Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
File: J_8gRAummKTcBDm8F5-zOj7hzJU.mft (raw, json)
Hash identifier: PfBbgL89z9OnyEsi+9YVkCM2mXh97OEfLw5BMLBaZXc=
Subject key identifier: B3:BE:25:6E:35:F1:FC:AB:AB:B9:19:3E:F6:05:C5:6D:39:B3:37:96
Authority key identifier: 27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
Certificate issuer: /CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Certificate serial: 019D26CCB97BEE3B09937BA54F0E5FF709F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
Manifest number: 0F5D
Signing time: Wed 25 Mar 2026 21:00:44 +0000
Manifest this update: Wed 25 Mar 2026 21:00:44 +0000
Manifest next update: Thu 26 Mar 2026 21:00:44 +0000
Files and hashes: 1: Brthxz7priRlJYXJ_EOaKSwdKP4.roa (hash: E8F9SE2VrkKt66H0FbYQUbq5xRyURkLNcY48oGiYLYc=)
2: J_8gRAummKTcBDm8F5-zOj7hzJU.crl (hash: 4UOENCjs0cOF+e5e5ZOnHkDF/B3JKq1sp0XzOo8wj1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:b9:7b:ee:3b:09:93:7b:a5:4f:0e:5f:f7:09:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Validity
Not Before: Mar 25 21:00:44 2026 GMT
Not After : Mar 26 21:00:44 2026 GMT
Subject: CN=b3be256e35f1fcababb9193ef605c56d39b33796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:43:9c:3c:b7:48:10:a9:0d:8a:9e:aa:9e:47:
40:d8:9f:d4:93:f9:08:92:80:65:8e:a1:55:fd:a3:
61:42:2f:7a:2c:d3:47:1d:52:f8:5d:3d:b7:7b:22:
1a:22:fb:53:e6:a3:c1:7e:3a:17:28:fd:6f:15:ab:
40:c8:0c:6f:f6:41:1b:62:1e:91:54:1f:5c:ab:1a:
aa:72:73:c2:f9:b2:6a:47:cc:73:5b:53:e1:f1:8b:
2f:bc:73:e0:d8:2a:1c:f9:5d:1d:5b:0c:2b:27:aa:
6b:42:44:6d:bb:89:5b:d4:33:4e:7e:a9:1c:8b:7e:
a9:ec:56:f4:83:af:20:a6:d0:93:b8:ce:a2:9c:ef:
7a:31:0c:49:db:ab:2b:d4:54:f3:1c:4c:44:38:a5:
54:aa:a8:6b:16:83:e7:5a:42:78:72:21:60:d5:c2:
c4:32:2f:c6:26:a3:2a:2c:a6:60:65:54:8d:1b:b3:
9d:58:3c:f2:cf:0d:08:57:a2:dc:6b:31:b5:f5:e0:
0d:f2:7c:5c:1d:69:72:4b:94:29:c1:85:f4:84:03:
e1:e9:55:38:20:eb:b6:0d:ce:a4:3f:27:e0:b5:99:
1c:33:e2:cf:bd:c7:c3:87:ad:5d:88:cd:42:b5:34:
66:56:4b:38:75:87:ad:bf:5b:2f:da:74:fa:94:65:
77:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BE:25:6E:35:F1:FC:AB:AB:B9:19:3E:F6:05:C5:6D:39:B3:37:96
X509v3 Authority Key Identifier:
keyid:27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0c:d4:5f:f6:9c:fe:8c:09:4e:23:25:89:0f:0e:34:8c:e0:
b2:cc:9d:68:00:e2:f9:b7:8f:24:ae:29:9a:1d:a8:01:3a:f6:
69:4f:19:69:45:0a:3d:b2:0c:a5:c0:29:bd:79:13:43:d0:dd:
99:7f:d9:83:52:58:2f:d4:ff:2d:29:56:47:ac:98:6f:33:c4:
cb:61:fb:6a:d1:e5:8f:14:12:d5:1e:54:26:31:df:ec:82:47:
1a:45:9a:fd:3b:2c:13:12:2c:7b:30:b0:cb:2b:f2:a4:2b:2a:
e6:50:c9:d0:8c:da:7c:a7:2f:c9:a6:72:14:3c:33:e4:58:76:
3a:a2:de:0f:31:23:e8:ad:ef:d5:ea:63:b0:1d:72:e0:65:64:
0a:4c:13:ee:12:b8:9d:1a:10:3d:ff:ab:c9:de:e3:f5:9c:85:
75:88:bc:9d:8d:06:e8:df:04:d2:dc:b3:49:1a:f9:fb:2c:66:
11:01:4d:44:47:36:64:b3:f6:7f:a5:66:3c:4d:0d:08:69:c3:
a0:6f:71:2d:44:05:20:62:1b:c1:56:ff:d7:cc:18:32:2b:e4:
45:58:49:66:c3:39:44:e9:53:75:41:30:b0:45:5f:2b:6a:e5:
6f:4a:96:56:73:11:7d:a2:2b:0f:95:de:c8:92:74:92:5a:0b:
51:3c:6f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:48 2026 by rpki-client