Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
File: J_whhWzY4Denu4xjkqYZghOotPY.mft (raw, json)
Hash identifier: fUehhlqaiT1UqRjKxv9cl0/yVdjCz5XkDFrLIUbRss4=
Subject key identifier: 4B:AB:4C:4A:04:3C:FD:37:27:07:1E:3D:15:76:E4:D1:7F:C5:93:78
Authority key identifier: 27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
Certificate issuer: /CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Certificate serial: 01A0C9A23E4CCCFF6AB3E1889A9969FA1E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
Manifest number: 1149
Signing time: Tue 22 Sep 2026 15:00:48 +0000
Manifest this update: Tue 22 Sep 2026 15:00:48 +0000
Manifest next update: Wed 23 Sep 2026 15:00:48 +0000
Files and hashes: 1: J_whhWzY4Denu4xjkqYZghOotPY.crl (hash: lzJjKYHkp4UgSHFuplr+BmAGKYV4rYJzVTIlYZytOlM=)
2: Zl9UixuUH0GLR4R_JPyHH_dGJ1Y.roa (hash: bKOmByPp72MyiwK2dxQMPNiiDG6ujdM2vWNSfqTcD8I=)
3: evUKjjQ-64urf3ID9QQeEJmSrho.roa (hash: jHjvWcJHTbQkaqv1cxn7W2VQ1dY8D8A2yCIoe6SeCXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:3e:4c:cc:ff:6a:b3:e1:88:9a:99:69:fa:1e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Validity
Not Before: Sep 22 15:00:48 2026 GMT
Not After : Sep 23 15:00:48 2026 GMT
Subject: CN=4bab4c4a043cfd3727071e3d1576e4d17fc59378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:29:75:74:22:9f:49:47:dc:d9:ab:64:28:
c1:dc:d8:24:d8:7b:f3:36:71:e8:8b:44:13:d3:11:
02:92:ca:d2:07:83:5b:a3:38:f5:da:37:4e:1f:9e:
f9:fc:09:9e:e6:c3:21:b9:f7:c8:44:9b:5e:3a:29:
e2:22:ed:79:03:e2:93:46:ef:dd:c5:e0:00:ef:9f:
5e:86:29:9d:f4:6b:87:6a:de:da:6b:1c:ac:cd:45:
a5:4a:11:52:0b:b1:88:2b:7e:8e:a4:17:da:ad:d6:
2d:6d:1d:f3:6e:aa:6d:48:06:fb:b5:90:6d:68:8b:
b5:6b:b9:00:55:fb:83:1c:c3:c3:e3:86:8e:ee:5c:
ac:b0:e4:b9:58:97:ea:ad:cf:39:f2:94:64:16:d9:
ed:ee:c8:df:bd:e4:67:c4:60:14:e8:4a:2b:b0:f4:
2b:97:0d:1e:dc:a6:00:f5:ba:a5:72:6c:bd:1e:e0:
31:e6:15:49:f2:4e:d8:cc:69:d2:82:13:c5:7d:86:
00:87:b1:00:0f:96:bc:69:68:8f:78:19:bf:80:35:
a3:14:41:b9:ac:85:96:78:11:c7:0c:b7:ef:bb:94:
e1:f1:b2:2a:be:14:ec:af:78:ca:9f:a5:6f:62:95:
0b:d6:d7:5b:0e:44:e0:a7:46:5b:09:92:17:8e:5d:
b1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AB:4C:4A:04:3C:FD:37:27:07:1E:3D:15:76:E4:D1:7F:C5:93:78
X509v3 Authority Key Identifier:
keyid:27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:01:9d:ce:23:85:cd:3e:09:cd:3a:d9:a9:43:0a:15:53:02:
42:83:97:f3:11:a1:4d:f9:9c:35:ba:7d:73:97:c3:26:91:8f:
b0:48:18:9a:11:e7:46:21:9a:34:de:87:ad:fc:fa:03:7e:f3:
bb:70:d2:cd:a5:e7:46:a0:bf:93:06:da:2e:fd:53:98:98:db:
49:7a:d9:8b:31:26:c5:3a:48:74:0a:55:3f:bc:62:8c:d1:ed:
1b:28:11:a8:90:57:fd:90:9d:63:36:13:fa:1a:63:05:58:e1:
e3:ec:10:e4:6f:f6:b7:d2:29:ad:c1:13:c1:e4:52:e9:06:52:
d9:0f:ab:84:d2:e5:4f:30:aa:fc:10:1e:13:3b:48:3b:24:eb:
07:04:f6:db:fa:16:45:9f:31:2e:72:fc:75:26:22:22:e1:1c:
e2:c4:94:fb:b2:cd:1c:f0:18:67:47:92:2b:31:56:fd:d6:93:
de:a8:04:65:3c:44:26:9f:62:43:67:33:2a:20:af:2b:c2:8c:
d2:5b:af:fa:b2:92:83:8d:a3:a1:2b:c3:05:05:c8:f3:33:2f:
b7:2a:45:93:66:ff:74:9f:68:4c:18:df:cb:8c:db:27:77:e9:
3c:05:17:24:45:e9:97:2d:3e:c3:d9:70:5a:9e:73:14:a3:70:
49:f9:5e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:07:52 2026 by rpki-client