Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft
File: J7JQwAtGuhgF8v5fanfo_-X-J3g.mft (raw, json)
Hash identifier: /Ns7sHEHW7MnRK/V8IY9qFV9E0J18oqbm5EKm0yIuqQ=
Subject key identifier: CC:F0:0A:A3:7A:79:02:F0:85:B3:36:70:00:51:07:10:A5:E0:BE:8F
Authority key identifier: 27:B2:50:C0:0B:46:BA:18:05:F2:FE:5F:6A:77:E8:FF:E5:FE:27:78
Certificate issuer: /CN=27b250c00b46ba1805f2fe5f6a77e8ffe5fe2778
Certificate serial: 019D2583E39015FE4DFD0F4035DAB88DC9FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft
Manifest number: 0393
Signing time: Wed 25 Mar 2026 15:01:33 +0000
Manifest this update: Wed 25 Mar 2026 15:01:33 +0000
Manifest next update: Thu 26 Mar 2026 15:01:33 +0000
Files and hashes: 1: J7JQwAtGuhgF8v5fanfo_-X-J3g.crl (hash: vu0gHOB16/KWyeEcs8B6miovdX3lGEZtgcNLOLp3fQk=)
2: PCV5mGTyG_SgomelCPvCXt-eraw.roa (hash: Sr6ZqTMnZ5nUSCIYTgu1oovZ8jmYGb+qW35o9FtNPcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:e3:90:15:fe:4d:fd:0f:40:35:da:b8:8d:c9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b250c00b46ba1805f2fe5f6a77e8ffe5fe2778
Validity
Not Before: Mar 25 15:01:33 2026 GMT
Not After : Mar 26 15:01:33 2026 GMT
Subject: CN=ccf00aa37a7902f085b3367000510710a5e0be8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:5d:de:7a:5b:6d:0f:fb:cc:9e:06:18:28:
9e:8b:4d:cb:28:7a:5f:c6:16:b5:a2:76:15:e0:e5:
0a:10:fc:03:94:7b:00:40:f6:19:8d:c7:55:ec:35:
ce:c1:be:88:ac:63:2f:53:70:70:16:b8:7a:25:6e:
ec:6f:16:0c:9f:f7:0f:5c:5d:4e:fd:90:22:df:68:
60:53:46:11:86:c2:07:eb:48:c8:27:71:66:f8:16:
1d:a1:d4:52:ca:c0:f4:1c:c0:42:73:5c:f6:a9:93:
0c:d5:93:d9:4a:95:78:df:0b:f3:d1:c4:25:49:99:
65:e4:0c:25:a2:36:80:a3:e3:83:f3:be:de:8c:73:
fa:04:01:2f:a6:29:49:97:e8:54:82:2d:9b:11:5b:
ba:1e:13:66:b2:3d:2b:62:1d:c1:0a:79:0c:97:1c:
38:aa:ca:9a:ce:ce:53:e6:7e:40:9a:e4:f8:21:c9:
28:69:d8:1e:52:0e:be:7a:5c:f4:6f:1c:92:95:4d:
e4:75:a4:97:13:33:9f:7c:7e:0e:8f:e1:5d:a7:7a:
71:61:4b:ce:a2:89:12:3f:94:4d:72:71:79:6e:0f:
6e:29:af:31:2d:51:54:55:15:cb:a1:16:d8:87:a4:
36:aa:54:fa:b1:57:a8:48:2e:d0:bc:40:44:f5:74:
c1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F0:0A:A3:7A:79:02:F0:85:B3:36:70:00:51:07:10:A5:E0:BE:8F
X509v3 Authority Key Identifier:
keyid:27:B2:50:C0:0B:46:BA:18:05:F2:FE:5F:6A:77:E8:FF:E5:FE:27:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f9:aa:a8:c9:42:93:97:c8:94:c0:71:03:75:43:c5:7e:12:
58:a8:0b:d1:4b:65:ea:df:c6:84:d9:98:e8:e0:51:85:7d:19:
a5:f9:4f:fc:f2:69:66:72:c5:9f:ca:b2:6b:dc:3b:e2:c0:9d:
7b:e7:4d:2b:79:da:7a:6a:80:30:56:3a:d0:47:8d:4e:36:49:
23:5c:00:30:e4:8d:f4:5b:ba:01:38:25:64:10:ca:06:29:ec:
82:48:64:ce:ce:9a:13:46:b5:64:c0:da:c6:f9:02:13:be:f5:
3f:7d:ea:43:bc:47:bb:87:77:e3:f1:6c:e3:a2:1d:d0:da:0a:
c7:0b:35:55:98:dc:5a:36:a4:da:b9:8c:58:f0:4d:9b:27:16:
a1:aa:a8:6d:4b:37:e1:01:a6:03:0e:02:a4:60:58:b7:f2:fb:
a3:86:8b:22:b0:6d:96:d8:c3:da:b2:37:36:d6:34:35:92:1a:
12:59:ec:d5:b4:51:03:2f:c6:9e:b9:64:79:07:6d:5f:72:01:
2e:90:cb:71:51:d9:39:05:ac:69:df:5d:f1:55:5a:b7:50:6a:
c7:63:02:d3:75:27:60:c7:5e:2e:b8:1f:8f:28:4e:62:ff:01:
5c:56:ab:33:d9:22:7e:d4:89:1f:02:a2:47:52:d6:73:51:bc:
bb:4c:4b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:59 2026 by rpki-client