Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
File: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json)
Hash identifier: 6iZEi4oc8BJwK+vlWdYSE+bK4KLzagnGXEACm0WZIZo=
Subject key identifier: F8:CB:C4:51:14:A8:FC:1A:26:4B:75:AB:95:C4:ED:2D:13:17:7C:E5
Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249
Certificate serial: 019D27E0089CB6FA3A3BE2A46C588AAA0283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
Manifest number: 16E1
Signing time: Thu 26 Mar 2026 02:01:26 +0000
Manifest this update: Thu 26 Mar 2026 02:01:26 +0000
Manifest next update: Fri 27 Mar 2026 02:01:26 +0000
Files and hashes: 1: 6H-9AoNqSrBI_cHU_8jwycSpvuQ.roa (hash: KiQDrwuKHeqxHDHuFUTDtaD1ZiwMGGrMOy/IRx+eThE=)
2: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: I08/0aqwvDFROmldRFpXbSRujN3mrMJvHElAgqt7VDg=)
3: _zWse9VeR2Ks8Tmud0pKUxt54Rs.roa (hash: nVGx0eRXA+P6cmYQPgwiiD4iTa2vIfOtyuiTU3+mtfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:08:9c:b6:fa:3a:3b:e2:a4:6c:58:8a:aa:02:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249
Validity
Not Before: Mar 26 02:01:26 2026 GMT
Not After : Mar 27 02:01:26 2026 GMT
Subject: CN=f8cbc45114a8fc1a264b75ab95c4ed2d13177ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:36:d4:c5:47:88:04:3c:d5:13:c9:bb:2a:b1:
c5:45:8f:9a:dd:08:d5:bc:8a:2a:2f:c8:c7:12:bb:
35:93:5b:2f:e2:b0:cc:2e:02:25:0a:b6:4a:32:0f:
d6:81:11:3a:d9:7b:77:0d:03:a5:8b:b6:27:47:b9:
9f:a8:96:7a:dc:41:cb:97:de:fc:bb:ed:a4:6d:76:
61:78:e5:b0:98:bd:15:83:2c:4b:14:de:4b:d8:62:
ac:ff:ed:32:d9:59:38:6d:91:e6:39:84:90:a3:27:
ad:0a:8d:40:7a:25:9e:62:76:77:4b:73:16:cc:ae:
43:59:d0:de:4e:1a:83:02:2f:ee:57:9c:ef:b6:3f:
7e:1f:eb:06:6a:e8:9d:47:c9:f4:69:b7:f2:e6:ee:
fa:e8:74:44:60:a5:e1:55:06:d6:34:01:2f:3e:ce:
0d:1b:bc:b7:c9:bd:e2:a1:c0:63:69:9b:04:84:29:
26:de:af:3f:02:05:83:38:2f:d5:fb:eb:59:57:1a:
08:07:60:83:2c:7c:72:76:e9:f8:46:b8:a1:a3:c5:
27:10:28:49:d5:18:00:66:c5:8b:b3:86:d7:14:d0:
ab:66:03:c5:39:62:6d:4a:a8:27:03:93:9f:17:11:
5a:55:d5:31:a9:42:a2:c3:83:7b:12:55:01:0c:25:
8d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CB:C4:51:14:A8:FC:1A:26:4B:75:AB:95:C4:ED:2D:13:17:7C:E5
X509v3 Authority Key Identifier:
keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d2:6b:70:cc:75:97:15:78:02:d4:15:25:ed:39:e5:61:7b:
53:7a:16:ac:8d:a3:c1:44:c5:98:2b:38:13:a4:0b:32:d0:3a:
e3:4c:27:e7:46:bd:e4:ad:7a:de:dd:6d:8d:60:19:7c:d9:24:
e6:cd:d3:e8:7f:a7:bb:fd:dc:8f:53:95:6e:e4:e0:fa:e1:13:
a3:45:77:94:3e:e1:34:1c:6a:5d:73:9b:e1:99:41:01:94:26:
5f:99:46:85:7e:7a:9a:48:25:de:09:30:ad:5c:c5:bf:02:11:
31:ec:96:f3:42:a2:a0:93:ad:da:ec:be:26:81:5b:5f:b0:41:
07:ad:63:c5:7f:80:d2:66:c5:88:cb:45:7c:e0:8e:50:cd:50:
56:ae:45:e8:c0:be:4f:0e:c8:63:48:9a:eb:e3:d1:e1:a0:d5:
42:99:a1:80:b4:a9:65:a9:8a:aa:ee:ca:7f:fd:60:ca:57:f3:
7c:4a:14:41:28:ad:96:d0:04:15:f6:97:a4:f1:23:e1:c8:05:
d6:5b:f6:49:4a:91:d5:0b:20:ea:08:55:f7:e2:9b:9c:53:01:
8d:59:37:8d:8c:40:d9:67:25:ad:6c:cc:2f:c6:50:b6:fa:ac:
3a:d4:8c:44:5a:c0:4b:1b:c2:c3:a1:90:23:3e:f9:b6:02:82:
b1:0a:cc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:41 2026 by rpki-client