Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
File: J90kebrctAokpDax7cw2HD-mKvs.mft (raw, json)
Hash identifier: DbZ6LYZcP8Wk1EYR5CjvmgEDy9e235DXKrEOQK6S7BY=
Subject key identifier: 56:30:7C:4D:82:25:D5:3D:85:8E:9D:D4:54:B0:AF:3A:7D:F9:61:1A
Authority key identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
Certificate issuer: /CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Certificate serial: 019E1FB5C22ACBF27F0FEDFBBCB2AE8BBACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 05:01:05 +0000
Manifest this update: Wed 13 May 2026 05:01:05 +0000
Manifest next update: Thu 14 May 2026 05:01:05 +0000
Files and hashes: 1: J90kebrctAokpDax7cw2HD-mKvs.crl (hash: Yq1ZO3B+Ct6xSykdBJBoCyWbV7F19WLmjvue9OI0Cxs=)
2: gZ_db6GfXmBOp4kcCy-i3uexrlk.roa (hash: ThO+Sk/jrlZwpr+FgeFErC3/Gl+3M/mev1BE/Xmuy2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:c2:2a:cb:f2:7f:0f:ed:fb:bc:b2:ae:8b:ba:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Validity
Not Before: May 13 05:01:05 2026 GMT
Not After : May 14 05:01:05 2026 GMT
Subject: CN=56307c4d8225d53d858e9dd454b0af3a7df9611a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:85:da:22:ff:19:ff:2b:44:54:d1:7a:69:db:
62:d1:85:83:2d:99:6d:88:73:bb:9f:ee:26:01:f2:
82:c0:3b:92:3e:d0:6d:60:06:a6:3a:1a:ec:02:b9:
73:df:33:4a:40:b7:cc:bd:38:58:a9:92:34:94:1b:
cd:34:8c:9a:75:6f:df:a5:6b:7b:58:d7:91:b7:bd:
56:c9:ee:1e:d2:8b:36:0c:d3:2e:18:b8:b6:54:56:
e4:c6:ad:20:b4:fe:0d:59:ca:9c:e4:50:bd:d0:bd:
c1:80:f2:1f:c3:1d:8d:5a:92:a9:c8:fa:29:73:3a:
d1:6f:16:d3:49:58:27:ed:6a:c2:b4:c5:6a:bd:ae:
6f:bf:1f:f6:ec:61:70:1f:39:f8:e2:08:10:83:05:
53:00:9f:ac:8a:95:ad:4d:fa:2b:ea:2a:59:32:00:
31:3f:eb:d8:df:1a:03:a1:0b:b9:b7:ca:09:bd:d0:
e7:ec:41:91:50:9b:db:88:cf:77:2c:e2:3d:64:4c:
74:1a:a1:49:f2:9c:84:04:aa:0d:49:9d:0e:d1:c5:
bd:1f:85:ff:41:f7:96:ca:09:47:4e:82:82:18:62:
83:0a:b3:65:77:5b:70:3e:34:66:8f:f5:59:c4:a3:
9e:7f:b8:40:fc:1d:9f:34:97:1e:90:dc:fd:d9:78:
0d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:30:7C:4D:82:25:D5:3D:85:8E:9D:D4:54:B0:AF:3A:7D:F9:61:1A
X509v3 Authority Key Identifier:
keyid:27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:dd:7d:31:50:f1:b3:ab:df:fb:06:47:5d:a2:3e:0c:7d:1c:
1e:93:7d:d4:ff:6c:89:00:fc:04:09:4c:a7:d5:55:e4:f4:11:
fa:37:d6:b2:01:e0:ca:1f:a3:8c:9a:8d:99:82:df:44:40:2f:
dc:ee:a8:05:d9:88:2e:63:be:f2:b8:3d:5a:34:2e:4f:08:f6:
1f:d7:02:7c:af:bf:9f:c4:6d:43:84:60:df:cc:e4:fb:ab:cc:
01:8e:2b:7b:dd:be:69:6d:7f:95:69:cc:05:42:d0:de:51:e5:
c3:47:e8:b6:af:0a:fb:a4:6f:c9:50:a3:46:88:7d:fc:94:ea:
3a:5e:5d:9c:52:5a:52:fa:b4:32:c3:08:8f:f9:c4:0e:c4:85:
64:3a:dd:24:23:d2:99:68:d4:f5:b7:12:b9:1a:e8:cf:0b:c2:
cb:3e:bb:51:a2:e6:2f:ee:b4:88:b4:ce:c1:cc:3b:66:36:54:
35:5b:b8:56:41:02:6a:b6:5c:34:23:f7:78:58:25:57:a3:e3:
22:6f:18:6c:f7:f5:b8:d2:50:4f:67:b4:2b:aa:1e:42:22:00:
dc:82:1a:ce:25:33:93:ab:15:37:73:ef:68:4f:d4:5c:4b:74:
2a:01:e8:26:9c:b9:e9:77:60:d3:7a:61:9b:9d:5d:fc:2b:4e:
74:c2:47:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:03 2026 by rpki-client