Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
File: J-D3u75AMaJO8bnbGWqrBkLoSgY.mft (raw, json)
Hash identifier: t86MBkQG5BSI+ziGxBBMdTMR/JkkAqglDOtnHHOshUU=
Subject key identifier: 44:8C:16:61:4F:24:2C:52:49:4C:A0:A1:43:6C:A4:5B:01:70:1E:68
Authority key identifier: 27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
Certificate issuer: /CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Certificate serial: 01A0D5DE0794844D239CE1CA28E085725EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 00:01:32 +0000
Manifest this update: Fri 25 Sep 2026 00:01:32 +0000
Manifest next update: Sat 26 Sep 2026 00:01:32 +0000
Files and hashes: 1: J-D3u75AMaJO8bnbGWqrBkLoSgY.crl (hash: edqaJ7xcH/hAI3dyrMW9rQpmZIgGJbVe8aR/ZD7zkCQ=)
2: fH7jpTfOw73ogmMvWrEFRq2Avio.roa (hash: PFBzuOPj54GvMEMM5OOIFBp/nYApNQPXPXoK+zClv8U=)
3: uDCd91-kIRTx4Oler7V-1bWJeEE.roa (hash: MPw5XG6tMFKBuwGKWin9/7K5TyzvM+BrLD5tHi46a6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:07:94:84:4d:23:9c:e1:ca:28:e0:85:72:5e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Validity
Not Before: Sep 25 00:01:32 2026 GMT
Not After : Sep 26 00:01:32 2026 GMT
Subject: CN=448c16614f242c52494ca0a1436ca45b01701e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:18:c3:b2:a8:57:37:4d:6d:43:1d:ac:e4:68:
8d:fc:c2:4d:1a:57:15:71:d1:6d:6c:95:8b:55:38:
1b:cc:ea:4f:32:49:1f:4d:2b:95:da:f1:2d:27:04:
68:d0:f5:8a:61:3e:58:df:7c:fa:41:9c:2e:cc:e4:
f3:95:8d:57:98:40:2a:fc:ae:c8:4b:64:e7:12:59:
fe:45:5d:25:66:5d:6a:b7:e9:ee:e6:8e:96:b2:b7:
9d:18:16:98:5e:e0:91:42:36:74:43:a0:d6:98:19:
b8:2a:82:b3:cf:74:62:83:09:af:12:e2:f1:48:e5:
62:4b:fd:87:63:3f:df:b1:22:e9:04:67:6d:bf:9a:
f1:04:6b:2f:47:06:c6:89:d3:5d:4c:78:bd:5d:9d:
4e:d3:6d:1d:1d:d2:88:cd:64:ab:39:64:9a:55:aa:
98:9d:a1:d2:0b:80:82:59:39:d3:b4:37:62:3c:80:
71:10:c7:08:88:01:8b:92:35:8e:66:56:92:8a:ad:
48:fb:84:ef:8a:5a:64:20:0a:55:de:37:a1:53:c9:
20:15:42:2b:80:d6:b2:19:fe:a4:bb:75:49:86:74:
89:27:d6:42:ba:4d:e5:fc:01:0e:c4:e1:bf:96:49:
80:93:d8:58:78:34:1a:d3:e9:ff:6e:f4:3d:fa:85:
8d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8C:16:61:4F:24:2C:52:49:4C:A0:A1:43:6C:A4:5B:01:70:1E:68
X509v3 Authority Key Identifier:
keyid:27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6a:6f:1e:c0:37:24:67:ad:c4:f4:8c:af:1a:54:91:e5:a2:
02:ff:85:95:e6:37:af:1b:0a:c1:7d:fd:57:36:0a:c7:e5:37:
