
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
File: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft (raw, json)
Hash identifier: XOOB6BXpaFR3+rIM8o6cz5K1JhuE2lgUavyVixuarnM=
Subject key identifier: A7:79:29:E0:CE:87:84:42:8A:A8:D2:4C:C0:8D:C6:2C:E2:CB:65:71
Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
Certificate issuer: /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Certificate serial: 01A1016D2806F0398233F8414CE117563DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
Manifest number: 14EB
Signing time: Sat 03 Oct 2026 11:01:33 +0000
Manifest this update: Sat 03 Oct 2026 11:01:33 +0000
Manifest next update: Sun 04 Oct 2026 11:01:33 +0000
Files and hashes: 1: BgYFyQZlOVoVNE_xGRhrUlUnKkE.roa (hash: iTNaRaBxLjNxBBzzpY+C9jdK8pNm57Hs3Z5CDJ3xboY=)
2: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl (hash: t8DXETGS9y+/MKp+bmZFKWeLfdJPVsucxrAYfC5D1Pc=)
3: olxc0wwaCx3ZS0IyubnBirv7nJc.asa (hash: gFjGd2p/+A4+aazMMxaIfHxnVYFhIuYNkCD+v7nOd/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:6d:28:06:f0:39:82:33:f8:41:4c:e1:17:56:3d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Validity
Not Before: Oct 3 11:01:33 2026 GMT
Not After : Oct 4 11:01:33 2026 GMT
Subject: CN=a77929e0ce8784428aa8d24cc08dc62ce2cb6571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:25:20:70:73:b8:89:58:3a:36:71:66:8a:cc:
30:4b:d1:05:d5:2d:ea:f3:21:60:f2:41:2b:65:a6:
5d:7b:28:1d:d6:09:3d:ef:23:f5:69:c3:da:33:d5:
95:c3:0b:95:5b:ba:c5:11:02:b7:9c:70:e2:9b:b1:
ff:12:8f:47:ea:d2:d6:a9:95:06:65:cb:0a:a2:4e:
61:4f:ac:ff:6b:16:23:f9:04:20:c6:de:82:05:57:
42:13:5e:01:c0:bc:a5:c7:b4:84:d2:12:fb:70:2b:
39:c5:53:d1:f7:72:1e:21:56:6f:13:cd:68:73:78:
e4:f5:fc:c7:d2:b7:0d:59:64:b2:47:da:0a:50:b2:
60:cc:3b:c4:66:0c:41:4a:bb:e9:d6:72:69:f4:50:
f2:5f:84:27:97:53:27:7d:3b:a3:dd:88:80:c8:a0:
85:42:34:9a:fa:a9:e7:a6:b8:9b:37:33:39:99:75:
c5:27:40:1c:bf:ca:eb:c9:26:22:df:cb:d6:b3:09:
92:f5:23:dc:12:7f:10:e6:bc:a7:13:70:2d:7a:8d:
52:bf:4c:64:14:ff:9b:d4:91:13:67:6d:be:f9:a2:
b8:41:e4:71:19:dd:27:c2:02:82:63:00:27:d0:56:
ce:da:3a:f2:a1:8d:fd:d9:7d:1b:95:7a:bd:b8:f7:
5b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:79:29:E0:CE:87:84:42:8A:A8:D2:4C:C0:8D:C6:2C:E2:CB:65:71
X509v3 Authority Key Identifier:
keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:57:1d:94:1d:c9:20:17:3a:f3:65:5d:2f:48:bd:20:ca:74:
78:2a:4d:21:3a:b0:f3:a0:96:68:a6:cd:b6:c9:24:63:4d:aa:
e8:46:c9:f2:4d:79:49:ba:a3:9c:b4:c3:91:a1:ad:87:34:1f:
c3:71:ab:be:ec:a9:93:82:8f:37:76:3f:0d:36:31:89:ca:71:
5a:24:e9:da:82:a0:98:dc:41:80:00:91:8b:1f:9e:64:04:5b:
6f:ea:76:bb:08:ba:14:93:8d:dd:f7:b7:8e:b4:cc:c2:b8:65:
38:41:b4:c4:4d:3e:a9:a1:42:0d:ad:e7:1d:2c:cf:31:40:90:
2a:e0:1a:77:e0:32:4d:37:0f:60:ac:26:24:f3:48:3a:56:7f:
70:13:c7:d0:f4:04:8a:8b:ca:06:9a:c3:db:1e:e6:e8:c7:b1:
e7:e7:7e:4c:07:33:45:d4:9b:72:14:ab:7b:fa:9d:96:0a:fc:
6a:85:67:67:6f:d6:df:d5:f9:da:df:e3:eb:2a:93:e7:b8:a4:
fe:43:81:c4:fa:a9:a3:f7:c8:15:9f:1e:0b:6b:c3:ed:43:a6:
30:bb:c7:d9:2e:9d:5e:98:36:4a:3d:08:07:03:78:ab:0b:9b:
bb:b9:0a:cd:07:de:86:48:77:3b:2d:08:db:50:80:d2:9a:21:
53:5a:41:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:46:48 2026 by rpki-client