Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
File: J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft (raw, json)
Hash identifier: j0DxHcTu8OxqFbXC10oeg88rjhXnXgFs0jQiukQW2JQ=
Subject key identifier: 58:CB:B8:BD:8D:54:E4:39:05:3C:5A:80:3E:14:DA:66:88:7A:E7:11
Authority key identifier: 27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
Certificate issuer: /CN=27802685da734b157a2db9ccff76dd4e48911928
Certificate serial: 019D265FB4CD258D0123C164AE40822F5F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
Manifest number: 159F
Signing time: Wed 25 Mar 2026 19:01:39 +0000
Manifest this update: Wed 25 Mar 2026 19:01:39 +0000
Manifest next update: Thu 26 Mar 2026 19:01:39 +0000
Files and hashes: 1: J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl (hash: vzIFzBEFdOaw7FQ7hARobOGvMAilxH9y8SYHveW+hzs=)
2: ax6eIjHYuyl0QBv51Atz3wWcyoE.roa (hash: VeATSBlllh5K01G1TOhorfGAawwB+xV+zgL6EEsH3z0=)
3: ky99BlOPlH5O6f7O36UwCkNpB5c.roa (hash: tyITeyFzQukDFtq+qQfcsC7Kui3xVMsWGSDU3eA4x4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:b4:cd:25:8d:01:23:c1:64:ae:40:82:2f:5f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27802685da734b157a2db9ccff76dd4e48911928
Validity
Not Before: Mar 25 19:01:39 2026 GMT
Not After : Mar 26 19:01:39 2026 GMT
Subject: CN=58cbb8bd8d54e439053c5a803e14da66887ae711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:98:bf:d6:ad:6d:3c:eb:0a:9e:8a:86:04:
c0:bb:9c:72:e2:68:6a:f1:bf:77:99:f3:a8:68:d8:
ec:db:4d:58:22:6f:ec:55:c5:1f:d3:8b:1c:8c:98:
42:0e:11:62:eb:61:32:68:92:6e:85:6f:0c:55:d9:
46:64:0d:05:b9:d3:f8:eb:19:fd:4f:b0:f3:3e:12:
a6:65:bc:85:76:50:ff:df:50:37:81:e8:54:e6:a4:
35:ee:de:f9:a7:ef:dd:bf:29:6e:3c:37:92:70:05:
6d:a9:9f:89:3b:6d:1e:5d:24:c7:3a:2c:b8:ac:f2:
1d:1b:40:f6:ca:7d:c7:01:cf:35:bd:a2:d5:aa:f8:
d3:30:d2:3a:f4:a8:46:1e:0b:59:8d:23:fc:d9:be:
3e:46:67:bb:bb:72:0a:90:6e:78:5d:b3:b5:a8:c2:
a1:8f:30:3f:1f:e0:8e:1e:61:35:12:48:a7:05:7e:
5d:12:2e:b7:a1:00:df:db:9d:b3:82:bb:73:ed:95:
08:93:9d:38:db:19:22:6b:01:28:67:b6:1f:27:bf:
50:b4:7c:70:89:1c:10:14:bc:50:a3:d6:a3:6b:7a:
af:c5:be:e3:36:66:01:44:3e:5f:8f:64:d4:53:57:
1c:55:c6:d5:a3:99:ac:b9:2d:de:96:19:43:ba:a3:
08:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CB:B8:BD:8D:54:E4:39:05:3C:5A:80:3E:14:DA:66:88:7A:E7:11
X509v3 Authority Key Identifier:
keyid:27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c1:80:51:7a:02:b1:f1:3c:77:21:88:1b:f3:11:4d:52:e3:
ca:63:4b:60:40:20:0a:72:62:3d:1c:df:a5:f8:7a:e3:f0:26:
a2:d5:4e:64:d8:f0:5e:68:4b:70:be:64:94:b9:25:6f:74:f7:
db:48:0b:1a:a1:55:46:7d:47:eb:11:77:90:44:c5:3b:87:6c:
44:5b:ff:1b:42:6a:4c:5a:92:07:c7:4c:7a:07:0b:37:c9:81:
91:4d:5f:96:39:52:2d:7a:b8:fe:80:22:03:58:08:0c:2b:fd:
a7:a9:8a:58:20:88:3d:2f:d0:63:ca:4b:cb:0e:10:11:44:ec:
03:11:28:e4:48:97:bf:fd:b9:d2:45:73:37:56:74:80:d4:5d:
9e:98:a9:5f:d2:94:e8:ea:10:e0:7d:d3:71:8a:77:64:a3:d0:
a5:a4:b5:c3:a9:ec:27:67:f3:03:ae:bf:3e:11:ad:7d:88:12:
46:68:c8:0b:b7:db:4d:dd:90:59:3e:0f:85:88:29:43:e6:89:
e3:22:56:1e:c5:a5:78:18:36:4f:9c:26:b8:df:0d:4b:e8:c5:
40:0e:aa:e6:ab:13:de:7b:e1:c8:fa:77:f3:48:50:c2:4e:53:
aa:00:9b:01:fa:23:0f:7d:b2:2c:95:c0:c1:a9:01:91:72:d7:
6f:a1:d9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:12 2026 by rpki-client