Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
File: J98EKCQnP8_z8JPQ-bHexpYLrmo.mft (raw, json)
Hash identifier: Jx8Iv2VRyZc5s6sK0yVJi8jItBJ3SmB+uk5YEHyrWEM=
Subject key identifier: AB:F2:E2:8F:6E:1A:7A:0D:AF:77:83:05:18:8D:5A:FD:C1:5D:38:85
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Certificate issuer: /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial: 01A0CBFE6A227E05EFE72B2926808471F6D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
Manifest number: 1A72
Signing time: Wed 23 Sep 2026 02:00:42 +0000
Manifest this update: Wed 23 Sep 2026 02:00:42 +0000
Manifest next update: Thu 24 Sep 2026 02:00:42 +0000
Files and hashes: 1: 1-eXk56W1WcQXJBaon4jYvPO5XKk.asa (hash: 4kMcrktNRWgxl6BULeDgtu/gbF/92oPuNyR3Tirvwvs=)
2: 1KQsz8EMeMqO7bc9e9NUCyualHA.asa (hash: K+ABwTOia6am6qcpzwES7lTBokcCgw4GgL9iAZqzKrs=)
3: EaAMsvwoHBe4yq1jbHkVSMOCcms.roa (hash: tCewwDnNFA4yqzd0eb5IKas5uAfl5Rr1tmwDJ4VUURI=)
4: J98EKCQnP8_z8JPQ-bHexpYLrmo.crl (hash: x14sBG9lKrWtdlJCsKWC2kN+1f0NkyRhOaMSVX4QTCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:6a:22:7e:05:ef:e7:2b:29:26:80:84:71:f6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Validity
Not Before: Sep 23 02:00:42 2026 GMT
Not After : Sep 24 02:00:42 2026 GMT
Subject: CN=abf2e28f6e1a7a0daf778305188d5afdc15d3885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ad:69:da:c4:9c:54:74:1f:4a:2d:66:54:ea:
e1:17:05:fd:b6:f8:72:10:b8:91:27:d6:dc:55:01:
4a:d1:60:76:22:db:73:0d:49:1d:20:e3:3f:d1:95:
22:82:05:f6:a2:10:8c:99:7d:11:21:ca:c8:62:25:
d1:b2:f9:5f:28:53:c3:f3:7b:0d:d7:0d:1d:77:48:
93:d4:42:3b:8b:7a:10:c0:e1:87:ee:de:31:68:63:
c4:64:b3:86:a2:33:21:a3:a7:e7:f5:c3:22:63:08:
f9:a7:90:3c:54:4e:03:fd:ca:9f:07:2f:dc:68:32:
2b:d5:c9:18:98:7b:9d:9d:c9:37:6c:97:21:94:50:
be:71:7b:24:fa:d7:03:0c:04:e5:9f:e3:cc:cd:67:
ee:83:91:27:04:55:43:fd:d2:cb:a8:a9:a1:4f:67:
0a:b8:01:e7:b0:9a:49:4e:8e:ae:69:fe:0b:49:a6:
04:fa:e6:4e:7a:a7:42:53:6e:fc:59:8f:02:e3:d9:
4d:5e:79:fa:dc:9d:40:2e:1d:3b:45:4c:3f:d6:0c:
d9:d4:22:d7:ba:db:80:e0:11:96:55:16:51:c2:49:
b0:e6:88:39:5b:8e:4a:5f:70:1d:4e:15:ac:06:e0:
fb:90:ec:7e:30:8c:69:03:28:b5:20:2e:ea:70:0c:
3e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F2:E2:8F:6E:1A:7A:0D:AF:77:83:05:18:8D:5A:FD:C1:5D:38:85
X509v3 Authority Key Identifier:
keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0c:15:9b:ca:7a:6b:47:2f:1f:d5:d4:0e:cf:b2:8f:e9:f4:
7b:b2:2b:58:86:cc:dd:60:c0:e1:cb:ba:08:2a:7f:d9:fa:63:
3c:d1:c7:46:eb:15:f9:f1:43:72:29:78:93:d5:63:1b:dc:8e:
cb:40:c5:df:f4:1b:7e:5f:21:85:57:c0:69:a0:87:1e:2a:ef:
c1:5e:84:4a:8a:b6:d7:90:7f:2e:20:5b:8f:91:35:79:64:21:
d8:49:d2:d9:ec:67:98:a0:06:df:48:af:4e:2c:cb:33:35:49:
85:ad:85:a6:3f:0b:2b:64:a4:79:d4:40:9d:55:98:e6:4b:c8:
c4:e5:84:1b:c8:69:25:37:f8:5f:3b:e8:39:24:6e:6b:1c:c9:
0f:d9:bb:fe:dc:8e:18:43:2e:28:18:7f:e7:32:ca:d3:6a:15:
c1:b0:29:bb:85:7e:8e:09:3b:8b:3b:78:00:e6:ac:cf:f7:83:
60:a0:6c:af:20:a8:a8:f2:b8:92:35:02:0b:93:b1:70:09:32:
23:04:ca:91:36:21:77:7d:fc:e7:cf:d2:bd:04:30:cb:58:57:
65:c8:4a:cf:67:a6:ad:b7:81:73:3f:50:f5:ae:ca:8c:ac:fb:
78:48:68:1a:b4:f4:0f:c8:29:04:7e:6b:eb:9d:40:93:8b:e2:
9c:5d:59:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:47:37 2026 by rpki-client