Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
File: J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft (raw, json)
Hash identifier: LzKu7YabOIbWpoWLpHUuVbJm+aZcNsis90ISP8i5edI=
Subject key identifier: 04:CF:1A:BD:01:36:EF:A2:7F:69:05:1C:8F:35:67:60:D6:B9:A9:4E
Authority key identifier: 27:A1:10:45:23:84:64:9D:05:C1:E9:8F:B9:7B:49:AE:11:60:09:73
Certificate issuer: /CN=27a110452384649d05c1e98fb97b49ae11600973
Certificate serial: 019D33E3C0880EBEAC7B484B927C2CCE37B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6EQRSOEZJ0FwemPuXtJrhFgCXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
Manifest number: 10A7
Signing time: Sat 28 Mar 2026 10:00:57 +0000
Manifest this update: Sat 28 Mar 2026 10:00:57 +0000
Manifest next update: Sun 29 Mar 2026 10:00:57 +0000
Files and hashes: 1: J6EQRSOEZJ0FwemPuXtJrhFgCXM.crl (hash: TewADu3mXyG5hd8PIsQOkCNPQ42KaE2jPasf3SLTyDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6EQRSOEZJ0FwemPuXtJrhFgCXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:c0:88:0e:be:ac:7b:48:4b:92:7c:2c:ce:37:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a110452384649d05c1e98fb97b49ae11600973
Validity
Not Before: Mar 28 10:00:57 2026 GMT
Not After : Mar 29 10:00:57 2026 GMT
Subject: CN=04cf1abd0136efa27f69051c8f356760d6b9a94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2b:68:48:69:17:d6:18:e1:eb:6f:34:2b:3e:
cf:86:4e:bf:14:69:05:bc:c1:86:c5:fa:b8:f7:91:
f3:50:00:0d:3e:7d:91:a3:e2:34:2e:99:2c:3f:53:
c2:4d:b2:80:fd:3f:ed:ae:53:21:52:be:be:43:63:
79:65:98:86:ec:cf:3f:27:0c:9f:32:1b:d7:b7:40:
44:fa:2a:86:fa:3a:6c:f9:fa:c9:95:0a:1a:0f:0f:
d2:50:c2:c6:32:b8:bd:b6:76:b4:af:b1:2b:bc:8e:
55:1f:3e:a7:bd:fe:3b:55:2e:89:43:cd:23:bf:3b:
b7:e3:c4:96:36:dd:9a:34:70:ba:b7:e8:0d:5e:96:
14:b5:9f:a0:3f:46:0d:71:07:5c:75:1f:07:4c:09:
0d:b6:f4:23:73:e6:e1:76:0d:58:59:58:3e:af:8f:
c2:5e:ff:5d:2c:b1:dc:0b:29:84:89:0f:f9:e2:57:
fb:b6:16:6a:e1:a8:3b:15:5c:8f:58:93:c8:aa:f2:
12:3c:ef:4a:42:ec:53:73:87:2c:fa:04:d1:44:5c:
33:25:20:d0:c1:bc:de:9b:ae:47:ab:6e:0e:20:e6:
bf:d1:9a:b2:55:f8:11:d3:f3:5b:06:ac:bb:47:5c:
db:25:2a:26:22:bb:77:20:b4:f3:00:6e:de:7e:dc:
0a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CF:1A:BD:01:36:EF:A2:7F:69:05:1C:8F:35:67:60:D6:B9:A9:4E
X509v3 Authority Key Identifier:
keyid:27:A1:10:45:23:84:64:9D:05:C1:E9:8F:B9:7B:49:AE:11:60:09:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6EQRSOEZJ0FwemPuXtJrhFgCXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:97:fc:98:36:e1:f2:f8:60:5b:45:5b:dc:c1:cc:bc:2d:56:
