Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
File: J_whhWzY4Denu4xjkqYZghOotPY.mft (raw, json)
Hash identifier: h+SbRujMTQFg9sR3ReAgD3o5ltQCczpwYxbpKT9DS1E=
Subject key identifier: 93:CF:69:E7:20:6F:EF:91:9E:03:02:FE:4B:19:E4:CF:1A:56:6B:2F
Authority key identifier: 27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
Certificate issuer: /CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Certificate serial: 019D28BBB0D378EC56BC609C7490118A4EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
Manifest number: 0F68
Signing time: Thu 26 Mar 2026 06:01:22 +0000
Manifest this update: Thu 26 Mar 2026 06:01:22 +0000
Manifest next update: Fri 27 Mar 2026 06:01:22 +0000
Files and hashes: 1: J_whhWzY4Denu4xjkqYZghOotPY.crl (hash: ZSZWogC3g5dKXhXSWEmGthOrIn/+pGcdEJVtKLh2Tmo=)
2: Zl9UixuUH0GLR4R_JPyHH_dGJ1Y.roa (hash: bKOmByPp72MyiwK2dxQMPNiiDG6ujdM2vWNSfqTcD8I=)
3: evUKjjQ-64urf3ID9QQeEJmSrho.roa (hash: jHjvWcJHTbQkaqv1cxn7W2VQ1dY8D8A2yCIoe6SeCXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:b0:d3:78:ec:56:bc:60:9c:74:90:11:8a:4e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Validity
Not Before: Mar 26 06:01:22 2026 GMT
Not After : Mar 27 06:01:22 2026 GMT
Subject: CN=93cf69e7206fef919e0302fe4b19e4cf1a566b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e7:71:13:38:3d:2f:ab:1b:40:d4:b1:3a:7f:
65:88:dd:bf:6e:f0:67:95:33:2a:97:c2:ff:49:92:
6d:32:e3:f9:1e:31:07:75:fb:36:07:83:8d:44:c4:
04:25:4d:d5:e4:83:49:4c:12:93:6b:66:22:fb:82:
a5:10:9d:8f:3f:b0:bc:4c:21:51:72:17:6a:6b:d6:
3c:d0:44:cb:8b:ba:a8:91:76:f4:dd:ef:ab:5f:d9:
7f:b7:c3:35:42:74:fd:9c:12:04:16:7d:2b:34:2d:
a3:63:c9:a7:b6:d4:6b:4c:2a:99:9e:1b:a5:a1:2e:
de:d8:42:3c:b3:2b:89:6a:a1:3b:ed:1a:f7:8b:d6:
bb:fc:7f:93:9f:c5:89:2f:14:ec:28:ed:9b:73:38:
cd:c3:9d:fa:8c:82:1e:ed:e2:92:eb:b7:c8:56:09:
e6:78:62:62:d1:8b:2c:c8:a7:1f:6c:94:e2:b6:1c:
fd:a9:3f:74:33:0a:71:bf:7f:57:a5:0e:0e:e6:2a:
c4:04:bd:90:10:3d:41:13:58:0b:3d:ba:03:21:95:
90:e9:d6:19:72:46:94:0f:83:42:f7:83:74:72:0d:
b0:69:8f:87:69:9a:00:02:5c:0c:38:95:79:b1:b8:
49:89:ee:2d:56:59:9d:b3:64:81:69:cd:68:d0:b8:
86:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CF:69:E7:20:6F:EF:91:9E:03:02:FE:4B:19:E4:CF:1A:56:6B:2F
X509v3 Authority Key Identifier:
keyid:27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f9:77:79:58:52:d0:df:4a:9e:7c:3b:a3:78:b6:52:ec:6c:
e6:4a:d0:67:7a:84:c0:cb:e3:c3:ed:a8:a1:22:06:56:98:18:
e5:11:9b:04:3d:4a:e9:3b:ce:ca:2d:c2:2b:38:a7:de:e7:ce:
d6:c4:cf:9d:ab:da:34:37:4f:e1:35:5f:90:6d:9d:e2:95:19:
dc:37:b9:fc:73:aa:5b:e5:28:ca:5a:0d:d8:91:e4:e0:5d:4d:
3d:2c:67:97:52:2e:64:19:52:dc:ee:2f:98:1c:7f:01:a7:db:
03:3e:f4:42:3c:1c:ee:4a:90:14:ea:7d:7b:b1:bd:e7:84:8e:
e4:03:1a:4b:d6:ba:8c:c2:38:db:e8:b4:20:0e:e7:ba:83:70:
92:e4:28:9b:e9:91:3d:45:36:2a:42:e9:bf:4e:57:31:f6:d5:
7e:43:f2:f9:86:19:d7:15:50:03:21:28:60:4b:be:45:02:06:
d5:8f:1d:29:2f:a3:34:26:83:1f:33:57:68:07:1a:d6:5a:40:
7a:6c:a4:4e:cb:b6:3e:53:b5:bb:4c:d1:f5:27:47:7f:4d:b4:
7c:6b:ae:1d:9c:74:75:5c:ba:0d:67:cd:44:f6:12:16:c1:80:
8f:c6:08:dd:df:c8:3e:39:00:e8:5c:99:01:82:77:0d:85:e9:
af:72:eb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:43 2026 by rpki-client