Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
File: J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft (raw, json)
Hash identifier: X3ScY3Fbi8kKl9Hlr93S73GbhSf9YWvdI0xa+leWmLA=
Subject key identifier: 60:56:67:50:01:F7:FB:D2:00:6A:12:EC:7A:2A:BC:F0:D1:49:07:6A
Authority key identifier: 27:D0:28:47:06:04:33:6F:DB:93:08:E5:1B:A5:3E:95:1A:E2:E0:98
Certificate issuer: /CN=27d028470604336fdb9308e51ba53e951ae2e098
Certificate serial: 019D2960A63FEF9D18F91906D3EA9EC4B825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
Manifest number: 0C1D
Signing time: Thu 26 Mar 2026 09:01:32 +0000
Manifest this update: Thu 26 Mar 2026 09:01:32 +0000
Manifest next update: Fri 27 Mar 2026 09:01:32 +0000
Files and hashes: 1: 4rLPq_TgJ9EI_tLb1VhHk45l3x0.roa (hash: hFOozb3KB1jUFC9gVkqUzG9rbgAjo7X66KzDUthY3po=)
2: J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl (hash: Rk5FuOq7RwPS6Ztv6wU46qihrUg9py252CATm224YwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:a6:3f:ef:9d:18:f9:19:06:d3:ea:9e:c4:b8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d028470604336fdb9308e51ba53e951ae2e098
Validity
Not Before: Mar 26 09:01:32 2026 GMT
Not After : Mar 27 09:01:32 2026 GMT
Subject: CN=6056675001f7fbd2006a12ec7a2abcf0d149076a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:be:dd:6b:73:ba:7c:58:70:1b:c8:12:df:2f:
ab:82:47:a4:8c:b5:1c:4d:60:37:ea:85:82:a4:5d:
39:6f:3a:76:f6:96:4c:d8:65:b3:26:82:ce:9a:a6:
2a:04:85:81:1d:59:c9:1d:b4:cf:a5:51:19:98:0b:
3f:f2:cc:54:6f:dc:09:f2:19:1e:cc:0a:54:63:b5:
5c:ce:60:fd:8d:b0:79:1b:8a:42:d3:fd:26:a1:35:
e8:d0:eb:d5:a5:e4:5d:5d:83:81:7f:08:58:af:7f:
a9:45:23:f6:01:8b:5d:17:64:fe:45:e4:c9:fa:b9:
68:78:42:1c:cb:68:9b:33:97:73:a5:dd:f1:72:fd:
d9:e8:5e:7a:80:5d:ca:c2:93:6c:8f:ad:d2:bc:7b:
8f:30:3f:df:7c:44:0d:13:db:2e:43:aa:b0:a9:e8:
d0:a6:9d:98:b7:13:29:86:a4:00:33:65:b8:28:9e:
d2:31:f2:c6:19:86:54:33:2a:1e:94:45:e8:23:0d:
e6:46:ad:90:d5:42:fc:a6:ca:43:2f:6f:2a:bc:94:
df:0e:5d:76:63:b3:c2:72:33:0e:61:97:93:7b:6c:
8e:b5:f4:58:95:22:c8:6b:13:83:d2:43:30:02:c6:
42:f2:1d:9c:37:74:27:62:80:de:be:ca:86:10:dd:
e4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:56:67:50:01:F7:FB:D2:00:6A:12:EC:7A:2A:BC:F0:D1:49:07:6A
X509v3 Authority Key Identifier:
keyid:27:D0:28:47:06:04:33:6F:DB:93:08:E5:1B:A5:3E:95:1A:E2:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:cb:1d:3b:4a:e6:ba:45:70:70:df:b9:29:78:a5:5c:30:c4:
