Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
File: J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft (raw, json)
Hash identifier: QhsHKgzBf4ftAMWJ5pvOwHPAV5sO/hGVzlkTm2x9qag=
Subject key identifier: 27:F6:73:C2:D6:0B:61:2F:0D:88:2E:2F:80:9F:55:73:2F:8F:C4:C6
Authority key identifier: 27:47:C1:71:78:6E:88:31:67:D8:62:BE:10:1F:35:21:35:B9:23:B4
Certificate issuer: /CN=2747c171786e883167d862be101f352135b923b4
Certificate serial: 019E1D90B53F92B3660FEEE31B8DB5A88137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
Manifest number: 59
Signing time: Tue 12 May 2026 19:01:23 +0000
Manifest this update: Tue 12 May 2026 19:01:23 +0000
Manifest next update: Wed 13 May 2026 19:01:23 +0000
Files and hashes: 1: J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl (hash: sRbMquwJVROTCA8U6NGeLv6n+kU2+G6KLnCx1ga+/5g=)
2: Jhd8dVo4qeXLNKgQxWEaEIThO1U.roa (hash: Kzdyj7wpQhhcqBAlT0S5dvR8EKgyhHXnHpsN0XUZRx4=)
3: hFukJ1Me328-WPvDybOfx7SqLNM.asa (hash: HFJhYuc006ijF+saTkFV1K0a6wbtr7JpRGOKmayJt1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:b5:3f:92:b3:66:0f:ee:e3:1b:8d:b5:a8:81:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2747c171786e883167d862be101f352135b923b4
Validity
Not Before: May 12 19:01:23 2026 GMT
Not After : May 13 19:01:23 2026 GMT
Subject: CN=27f673c2d60b612f0d882e2f809f55732f8fc4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f9:20:c0:7b:c6:a2:6a:05:8b:a5:01:b3:30:
f3:19:0d:a3:fc:ba:7d:bc:67:e0:1f:b0:03:04:58:
88:06:9f:8a:f3:85:ad:a1:b2:a4:d6:0d:14:11:dd:
cf:9c:e0:c9:38:9b:c3:2f:cb:b4:25:44:fc:b2:09:
ab:80:43:b6:f0:99:d9:73:94:82:fc:c2:f6:35:99:
e1:b6:c0:c5:59:35:1c:e6:8f:38:90:e5:c9:8e:bf:
1e:95:36:8a:8e:f0:cf:03:3e:1c:07:0d:dd:d0:ff:
3b:83:43:ee:f0:8b:cc:b3:a8:d2:44:f1:d2:f8:ed:
d1:23:37:b1:7c:24:19:71:72:36:6b:e9:dd:08:75:
31:29:fa:9d:77:12:02:5e:09:57:8f:16:00:ae:b5:
8a:d7:ff:d7:53:57:b0:14:77:b3:c1:94:b1:ce:76:
48:71:aa:7d:f7:0f:ed:ef:a2:ca:3d:05:97:11:e4:
3d:6c:75:d3:26:d6:58:6d:fd:8d:46:f0:9e:39:0c:
e7:62:13:79:e4:52:cb:c5:94:35:0f:7c:4e:80:a8:
4a:72:e1:2f:53:6c:75:4b:99:0c:56:3d:36:fa:3d:
f2:94:34:8f:dc:15:34:32:ec:86:e8:31:eb:32:dd:
5d:85:d5:0f:66:04:5b:63:31:8d:01:3e:92:15:2d:
e9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F6:73:C2:D6:0B:61:2F:0D:88:2E:2F:80:9F:55:73:2F:8F:C4:C6
X509v3 Authority Key Identifier:
keyid:27:47:C1:71:78:6E:88:31:67:D8:62:BE:10:1F:35:21:35:B9:23:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a2:90:28:11:8e:1a:f2:e3:de:f5:0a:c7:96:82:76:a3:b2:
55:89:56:93:9c:f6:f8:62:42:6e:7f:fc:1c:76:ba:d2:18:9f:
c0:c4:06:fe:26:09:72:10:f9:ac:1b:de:68:87:30:f9:64:c8:
46:7a:19:6d:5d:fc:75:9c:01:d4:78:da:c5:59:7c:e7:be:0f:
6b:21:8e:17:f2:9f:45:76:03:7a:3e:e1:ec:22:bf:c4:d0:fd:
1c:1d:1b:2e:29:df:22:06:b2:e8:49:61:3f:bc:9b:64:d0:b6:
d8:6b:c4:9c:5d:ea:b4:e5:c1:9a:74:c2:6d:8b:68:30:7d:3a:
a1:d8:7c:57:58:e3:88:55:95:c3:40:07:57:f3:3c:95:27:2a:
bd:06:94:44:6a:5c:87:39:65:82:23:b5:10:80:ee:40:02:a7:
4c:5a:18:10:ce:bc:0a:a6:2a:c2:f2:56:d3:b6:68:71:4c:02:
da:73:9d:07:ef:fd:13:08:e8:1b:50:e9:a6:34:3a:ca:55:21:
94:ff:33:ad:38:a8:86:e2:8a:5c:4d:f4:89:87:12:78:3e:b7:
ba:6a:77:b9:28:31:7e:09:4a:d4:cd:59:c3:c4:28:59:21:b6:
bd:c1:7c:a4:b8:32:c9:d5:f3:f7:3c:f7:08:f1:52:d8:5f:58:
2b:49:ec:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:39:33 2026 by rpki-client