Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
File: J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft (raw, json)
Hash identifier: fJpRdsyKaEdoZXHr9cLucKSGXge09kyXQMlqAP9Xw7M=
Subject key identifier: 44:29:68:D5:47:E3:99:D9:0C:B8:32:48:87:5A:EF:5B:22:10:41:09
Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
Certificate issuer: /CN=27516d20ebefd12f072d413c4d2606bdb258691a
Certificate serial: 019D284D67A5AED20BF7E2F07789C6483790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
Manifest number: 0D63
Signing time: Thu 26 Mar 2026 04:00:54 +0000
Manifest this update: Thu 26 Mar 2026 04:00:54 +0000
Manifest next update: Fri 27 Mar 2026 04:00:54 +0000
Files and hashes: 1: 4N3tODFK8nz9NNMiv7CviryuDAs.roa (hash: X3aNYoDshM8q/qhUCoVbmt8vv1qoQt4+Ks1Zknci3aA=)
2: J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl (hash: BNh5MxEF88oZ45MxI4N5gmagcXskpHhxQvijU5s8fpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:67:a5:ae:d2:0b:f7:e2:f0:77:89:c6:48:37:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a
Validity
Not Before: Mar 26 04:00:54 2026 GMT
Not After : Mar 27 04:00:54 2026 GMT
Subject: CN=442968d547e399d90cb83248875aef5b22104109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:51:15:90:c8:7e:fd:98:9c:98:17:4a:4e:69:
38:d6:28:c1:e5:6a:4c:07:e5:bc:83:ac:5b:a2:41:
09:a8:6f:e7:c4:94:8d:4c:78:77:30:dd:8e:9e:c8:
f5:91:62:f0:18:be:f7:e1:d3:74:c9:70:a5:b0:02:
77:8f:a7:fe:d5:6e:c1:8a:26:5b:65:89:9b:40:8f:
8a:da:4d:c7:e2:f4:38:6b:3c:67:77:ea:1b:fe:c7:
77:59:33:d4:a6:44:f6:18:5a:ba:e9:23:c8:ab:0f:
cd:09:70:ae:82:d2:32:31:3d:30:0c:f0:94:2a:37:
5e:bc:44:2b:05:f6:03:c6:25:3d:62:51:ab:72:a1:
a4:f6:56:32:46:64:1f:81:97:d6:7a:a4:b8:65:43:
6e:3a:7e:16:74:7c:a4:4e:72:a6:41:51:95:df:e8:
5c:ae:9a:0e:55:b9:c3:bc:21:6d:40:ff:e8:ec:1c:
9d:ea:fa:df:69:ad:7b:b1:a6:05:80:42:7a:0f:00:
45:fe:ae:35:c5:06:0f:33:ac:3a:86:a9:fc:2f:f7:
41:9d:36:a1:04:d4:4d:0e:57:6b:a9:ae:8f:ac:38:
b1:fd:49:a2:87:7e:9f:3d:3e:af:d3:4d:57:e2:b9:
ae:66:32:e6:0e:e8:ae:5b:b9:d0:86:f6:cc:10:a6:
84:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:29:68:D5:47:E3:99:D9:0C:B8:32:48:87:5A:EF:5B:22:10:41:09
X509v3 Authority Key Identifier:
keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:fc:22:86:89:51:df:c4:6b:42:01:54:ff:b2:02:eb:7b:7c:
b0:2c:dc:f7:1a:c3:3b:07:0a:9d:3c:86:04:03:31:2f:ac:45:
de:0d:43:60:a4:b3:a7:4d:e0:eb:0c:07:a1:41:2c:34:02:9e:
60:56:17:bf:5e:b0:78:03:01:5c:f3:3b:33:4e:03:fb:dd:f1:
53:6a:eb:85:12:28:d6:94:32:a4:d0:03:22:df:d9:cd:b9:90:
f9:8b:6b:50:95:71:c2:25:d5:fa:83:aa:2c:3c:c9:e1:47:9a:
c7:30:fa:4b:99:9d:12:31:5c:d4:c8:05:c3:c8:98:e4:0b:56:
82:24:59:0a:39:64:9d:b1:76:0a:c8:3f:35:95:ad:db:69:cb:
ee:64:64:fd:c5:76:96:9c:6e:50:27:62:df:9c:8a:15:24:ce:
bb:b8:b3:21:e5:ab:01:1d:a1:28:9f:fe:b8:66:1b:a7:98:94:
01:df:15:89:5f:c8:ac:b8:16:61:6c:d1:81:3f:81:62:58:8b:
42:11:a5:c8:15:cb:a3:ea:4f:97:c6:9f:83:10:dd:24:41:fc:
53:81:e0:9e:b1:25:4e:db:d1:6c:0c:4e:7b:dc:44:d0:68:fd:
3f:eb:d4:5f:b2:1b:d6:ed:c5:d7:ff:bf:83:be:01:94:37:a5:
9c:79:7a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:08 2026 by rpki-client