8f:8e:6b:00:81:6a:92:f4:51:97:d5:20:e0:d7:35:4a:36:80:
b7:50:a5:16:4b:56:30:be:12:18:c1:80:2a:61:71:65:6a:51:
92:a8:67:b6:f0:0c:15:c9:5a:04:4f:ea:34:ab:68:d5:e5:ca:
cb:cc:ef:4b:40:40:17:47:22:e1:14:d3:b5:77:f8:ba:1a:cd:
d8:b4:0f:32:31:12:f0:e8:56:0c:01:16:ba:1a:48:e7:2b:74:
37:24:9e:72:09:24:51:52:2d:e7:fd:4f:d2:08:a3:14:55:53:
80:f7:ea:1f:be:b2:c7:7d:94:04:f0:16:0c:aa:fe:53:35:16:
85:57:6d:f0:4a:03:89:8a:1c:50:18:d5:1e:3d:68:73:35:50:
65:f1:10:74:28:b4:4b:16:ec:c5:0f:a1:e5:5e:d7:6a:22:60:
ac:72:a4:8e:89:2d:19:c6:7b:63:1e:43:30:eb:98:f2:9e:b3:
66:b5:48:71:6a:33:86:79:cb:52:6d:38:f4:7d:65:ec:c2:32:
21:b3:24:b7:41:4a:e4:64:41:75:90:a3:79:07:c3:70:d1:6d:
d4:fb:94:38:82:64:8f:6e:11:4c:50:4c:9c:73:7c:1b:dd:86:
ac:fd:d9:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYKY/750Y+RkG0+qexLglMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDAyODQ3MDYwNDMzNmZkYjkzMDhlNTFiYTUzZTk1MWFl
MmUwOTgwHhcNMjYwMzI2MDkwMTMyWhcNMjYwMzI3MDkwMTMyWjAzMTEwLwYDVQQD
Eyg2MDU2Njc1MDAxZjdmYmQyMDA2YTEyZWM3YTJhYmNmMGQxNDkwNzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb7da3O6fFhwG8gS3y+rgkekjLUc
TWA36oWCpF05bzp29pZM2GWzJoLOmqYqBIWBHVnJHbTPpVEZmAs/8sxUb9wJ8hke
zApUY7VczmD9jbB5G4pC0/0moTXo0OvVpeRdXYOBfwhYr3+pRSP2AYtdF2T+ReTJ
+rloeEIcy2ibM5dzpd3xcv3Z6F56gF3KwpNsj63SvHuPMD/ffEQNE9suQ6qwqejQ
pp2YtxMphqQAM2W4KJ7SMfLGGYZUMyoelEXoIw3mRq2Q1UL8pspDL28qvJTfDl12
Y7PCcjMOYZeTe2yOtfRYlSLIaxOD0kMwAsZC8h2cN3QnYoDevsqGEN3kIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBWZ1AB9/vSAGoS7HoqvPDRSQdqMB8GA1UdIwQY
MBaAFCfQKEcGBDNv25MI5RulPpUa4uCYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjlBb1J3WUVNMl9ia3dqbEc2VS1sUnJpNEpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9iMzgwNWYtYmU2Zi00MTMzLWI1ZWMt
YTRlYmJmZTcxMGMzLzEvSjlBb1J3WUVNMl9ia3dqbEc2VS1sUnJpNEpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9iMzgwNWYtYmU2Zi00MTMzLWI1ZWMtYTRlYmJmZTcxMGMz
LzEvSjlBb1J3WUVNMl9ia3dqbEc2VS1sUnJpNEpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMsdO0rm
ukVwcN+5KXilXDDEj45rAIFqkvRRl9Ug4Nc1SjaAt1ClFktWML4SGMGAKmFxZWpR
kqhntvAMFclaBE/qNKto1eXKy8zvS0BAF0ci4RTTtXf4uhrN2LQPMjES8OhWDAEW
uhpI5yt0NySecgkkUVIt5/1P0gijFFVTgPfqH76yx32UBPAWDKr+UzUWhVdt8EoD
iYocUBjVHj1oczVQZfEQdCi0SxbsxQ+h5V7XaiJgrHKkjoktGcZ7Yx5DMOuY8p6z
ZrVIcWozhnnLUm049H1l7MIyIbMkt0FK5GRBdZCjeQfDcNFt1PuUOIJkj24RTFBM
nHN8G92GrP3Z4A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:42:33 2026 by rpki-client