Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
File: J98EKCQnP8_z8JPQ-bHexpYLrmo.mft (raw, json)
Hash identifier: jGczIJ+68DwI9/nSJGiXEQmBY69XxMoX+nyHJx/G+vM=
Subject key identifier: 3D:83:0C:AA:D3:09:1B:87:D8:DD:E2:CF:EF:BA:3C:D1:3C:ED:6B:61
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Certificate issuer: /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial: 01A0CFDB1AFA47934701C93B49717BC07FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
Manifest number: 1A74
Signing time: Wed 23 Sep 2026 20:00:38 +0000
Manifest this update: Wed 23 Sep 2026 20:00:38 +0000
Manifest next update: Thu 24 Sep 2026 20:00:38 +0000
Files and hashes: 1: 1-eXk56W1WcQXJBaon4jYvPO5XKk.asa (hash: 4kMcrktNRWgxl6BULeDgtu/gbF/92oPuNyR3Tirvwvs=)
2: 1KQsz8EMeMqO7bc9e9NUCyualHA.asa (hash: K+ABwTOia6am6qcpzwES7lTBokcCgw4GgL9iAZqzKrs=)
3: EaAMsvwoHBe4yq1jbHkVSMOCcms.roa (hash: tCewwDnNFA4yqzd0eb5IKas5uAfl5Rr1tmwDJ4VUURI=)
4: J98EKCQnP8_z8JPQ-bHexpYLrmo.crl (hash: GBZMv4yEZ7AqfuhSZBdOIVW5PSLa9Q0HlOMh+QIoXn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:1a:fa:47:93:47:01:c9:3b:49:71:7b:c0:7f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Validity
Not Before: Sep 23 20:00:38 2026 GMT
Not After : Sep 24 20:00:38 2026 GMT
Subject: CN=3d830caad3091b87d8dde2cfefba3cd13ced6b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:72:44:b3:a7:54:41:79:4d:68:8f:bf:54:7f:
f4:d5:87:1a:15:43:ba:a2:f6:61:2a:44:d6:33:81:
d7:4f:c7:ae:85:e1:01:d4:5e:68:23:f1:85:08:52:
73:55:74:e4:64:b6:ec:51:a2:95:69:4f:fc:ee:8b:
59:c9:85:46:0f:d9:fb:19:d9:3b:f5:87:d9:47:51:
c5:e9:8e:de:ce:be:52:6b:e5:62:17:c9:db:9c:c1:
02:50:3d:b7:27:94:a3:33:39:32:fc:49:1a:88:a7:
ea:46:e9:20:48:1c:1d:25:4c:49:dc:a9:13:2c:cd:
5a:bc:57:0d:b5:a5:e3:99:6d:65:7b:c4:e4:17:fd:
47:bd:20:a3:44:cf:03:aa:d4:20:c4:fc:31:76:ef:
5e:f1:41:1f:a6:9b:56:88:56:f7:38:60:27:85:51:
a6:82:28:da:21:49:e5:a9:bd:75:21:f8:96:4f:0e:
68:f6:2b:64:45:6f:95:6d:dd:f6:1c:da:5a:e2:88:
44:5e:d9:83:ca:2d:11:fd:91:a5:d7:c5:b3:e3:25:
61:29:92:a2:7c:3b:6d:47:bc:ed:9e:44:ff:b2:8d:
dd:b5:8c:c9:c5:12:b3:05:03:43:fa:31:62:3d:a5:
52:21:cb:f5:2f:f7:31:90:15:38:de:a2:d9:f2:ae:
17:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:83:0C:AA:D3:09:1B:87:D8:DD:E2:CF:EF:BA:3C:D1:3C:ED:6B:61
X509v3 Authority Key Identifier:
keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ec:f5:84:2d:d3:dd:04:7a:83:23:a1:be:4e:a8:84:21:69:
8a:bc:25:57:54:73:6b:03:9f:62:2e:b5:70:59:74:f4:c9:f4:
98:af:04:17:b2:11:68:e5:1b:50:56:6a:92:a3:98:65:dc:ae:
3b:e8:e8:e6:6f:6f:c0:f4:8a:0b:f0:5f:87:8c:5c:7c:b0:e7:
a0:e7:95:17:f3:ca:88:61:cb:23:c3:16:f9:fc:6e:e5:0b:b1:
08:39:b8:5a:93:0b:87:4e:dd:a1:dc:d2:e6:e8:02:2e:20:38:
1f:8b:76:37:43:5c:b9:f4:2e:3b:2d:fe:8a:f6:7e:b4:77:1d:
65:4c:66:fb:ae:78:9c:48:90:f4:6b:0e:01:88:18:d0:54:80:
95:50:1a:2f:ea:fb:09:2c:25:2a:c1:d0:2e:50:87:29:e0:38:
fc:06:88:aa:d9:1a:84:dd:bc:2f:ac:f0:d9:26:83:29:ed:e6:
52:c9:f1:90:5b:3f:91:b1:5d:50:ee:22:32:c7:d3:5c:df:37:
8c:a2:ca:1a:10:72:9b:52:34:b9:f8:b7:31:cb:85:50:3d:1a:
7d:a8:68:f0:53:84:ca:f2:90:0d:b6:f3:7e:21:df:f9:7c:c4:
59:15:b2:45:24:d9:23:ad:a6:bc:fb:55:2d:28:bf:b5:9f:00:
94:fc:5c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:09:40 2026 by rpki-client