Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
File: J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft (raw, json)
Hash identifier: 318qYh0jWDwt5WSUhMFTe/Tb+VfEnQYrjMvstkMb/Yk=
Subject key identifier: BC:22:AB:AC:1B:7A:FB:07:C4:96:4C:99:F5:CB:06:16:53:18:90:4B
Authority key identifier: 27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
Certificate issuer: /CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Certificate serial: 019D27720F8D7F2E8787E568593CC954D39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 00:01:19 +0000
Manifest this update: Thu 26 Mar 2026 00:01:19 +0000
Manifest next update: Fri 27 Mar 2026 00:01:19 +0000
Files and hashes: 1: J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl (hash: u5L1mHUi5mNPFRG5COD2hAyIsPi0k1N8GpGjg8tSuto=)
2: q2cMBXCMV2TKXbIKxSlGdHYqSnQ.roa (hash: 8gAaZY+bZ3BGIX0aq+TEUyX+bxVegXyhlIPRaI0W4hI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:0f:8d:7f:2e:87:87:e5:68:59:3c:c9:54:d3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Validity
Not Before: Mar 26 00:01:19 2026 GMT
Not After : Mar 27 00:01:19 2026 GMT
Subject: CN=bc22abac1b7afb07c4964c99f5cb06165318904b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3f:92:d1:db:b5:74:6d:9b:1d:7c:23:b1:b0:
4e:dd:9e:79:47:37:0b:f8:9d:2a:e7:33:a7:5a:0f:
47:c3:28:61:90:34:27:ee:2f:6b:15:28:7b:e1:27:
55:8f:21:e3:c0:62:49:76:a3:4f:59:e0:28:6c:f1:
81:f0:4f:c2:4d:09:23:62:70:45:5c:c0:af:6b:99:
f3:e1:9b:68:bb:c7:f3:20:ae:8a:e0:d0:d0:31:45:
00:97:5d:74:7b:79:a4:bc:6a:70:af:06:71:20:df:
09:ef:0f:5e:2a:1b:49:65:b9:7a:0b:96:04:9f:dd:
3e:96:9c:bd:41:f9:3c:6f:e3:7a:8d:69:4b:1c:39:
3e:d1:5a:99:57:99:1c:3b:05:ce:a6:f7:f7:f3:95:
42:62:0f:e2:35:d1:87:9a:bb:be:55:7f:ec:16:02:
32:6f:f7:c6:f4:32:ab:78:27:f1:da:c5:22:94:67:
30:ab:01:e7:91:c6:30:75:59:2c:38:fd:fd:26:0d:
3b:11:7c:0f:68:ca:13:97:af:1b:3f:88:2d:d0:93:
2b:81:a5:44:60:2e:e8:9f:1c:9c:76:45:29:08:31:
25:b6:98:5c:d1:1e:92:42:c3:cf:8c:84:93:2a:82:
5a:79:ab:a0:f1:db:b2:57:94:39:36:74:94:bf:b4:
c4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:22:AB:AC:1B:7A:FB:07:C4:96:4C:99:F5:CB:06:16:53:18:90:4B
X509v3 Authority Key Identifier:
keyid:27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:71:d8:f6:93:14:43:de:54:bd:01:4b:61:f9:1a:0d:ec:85:
7a:35:f0:8c:5b:e2:9b:e2:52:1b:c8:58:0a:e8:16:53:eb:c2:
e0:1b:12:14:4c:b9:c4:1a:cb:61:11:0e:cc:b1:a6:7c:8d:a7:
87:c5:7e:00:5b:71:c3:02:35:74:1a:ac:8c:aa:63:aa:93:91:
45:2e:ab:ad:b4:98:99:40:70:34:76:d7:ab:64:60:c6:8c:47:
4d:53:a1:7f:36:78:70:c7:de:16:46:75:09:dc:44:5e:ee:9e:
bd:65:a8:e5:06:16:e1:c6:62:98:03:a1:8c:11:17:36:56:90:
e8:f3:90:a0:d7:71:1a:51:d3:85:bd:c8:c2:2c:4f:ed:12:a7:
b6:d1:e0:75:c0:19:8e:68:00:6b:cc:73:46:1d:e3:36:d3:58:
89:70:da:40:76:83:be:74:ba:6d:16:f4:8e:87:bc:77:f0:39:
5e:e2:ee:f9:96:1f:b8:a5:a3:f5:24:1f:5f:3e:4d:56:4b:ba:
5e:c2:65:1a:3c:63:c8:b3:f2:75:26:a7:63:64:47:df:85:1d:
e0:60:e4:82:79:df:70:dd:27:57:e1:56:24:87:31:55:66:a3:
8f:90:ff:13:54:92:68:fd:05:b2:84:db:af:7f:9c:6d:b5:e8:
3d:bd:10:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:59 2026 by rpki-client