08:4c:05:a1:5b:72:c0:2b:fd:a6:9a:56:b4:b8:b7:b8:68:8f:
69:b7:e7:cf:4b:27:86:c8:cf:d3:c6:10:e3:6c:9c:8c:9e:fa:
2f:f0:84:cf:72:34:a2:e0:a9:12:f6:f6:73:34:41:c0:b0:53:
ad:ed:3f:44:4f:02:91:54:96:91:f6:38:0d:99:8b:31:da:b5:
4a:65:c7:71:bd:97:e7:46:98:18:45:2a:7e:1d:b0:2b:6b:e4:
5e:97:32:38:58:80:62:2b:ff:c2:cb:22:ed:0d:6c:6d:3c:de:
37:f6:9c:fc:a0:f8:40:b4:be:25:13:c6:3e:0d:45:b6:94:73:
52:b8:b4:04:22:80:7c:30:18:4d:f0:d8:21:6a:14:5b:d9:f0:
a7:67:31:d1:71:bf:64:e9:b7:d0:a7:63:ec:de:3d:89:a9:0c:
96:85:ee:2f:6f:34:5f:70:32:2c:68:47:5a:ca:5c:1b:05:f4:
ba:06:7f:46:a4:98:4a:ef:15:d4:9a:c0:50:cb:9f:3e:1c:7c:
59:ff:98:a6:23:40:81:65:56:ab:c7:8a:05:59:cc:36:0c:bf:
aa:8f:5f:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDV3geUhE0jnOHKKOCFcl7uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZTBmN2JiYmU0MDMxYTI0ZWYxYjlkYjE5NmFhYjA2NDJl
ODRhMDYwHhcNMjYwOTI1MDAwMTMyWhcNMjYwOTI2MDAwMTMyWjAzMTEwLwYDVQQD
Eyg0NDhjMTY2MTRmMjQyYzUyNDk0Y2EwYTE0MzZjYTQ1YjAxNzAxZTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRjDsqhXN01tQx2s5GiN/MJNGlcV
cdFtbJWLVTgbzOpPMkkfTSuV2vEtJwRo0PWKYT5Y33z6QZwuzOTzlY1XmEAq/K7I
S2TnEln+RV0lZl1qt+nu5o6WsredGBaYXuCRQjZ0Q6DWmBm4KoKzz3RigwmvEuLx
SOViS/2HYz/fsSLpBGdtv5rxBGsvRwbGidNdTHi9XZ1O020dHdKIzWSrOWSaVaqY
naHSC4CCWTnTtDdiPIBxEMcIiAGLkjWOZlaSiq1I+4TvilpkIApV3jehU8kgFUIr
gNayGf6ku3VJhnSJJ9ZCuk3l/AEOxOG/lkmAk9hYeDQa0+n/bvQ9+oWNYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESMFmFPJCxSSUygoUNspFsBcB5oMB8GA1UdIwQY
MBaAFCfg97u+QDGiTvG52xlqqwZC6EoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSi1EM3U3NUFNYUpPOGJuYkdXcXJCa0xvU2dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84YWJhNzEtM2JhOC00YjhkLThlYjYt
MzQ2YTNlYzE4NjhjLzEvSi1EM3U3NUFNYUpPOGJuYkdXcXJCa0xvU2dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC84YWJhNzEtM2JhOC00YjhkLThlYjYtMzQ2YTNlYzE4Njhj
LzEvSi1EM3U3NUFNYUpPOGJuYkdXcXJCa0xvU2dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGpvHsA3
JGetxPSMrxpUkeWiAv+FleY3rxsKwX39VzYKx+U3CEwFoVtywCv9pppWtLi3uGiP
abfnz0snhsjP08YQ42ycjJ76L/CEz3I0ouCpEvb2czRBwLBTre0/RE8CkVSWkfY4
DZmLMdq1SmXHcb2X50aYGEUqfh2wK2vkXpcyOFiAYiv/wssi7Q1sbTzeN/ac/KD4
QLS+JRPGPg1FtpRzUri0BCKAfDAYTfDYIWoUW9nwp2cx0XG/ZOm30Kdj7N49iakM
loXuL280X3AyLGhHWspcGwX0ugZ/RqSYSu8V1JrAUMufPhx8Wf+YpiNAgWVWq8eK
BVnMNgy/qo9fpw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 04:12:29 2026 by rpki-client