
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
File: j7x_Fwe20LIrzYGA9Puxtj78mfk.mft (raw, json)
Hash identifier: bo+DWhHFuDrhsWxj4gr8HcM+r2koRFwnpLGBoxkrcAI=
Subject key identifier: BD:67:0F:0A:EB:47:FB:02:FB:AA:74:49:C1:A8:4A:62:0A:0B:1D:6E
Authority key identifier: 8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
Certificate issuer: /CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Certificate serial: 019D27DFD769DA521A88D3C87A8D6B64F075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:01:14 +0000
Manifest this update: Thu 26 Mar 2026 02:01:14 +0000
Manifest next update: Fri 27 Mar 2026 02:01:14 +0000
Files and hashes: 1: 7OTQnzrbHyXo119EfPUpBJCKYHw.roa (hash: 2rynQETuFSP28J9DNP84gVl8Pw/3bThUsvE7hH2G5gw=)
2: MsTpS_9Ef3SDy2PLq6WfNUkYizQ.roa (hash: Ea2AJU7gEy/xVP6HsAboTHLHs8TQfaChyqKqx20NTwM=)
3: j7x_Fwe20LIrzYGA9Puxtj78mfk.crl (hash: nX0zCAxoLoQi0BOoJfjPBtCyBX7pwK9GtWrQD1lwWfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:d7:69:da:52:1a:88:d3:c8:7a:8d:6b:64:f0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Validity
Not Before: Mar 26 02:01:14 2026 GMT
Not After : Mar 27 02:01:14 2026 GMT
Subject: CN=bd670f0aeb47fb02fbaa7449c1a84a620a0b1d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3c:08:06:3f:9b:8b:fd:09:bd:9c:81:9b:60:
80:c8:eb:68:f1:92:ba:26:9f:63:6e:18:33:4a:37:
b1:15:cd:25:b2:b3:67:1e:63:17:d4:77:a5:9e:79:
e8:1a:78:79:b4:1d:4b:75:2c:c2:17:97:ef:7d:24:
44:99:03:b8:18:fc:ea:48:f8:2b:81:4a:86:ec:a4:
e3:07:ce:fc:22:d6:5b:37:a3:0f:38:29:45:3a:ff:
36:a9:1a:5a:5d:1e:51:3c:0c:70:f1:cf:a8:1c:4a:
db:b1:0d:32:59:0e:54:5c:2e:8f:1f:f8:e2:60:05:
41:60:4f:61:f8:79:33:68:e2:f5:18:b0:d7:f3:50:
e6:55:96:40:d6:a6:00:82:e6:35:35:b2:6a:a6:f3:
19:e2:3b:7a:a7:bb:60:6f:95:0a:92:3d:09:43:6d:
ca:23:3f:c6:1a:77:e0:94:d1:72:19:f2:85:60:d8:
a6:ac:e8:9c:53:c0:41:41:f4:e9:49:91:af:89:f3:
89:49:c3:71:59:74:4d:a7:97:52:ee:2d:21:9b:ae:
35:5c:2e:ea:16:64:e1:f7:c4:6a:96:3c:61:e3:c9:
fa:c3:ed:fa:97:9b:91:ea:e6:a9:70:60:bd:f0:5c:
2b:28:ff:95:bf:d8:81:2d:f5:dc:7f:0e:30:41:26:
8d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:67:0F:0A:EB:47:FB:02:FB:AA:74:49:C1:A8:4A:62:0A:0B:1D:6E
X509v3 Authority Key Identifier:
keyid:8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3e:85:f8:05:07:7d:09:b4:ff:eb:9c:40:20:7b:7d:d9:fb:
76:78:43:04:e6:43:f6:62:b2:c3:a6:3c:a9:36:65:a3:5d:9b:
46:46:32:a8:45:f9:d1:f5:e9:8b:d6:f8:44:15:3f:68:fc:dc:
8e:30:b6:b9:42:cb:ea:6a:b1:dd:e2:f5:7f:7c:b9:5d:61:17:
bc:a6:68:71:6b:bb:37:5f:68:04:77:9f:50:2c:03:e7:aa:e8:
99:f5:f1:c4:2a:9e:2a:46:1e:b5:9d:29:d8:0a:f2:10:3b:c3:
79:85:30:86:c9:0b:86:0f:af:96:66:e7:e6:21:17:62:43:e9:
9f:60:0f:c0:37:44:3a:ce:ff:50:a3:9a:57:ac:72:04:d6:3c:
03:6a:19:87:fe:6b:59:74:4e:7f:c4:d1:99:b2:cc:1e:1e:bd:
55:7e:e8:da:25:8e:98:7a:fc:6c:05:cc:f0:6d:ff:cc:9b:25:
ea:9e:82:c8:3f:94:86:f7:ea:5c:1b:b3:5a:af:fa:c3:87:27:
2e:a6:60:40:c8:1c:4a:ee:aa:d2:0d:2a:74:2a:3d:83:a3:15:
e3:57:19:f9:bd:48:22:b3:3e:e7:05:9b:9c:dd:16:90:35:ec:
29:ce:a3:d3:15:a3:ac:b0:95:41:35:d5:23:cb:f3:25:b9:fa:
9e:60:98:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:05 2026 by rpki-client