Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
File: JzWNbTPibSr4Q9WB3PacDREKneg.mft (raw, json)
Hash identifier: vHlh8S3U87v0Q2WzDtDugxHAY8Oa+UER6UqKzCdkBGo=
Subject key identifier: 37:F4:DE:F6:85:91:75:C7:B1:37:37:5C:6C:10:01:CA:2D:EF:46:21
Authority key identifier: 27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
Certificate issuer: /CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Certificate serial: 01A0D2A67D55D52BBA23059BAD2CD33104F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
Manifest number: 0687
Signing time: Thu 24 Sep 2026 09:02:01 +0000
Manifest this update: Thu 24 Sep 2026 09:02:01 +0000
Manifest next update: Fri 25 Sep 2026 09:02:01 +0000
Files and hashes: 1: JzWNbTPibSr4Q9WB3PacDREKneg.crl (hash: 66yVmUP4J1hh1CP9rztz7PehhaP3nBE6JB6ATDbv35w=)
2: q9nb03LLGhEQgbaQ_RRS2Oti8mA.roa (hash: +gb3UnVeZl4+1DAMyjUb0CGvwvwAAF1A19rfF/kmb3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 09:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a6:7d:55:d5:2b:ba:23:05:9b:ad:2c:d3:31:04:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Validity
Not Before: Sep 24 09:02:01 2026 GMT
Not After : Sep 25 09:02:01 2026 GMT
Subject: CN=37f4def6859175c7b137375c6c1001ca2def4621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e3:74:a3:a8:3e:d3:f6:1d:4e:d4:2c:dd:e4:
a4:32:b2:f1:13:d8:89:fc:d3:c8:c3:ac:6a:e2:f2:
03:12:ea:41:ad:eb:c5:05:14:fd:f4:bc:32:09:b6:
01:87:11:ba:9a:0a:ec:46:42:d1:3c:7a:2d:2a:e7:
35:c9:7c:c9:ac:b7:ed:43:8b:07:b3:dd:0d:20:9c:
b7:41:0f:8b:69:c8:35:04:7c:1e:5f:e7:4f:61:7c:
ba:97:c2:9b:58:29:a8:c6:5e:9b:f0:2c:92:46:6f:
23:7e:79:b3:41:eb:26:71:64:13:00:5c:f3:81:a7:
c8:56:ba:56:12:04:5c:4f:ee:06:69:96:22:2e:e6:
cc:5e:86:e3:15:1b:c3:cf:62:84:f9:de:5a:30:d7:
63:29:65:ea:84:05:75:72:43:e4:49:fe:9b:01:48:
45:d2:cc:be:08:a9:6a:7a:5a:0d:6a:76:59:c1:86:
3a:8d:59:54:15:c3:25:7b:4a:5c:bc:0f:34:33:a3:
f6:83:bf:a1:50:54:89:b1:fd:39:e3:e5:5f:f2:c6:
bc:2e:23:f5:ce:0a:e7:93:fc:b7:b2:78:fa:8d:46:
ce:07:c5:8b:7c:b5:48:06:19:18:bb:f1:6b:bb:cd:
65:7d:dc:c7:27:3a:4c:23:7c:25:8f:94:d2:43:20:
1e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F4:DE:F6:85:91:75:C7:B1:37:37:5C:6C:10:01:CA:2D:EF:46:21
X509v3 Authority Key Identifier:
keyid:27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:10:ae:2b:c9:9b:7c:08:7f:e0:d8:1c:f0:7a:e8:ec:69:96:
e4:fd:d1:3c:c9:c8:7a:b0:7d:7f:99:44:0a:ba:06:67:42:6d:
d8:81:3d:e1:0c:4c:8c:b4:2a:ac:84:15:86:34:ce:7f:c1:86:
f4:1b:c2:59:c9:16:b1:8e:d6:6b:d8:a8:32:23:ad:be:58:4f:
34:69:a3:ab:fb:22:00:eb:6d:82:07:d7:e2:9a:ea:d2:c6:86:
0b:0b:93:0d:f9:4f:da:f4:26:42:db:79:ea:42:10:77:db:c8:
20:77:a5:7a:5e:ac:98:1c:47:80:a3:37:62:ed:ad:e4:53:38:
37:7e:68:00:b8:51:95:9c:d4:b1:44:b1:a4:96:ac:db:cb:18:
f8:fa:ce:22:d7:e9:7d:84:40:3f:3c:76:99:c4:fb:d7:9e:b3:
5a:e3:03:02:c6:9b:5c:b5:df:4a:7d:4d:81:92:95:3a:7e:10:
8a:4e:cf:b9:7b:e0:8b:c8:bc:2b:12:11:71:3b:5f:cb:26:dc:
8e:77:d2:bd:98:65:3a:c1:d9:fd:27:ae:bd:8b:16:55:55:04:
b5:e5:05:4e:e8:08:ab:ff:b1:40:f9:a1:95:c3:d4:2f:3a:c5:
15:5b:94:82:76:bb:37:49:82:2c:76:de:97:17:02:93:58:36:
6f:6c:26:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:09:24 2026 by rpki-client