Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
File: J98EKCQnP8_z8JPQ-bHexpYLrmo.mft (raw, json)
Hash identifier: RnWUOqO32BB4dnuI/Y8kzSlWlu4CYrWmKH4pcciQLKU=
Subject key identifier: CC:FE:C2:FF:8E:01:B8:0C:0F:14:3A:E7:0C:D7:E5:F6:98:2A:64:E1
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Certificate issuer: /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial: 019E1DC72B5AAAD85DCDC30C102CD6BDFA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
Manifest number: 190D
Signing time: Tue 12 May 2026 20:00:52 +0000
Manifest this update: Tue 12 May 2026 20:00:52 +0000
Manifest next update: Wed 13 May 2026 20:00:52 +0000
Files and hashes: 1: 5duSWp-R4sHUDIWHsiSMyzmiMjM.asa (hash: I9FW+aLJqiDmPx2UKLG7SXwoCqVIWzrTVyHoM25/ExQ=)
2: EaAMsvwoHBe4yq1jbHkVSMOCcms.roa (hash: tCewwDnNFA4yqzd0eb5IKas5uAfl5Rr1tmwDJ4VUURI=)
3: IvpEH6hd1qJi0dDCHitCwtgqWwA.asa (hash: pdg3WShcX162alecCVt/x5tpVyFcxh+QQl8q0PDMBOo=)
4: J98EKCQnP8_z8JPQ-bHexpYLrmo.crl (hash: UnoXptyQZ4shhQoZ1BiebCvSipkUjrRVKpG0OkSo4tE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:2b:5a:aa:d8:5d:cd:c3:0c:10:2c:d6:bd:fa:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Validity
Not Before: May 12 20:00:52 2026 GMT
Not After : May 13 20:00:52 2026 GMT
Subject: CN=ccfec2ff8e01b80c0f143ae70cd7e5f6982a64e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:87:6b:92:c1:fa:40:50:d9:a0:70:97:d5:f8:
30:67:43:f3:e8:2e:ea:6e:b8:2c:52:3a:ed:eb:4f:
49:05:8f:66:26:70:f2:75:f0:fb:fe:6c:0a:f9:24:
c7:41:76:8d:1b:5a:a7:69:89:b5:51:60:1c:fc:76:
5a:da:20:1f:55:a5:c8:04:9c:a2:77:28:26:e3:fe:
4a:53:35:9a:5c:8a:40:86:7f:40:85:e9:4f:90:8c:
e4:7e:84:2c:23:1b:97:73:40:e7:64:69:0d:66:ec:
72:70:be:48:81:78:19:23:bc:91:82:0d:22:6f:d5:
e2:fa:89:b0:67:53:56:e5:7f:4a:70:65:79:b0:86:
88:f5:9c:7a:e5:25:e7:89:ce:8a:80:97:d5:72:d8:
ef:eb:9b:7f:dd:6e:65:52:43:c0:43:b2:d4:8d:48:
b6:6c:12:46:bf:93:31:28:e5:a8:74:e1:e1:8f:21:
32:7a:30:f9:d8:f5:25:f7:71:9f:6f:55:52:43:4b:
cb:29:2e:35:e5:3e:9f:8d:87:1d:f8:a7:af:86:bd:
ab:e7:5d:73:af:4c:29:d1:a2:03:2a:31:c1:37:2d:
d0:d3:e9:fc:50:ee:b3:1c:1b:33:b8:02:e7:60:91:
4f:6d:66:7f:0b:cd:36:a7:2f:a1:61:11:7a:7e:1a:
b8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FE:C2:FF:8E:01:B8:0C:0F:14:3A:E7:0C:D7:E5:F6:98:2A:64:E1
X509v3 Authority Key Identifier:
keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:3d:d7:f5:59:a7:76:ee:8a:84:21:4c:88:a2:27:d7:51:22:
11:71:56:0e:63:34:91:53:aa:7f:54:be:d6:53:97:00:33:8c:
97:66:c2:2f:61:76:6f:b9:a6:b6:63:0b:f5:46:a9:15:31:95:
44:27:6c:00:32:89:1d:92:5a:20:4f:aa:3d:08:75:09:12:57:
31:7b:8e:ca:ac:40:5b:95:b3:6b:8b:5e:0d:e5:2e:fa:46:ee:
6a:52:91:70:00:44:ab:24:d4:0f:55:29:23:23:f5:22:82:fa:
e8:53:26:f9:f4:1a:88:09:d2:4a:6b:3f:fd:43:35:84:b7:cc:
a5:6e:74:41:7d:53:e0:38:cf:fb:56:ea:cf:cc:7f:ef:33:a6:
a3:5d:dc:63:6e:3d:b8:b9:4d:f6:10:9d:09:16:6b:11:44:89:
fd:1c:89:fc:c8:29:44:24:b1:b7:af:c4:6b:81:83:07:11:ef:
dd:4c:44:78:9f:5d:44:62:af:67:e8:bc:9b:a6:6d:1f:56:a9:
e4:ce:e8:68:3b:bb:3d:e5:e4:6d:48:d1:dd:ed:79:bd:94:75:
0d:c5:c3:92:95:fa:f3:a4:15:a5:74:d1:97:f6:78:6b:94:b2:
e4:51:b1:6d:90:64:65:44:ef:8b:87:de:2a:53:5f:c0:d1:b9:
63:86:e6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:41:28 2026 by rpki-client