Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
File: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json)
Hash identifier: blq+dm4Yzzd53Wb+MzossAKqNTscl3s+C7SGrPjOm6o=
Subject key identifier: 2A:08:DB:BF:45:99:0C:F9:45:44:B2:D8:54:45:DF:85:B8:01:30:82
Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249
Certificate serial: 019E1F119FFC33B79EA3BF90AE65B4CCDAAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
Manifest number: 1761
Signing time: Wed 13 May 2026 02:01:49 +0000
Manifest this update: Wed 13 May 2026 02:01:49 +0000
Manifest next update: Thu 14 May 2026 02:01:49 +0000
Files and hashes: 1: 6H-9AoNqSrBI_cHU_8jwycSpvuQ.roa (hash: KiQDrwuKHeqxHDHuFUTDtaD1ZiwMGGrMOy/IRx+eThE=)
2: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: 3hPJaxsVnRAH9/FVSijtRPCqKhPgFzNr1H76wz2UGyU=)
3: _zWse9VeR2Ks8Tmud0pKUxt54Rs.roa (hash: nVGx0eRXA+P6cmYQPgwiiD4iTa2vIfOtyuiTU3+mtfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:9f:fc:33:b7:9e:a3:bf:90:ae:65:b4:cc:da:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249
Validity
Not Before: May 13 02:01:49 2026 GMT
Not After : May 14 02:01:49 2026 GMT
Subject: CN=2a08dbbf45990cf94544b2d85445df85b8013082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6c:71:f7:55:ff:c1:0e:8e:a7:ea:bb:c4:3b:
2d:dc:26:1b:76:2f:c6:d5:6a:54:b6:4b:e2:a7:21:
70:ec:7b:a4:9a:f1:43:f6:86:40:c7:6f:29:d8:0d:
dc:ee:37:f9:6e:74:c2:d8:33:3f:0e:83:18:9c:3d:
1d:b8:76:29:35:4e:e6:f2:d2:c8:0e:05:9f:5e:79:
ca:ca:c9:24:1b:02:dd:05:1d:1e:ed:78:59:b9:83:
36:f0:e1:a9:9e:40:00:55:c6:3d:ad:44:6b:ef:f8:
b3:15:fc:2c:38:2c:76:12:89:a1:93:f2:57:10:ed:
bc:d8:3f:a7:59:9f:71:a1:12:d6:aa:3b:e3:20:e8:
ab:e8:e2:f1:35:0e:86:92:58:38:92:c9:3a:78:97:
21:02:25:7f:ad:c9:9d:6b:c5:5a:23:1f:d8:5c:f3:
9e:61:9a:31:f5:3a:86:0b:5b:0a:15:50:f5:be:b3:
6d:f7:f7:9a:c2:26:51:64:8e:6e:9e:21:bb:f1:ca:
5a:36:aa:78:23:94:01:bd:0e:f4:32:5d:7d:f8:0e:
00:e2:b6:6a:b5:f2:12:9a:ad:c2:4f:14:33:42:30:
28:84:f5:71:6b:4e:a4:88:88:32:7b:ea:7b:42:b3:
22:0e:dd:b9:d9:13:20:07:f3:d4:01:e4:95:87:df:
93:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:08:DB:BF:45:99:0C:F9:45:44:B2:D8:54:45:DF:85:B8:01:30:82
X509v3 Authority Key Identifier:
keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f0:1e:ef:90:cb:d0:95:24:36:46:4b:8d:c6:c1:b5:27:d8:
99:eb:63:5c:89:a6:ff:54:86:15:fe:80:be:65:bc:25:8c:aa:
aa:f0:1f:df:3b:f9:b3:05:82:9d:34:94:e9:8e:26:4f:fe:8c:
67:5f:07:39:fc:8a:8b:ed:71:50:db:48:e6:96:5b:59:8b:8b:
de:7e:2a:6e:e4:11:a3:83:10:7f:87:8c:22:15:e9:36:0f:d8:
e8:9f:e0:ef:fc:df:d2:28:83:f9:d4:18:a9:20:10:19:9f:e7:
f3:48:a0:22:d5:97:0f:ec:56:ac:73:7c:17:78:16:2c:77:c7:
43:cd:04:5c:d1:a1:f3:03:a5:77:b2:04:1b:04:2b:a5:e4:01:
ec:e0:09:30:d5:bb:bb:36:64:aa:e0:4d:75:e5:7a:fb:46:15:
46:e3:28:63:a5:44:06:e9:fc:08:be:75:c9:db:c8:40:e7:67:
31:d9:0b:59:f2:a9:5c:78:ff:7d:aa:79:0c:02:48:0c:d2:e7:
e9:c5:63:78:45:c6:51:11:27:3e:73:27:71:ea:6f:f9:77:83:
71:e1:9a:62:38:98:ee:25:54:70:7a:ab:61:04:10:64:12:d4:
e8:4b:26:ea:42:5a:6d:a9:d1:a9:6e:0e:35:5d:25:af:53:2b:
b2:64:88:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:17:28 2026 by rpki-client