70:c1:9e:dc:d5:cc:7b:c5:50:fe:1f:60:9b:41:0a:b4:7b:66:
dd:17:e6:b1:ea:e0:e8:78:30:91:e4:14:3b:bc:86:a8:5a:b2:
57:1c:f2:f4:ac:a9:bd:2d:18:9c:73:8b:84:61:fd:90:69:f6:
56:f8:48:1c:45:09:da:4b:88:01:d5:d8:83:f5:1f:20:3d:c4:
13:29:fb:95:80:a3:34:9f:d2:29:53:08:66:20:7c:42:04:54:
db:7f:9c:99:36:19:9d:8c:3c:30:3f:62:f8:12:22:5b:76:2c:
b5:ac:e5:93:2b:3d:a4:24:00:96:40:86:77:07:49:88:e8:2e:
99:a3:34:24:ea:ab:a6:6c:5d:98:10:4d:d8:fd:f4:dd:64:a9:
25:d4:c5:14:e7:87:df:bb:b6:63:bd:e6:8a:47:8b:26:98:14:
57:22:d3:b1:67:b3:fc:40:3d:02:99:26:0c:54:a4:9c:80:46:
a2:68:f1:4e:9e:b3:d9:34:90:8f:ca:bd:e0:75:72:96:c2:33:
28:9f:fb:2a:d4:4d:bd:eb:17:33:f8:b8:0a:dd:be:62:12:7a:
90:3f:3f:58:d4:e8:bb:a7:d8:a3:08:64:a3:48:69:51:d2:08:
55:ab:15:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0z48CIDr6se0hLknwszje2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YTExMDQ1MjM4NDY0OWQwNWMxZTk4ZmI5N2I0OWFlMTE2
MDA5NzMwHhcNMjYwMzI4MTAwMDU3WhcNMjYwMzI5MTAwMDU3WjAzMTEwLwYDVQQD
EygwNGNmMWFiZDAxMzZlZmEyN2Y2OTA1MWM4ZjM1Njc2MGQ2YjlhOTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqitoSGkX1hjh6280Kz7Phk6/FGkF
vMGGxfq495HzUAANPn2Ro+I0LpksP1PCTbKA/T/trlMhUr6+Q2N5ZZiG7M8/Jwyf
MhvXt0BE+iqG+jps+frJlQoaDw/SUMLGMri9tna0r7ErvI5VHz6nvf47VS6JQ80j
vzu348SWNt2aNHC6t+gNXpYUtZ+gP0YNcQdcdR8HTAkNtvQjc+bhdg1YWVg+r4/C
Xv9dLLHcCymEiQ/54lf7thZq4ag7FVyPWJPIqvISPO9KQuxTc4cs+gTRRFwzJSDQ
wbzem65Hq24OIOa/0ZqyVfgR0/NbBqy7R1zbJSomIrt3ILTzAG7eftwKtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATPGr0BNu+if2kFHI81Z2DWualOMB8GA1UdIwQY
MBaAFCehEEUjhGSdBcHpj7l7Sa4RYAlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjZFUVJTT0VaSjBGd2VtUHVYdEpyaEZnQ1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83NzBiZGQtYjNlNC00MDFhLTk0NzAt
MGVhOGNkYmM0YjA4LzEvSjZFUVJTT0VaSjBGd2VtUHVYdEpyaEZnQ1hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83NzBiZGQtYjNlNC00MDFhLTk0NzAtMGVhOGNkYmM0YjA4
LzEvSjZFUVJTT0VaSjBGd2VtUHVYdEpyaEZnQ1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5f8mDbh
8vhgW0Vb3MHMvC1WcMGe3NXMe8VQ/h9gm0EKtHtm3Rfmserg6HgwkeQUO7yGqFqy
Vxzy9KypvS0YnHOLhGH9kGn2VvhIHEUJ2kuIAdXYg/UfID3EEyn7lYCjNJ/SKVMI
ZiB8QgRU23+cmTYZnYw8MD9i+BIiW3Ystazlkys9pCQAlkCGdwdJiOgumaM0JOqr
pmxdmBBN2P303WSpJdTFFOeH37u2Y73mikeLJpgUVyLTsWez/EA9ApkmDFSknIBG
omjxTp6z2TSQj8q94HVylsIzKJ/7KtRNvesXM/i4Ct2+YhJ6kD8/WNTou6fYowhk
o0hpUdIIVasVaA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:13 2026 by rpki-client