Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
File: J-D3u75AMaJO8bnbGWqrBkLoSgY.mft (raw, json)
Hash identifier: isZK+49meD/7J3Epv7QLDAEIm/RlQYjpdMaYVmuzg04=
Subject key identifier: D2:9C:0A:31:68:5A:1C:D7:69:64:3C:82:1E:F3:79:07:C5:0C:63:D9
Authority key identifier: 27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
Certificate issuer: /CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Certificate serial: 019D2961673EF0623223F8D54396D74E827A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 09:02:22 +0000
Manifest this update: Thu 26 Mar 2026 09:02:22 +0000
Manifest next update: Fri 27 Mar 2026 09:02:22 +0000
Files and hashes: 1: J-D3u75AMaJO8bnbGWqrBkLoSgY.crl (hash: TFn2rBN6NZWV5FU+QzLEU0fRLP6+nk8rTJ+hn/FeYc8=)
2: fH7jpTfOw73ogmMvWrEFRq2Avio.roa (hash: PFBzuOPj54GvMEMM5OOIFBp/nYApNQPXPXoK+zClv8U=)
3: uDCd91-kIRTx4Oler7V-1bWJeEE.roa (hash: MPw5XG6tMFKBuwGKWin9/7K5TyzvM+BrLD5tHi46a6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:67:3e:f0:62:32:23:f8:d5:43:96:d7:4e:82:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Validity
Not Before: Mar 26 09:02:22 2026 GMT
Not After : Mar 27 09:02:22 2026 GMT
Subject: CN=d29c0a31685a1cd769643c821ef37907c50c63d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1c:db:ef:19:1d:11:04:81:a3:9d:31:54:fa:
ff:a9:e5:d7:22:b5:9c:21:e1:02:5d:ee:69:63:40:
2f:f3:ef:80:63:a4:ae:bd:43:1a:c0:03:2d:79:ab:
40:77:5e:ae:c4:a9:3a:a5:8b:de:c2:c0:ac:97:54:
4f:a4:fc:83:7f:cf:be:33:ed:5b:7f:a6:b1:01:ef:
e8:aa:21:e7:f1:f6:74:17:62:84:bb:f7:c2:a8:31:
ec:69:ea:65:42:59:39:f1:1c:68:d3:3a:82:7d:7a:
6e:a1:bc:42:5e:52:20:6a:35:2b:f2:19:c2:e6:74:
f7:b1:d3:69:c2:ea:42:d6:33:db:f1:89:95:7d:86:
f6:b7:76:c4:12:79:66:e3:83:34:90:71:23:af:e3:
70:42:14:4f:50:8a:c3:e0:70:15:90:84:ed:98:8a:
80:63:59:a2:b2:7d:ea:50:1c:58:50:6b:6e:59:aa:
e9:4d:2f:62:a0:79:54:47:f8:fc:48:2b:5d:34:81:
62:97:f7:d9:18:6e:a3:7d:ec:d5:00:68:33:b5:63:
11:a3:0e:62:a9:e0:68:6e:bf:5a:d6:96:3b:0b:de:
1f:fd:94:58:44:d9:0c:02:44:47:e2:e5:e7:92:27:
2f:09:53:a3:f3:8c:b3:f6:e3:6c:79:39:af:ad:ca:
50:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9C:0A:31:68:5A:1C:D7:69:64:3C:82:1E:F3:79:07:C5:0C:63:D9
X509v3 Authority Key Identifier:
keyid:27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:76:4a:b1:17:3b:b9:66:d8:ca:f9:50:30:cf:8c:a0:58:e6:
98:fa:40:5c:0d:d2:fb:da:2d:b8:b0:6a:39:39:fd:50:c4:57:
c6:72:8c:67:d5:71:a1:08:60:cd:44:2e:98:48:bb:85:20:28:
79:6c:da:5c:a5:e3:8e:1b:bb:14:4b:23:ab:e7:5e:83:a6:cd:
3d:0d:c1:ea:6c:1a:73:d5:c7:5e:6d:e2:2b:4b:72:41:67:19:
66:cd:63:19:8a:f5:1e:ac:cc:d1:cb:b7:b2:32:1d:20:4b:96:
2e:ca:b3:26:2c:90:ed:99:4d:5d:45:04:b4:65:0e:3d:c6:df:
fa:4e:64:3b:97:25:ec:c6:2f:80:d4:c9:77:ab:93:da:ee:08:
50:5f:b8:59:00:d9:aa:23:e0:c8:20:78:77:df:c1:ba:de:f7:
11:54:0f:a1:65:1d:8b:c2:21:de:5f:6e:b1:38:b3:84:c3:e1:
35:73:2e:71:e1:0d:2b:16:00:61:33:33:43:e5:88:f8:e1:2b:
27:10:6c:78:62:7b:50:b8:13:a3:2d:e3:8a:1f:31:0c:ab:fe:
09:06:65:47:5a:9d:aa:6a:cf:b0:f3:fe:6b:af:09:f6:b9:74:
e7:42:c1:70:00:ad:00:7c:16:3a:8c:19:3f:60:fe:9d:84:30:
48:ec:3a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:55:41 2026 by rpki-client