Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
File: J2q7GtVn5bseR1pyoKaEU-P7oc0.mft (raw, json)
Hash identifier: ehvpTkfXt4u8gSH8Z67nE290LX+Fi4ZFPQwvrsyeT2I=
Subject key identifier: 38:8A:3A:A6:D6:3B:33:66:B3:46:0F:04:D6:93:ED:7B:4C:07:E2:9D
Authority key identifier: 27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
Certificate issuer: /CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Certificate serial: 019D265F3BD494D6B76D926BE312E1077535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
Manifest number: 0EA6
Signing time: Wed 25 Mar 2026 19:01:08 +0000
Manifest this update: Wed 25 Mar 2026 19:01:08 +0000
Manifest next update: Thu 26 Mar 2026 19:01:08 +0000
Files and hashes: 1: J2q7GtVn5bseR1pyoKaEU-P7oc0.crl (hash: yBvYh+Hp/qB7N1Nj6XWhmEUKE7KG7OIkrsh0ACsU0as=)
2: OXWr1FYLi9PgXMi4UP0vp3p1d3o.roa (hash: miQSIT7p7E2EU0jg2TvL7PxHL5mubsweNJtdEmmfr8s=)
3: vemKapMmkStR7tolVhfdLCFIHqo.roa (hash: dA21yuRu1C5aB1w0/kkdpqei9cBkSg/W6yABWc5Hwig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:3b:d4:94:d6:b7:6d:92:6b:e3:12:e1:07:75:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Validity
Not Before: Mar 25 19:01:08 2026 GMT
Not After : Mar 26 19:01:08 2026 GMT
Subject: CN=388a3aa6d63b3366b3460f04d693ed7b4c07e29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:fd:a2:a5:53:5c:36:de:ba:34:89:20:88:
a0:27:ee:d8:19:b9:1f:f1:36:12:cb:c2:38:16:d4:
de:15:33:ff:0a:36:07:eb:ba:98:3b:e0:f8:ac:a5:
3b:2f:90:0a:d2:11:69:3d:70:f6:f2:6b:1e:d5:a9:
db:bc:fe:4a:a1:46:74:a1:62:8d:8c:2c:f7:8c:3a:
f5:bc:1f:78:72:c3:14:f0:a5:94:5c:38:60:73:26:
41:3e:d8:49:97:d8:9e:6c:be:e0:44:eb:95:1c:fa:
67:6f:1d:c6:21:5b:cd:3f:52:fd:15:59:0b:ae:e3:
d4:21:89:df:8a:aa:df:6a:8f:5d:a7:a5:1c:8a:99:
30:e5:0d:db:85:58:ff:3c:e9:d4:c8:9f:7a:7a:d5:
9a:45:f5:3d:78:05:55:ea:52:e1:18:0e:ce:97:b2:
60:89:2a:a6:1f:f2:b8:68:fb:92:b6:f4:d1:4a:9d:
5c:df:b3:bf:de:fc:70:69:d1:3e:e0:59:a8:eb:be:
ba:06:88:a2:ad:08:0a:fe:04:68:f1:b9:02:27:a4:
31:c0:17:51:e9:1a:f9:a0:b7:75:0d:a7:4b:06:1d:
23:e2:de:1e:00:61:7e:90:cc:7a:06:28:f9:68:ae:
8c:86:b3:38:aa:c2:2d:94:4a:33:44:fd:5b:75:3a:
13:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8A:3A:A6:D6:3B:33:66:B3:46:0F:04:D6:93:ED:7B:4C:07:E2:9D
X509v3 Authority Key Identifier:
keyid:27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:df:ea:b6:b3:48:b4:e1:3d:11:7c:96:ab:ab:de:81:de:4e:
d9:a5:18:93:54:66:d0:ad:b5:12:ff:05:0a:d9:37:80:57:1e:
0b:c8:c7:e1:95:19:79:16:22:dd:76:e8:02:1f:61:a3:a1:e6:
5f:84:68:9e:ca:d2:96:b7:6f:25:f1:1b:88:6f:16:e7:62:99:
2e:25:ee:f7:31:42:28:29:82:28:59:da:b5:71:0d:a0:3e:90:
1c:f1:10:f2:63:f8:8f:e7:fe:33:22:ce:2b:89:6b:98:7f:14:
20:9d:76:26:d6:d9:6c:a4:a4:86:39:d1:b9:07:60:2d:c6:59:
6d:e6:e5:56:fa:0d:06:3d:ce:f1:8a:6e:b3:96:7f:09:e2:9e:
c3:a3:30:3e:49:00:0b:1d:40:a4:d9:25:1b:3a:db:20:0c:51:
c4:04:2a:78:90:ac:86:4b:04:57:71:45:bb:35:42:ec:14:b5:
d4:85:6f:3e:5a:ad:6f:73:03:6c:d3:58:8a:90:10:9e:60:ae:
39:df:a2:d1:5c:9c:65:38:ac:8d:db:48:e6:f3:98:e4:1b:b2:
77:03:98:cd:aa:2c:74:36:c7:ac:8c:3f:dc:7b:5e:55:f9:91:
d0:17:36:2c:29:bc:28:c2:25:20:a7:58:56:c1:48:e2:0b:de:
fa:cb:c1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:08:32 2026 by rpki-client