fb:45:2b:c6:f7:1c:7b:7a:d4:7b:cc:77:da:ad:33:ca:
97:4d:1f:13:92:82:73:1b:ce:96:44:d7:0a:61:30:00:cb:cd:
11:3f:f4:ea:c1:63:f2:e3:fa:0d:54:9d:d5:dd:79:71:22:03:
78:73:bc:38:7e:64:15:19:6e:2f:5a:3f:39:77:a2:14:a9:1b:
02:40:fa:4e:35:f4:05:59:2e:85:e0:fc:81:23:f0:80:59:8e:
bf:ce:34:83:41:f7:75:1d:0c:87:af:9d:b0:b6:de:63:35:ca:
cd:09:d3:f4:25:8f:af:75:3f:88:ee:5b:65:f9:d3:c2:5a:1a:
e1:ee:19:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:24:26 2026 by rpki-client