Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
File: J90kebrctAokpDax7cw2HD-mKvs.mft (raw, json)
Hash identifier: 6KQI0wUyaULbxWfPF0B5PRKTYgjGf01zc593fDM0JR0=
Subject key identifier: C4:4B:F4:BF:01:8A:BE:19:39:1F:09:F2:F8:8D:79:24:57:B6:38:6F
Authority key identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
Certificate issuer: /CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Certificate serial: 019D269683BCA79041FBBB0F84583DB11599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 20:01:31 +0000
Manifest this update: Wed 25 Mar 2026 20:01:31 +0000
Manifest next update: Thu 26 Mar 2026 20:01:31 +0000
Files and hashes: 1: J90kebrctAokpDax7cw2HD-mKvs.crl (hash: djRj3WH9tUzWmjQHPUqy4RuviNDwvEAivY4PI3TIkTE=)
2: gZ_db6GfXmBOp4kcCy-i3uexrlk.roa (hash: ThO+Sk/jrlZwpr+FgeFErC3/Gl+3M/mev1BE/Xmuy2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:83:bc:a7:90:41:fb:bb:0f:84:58:3d:b1:15:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Validity
Not Before: Mar 25 20:01:31 2026 GMT
Not After : Mar 26 20:01:31 2026 GMT
Subject: CN=c44bf4bf018abe19391f09f2f88d792457b6386f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:21:97:a6:a1:16:36:55:bf:a5:e1:f7:c6:ab:
ae:b5:5f:41:56:1b:83:da:3c:86:36:98:26:bf:88:
c9:b4:83:bb:ca:b2:78:14:30:3c:57:89:90:ed:98:
d8:69:1c:19:13:45:21:94:01:40:83:da:08:d8:8e:
1b:0b:64:f0:ba:4b:7a:a4:09:1f:17:26:a8:2e:e2:
a8:13:19:c3:c0:ee:dd:97:cf:52:2a:2c:78:b6:08:
f3:78:b3:bd:86:f2:5e:ba:a7:01:4a:00:35:4d:a9:
5a:08:91:7c:82:e7:c3:fc:de:c2:4f:01:ee:96:9c:
63:8e:bb:ee:ff:c2:2d:06:0c:fd:4c:1e:30:bf:de:
5e:2a:78:99:b1:71:d6:39:05:e4:1c:e3:98:4f:17:
5a:29:99:f0:e5:13:0f:52:d7:af:89:3a:1c:5c:4c:
29:87:6c:24:d3:49:f5:01:20:d5:7e:02:0e:2f:09:
dc:86:b9:41:59:6a:63:98:65:d8:1d:6a:d2:1a:29:
8e:9a:32:a5:94:42:2e:18:d5:f5:35:0c:79:dc:07:
3c:6f:aa:e7:1a:fe:7e:1a:d5:5f:dc:e3:f2:1d:0f:
8f:85:2b:6b:45:67:54:09:1c:8f:ba:5d:06:b2:44:
84:95:32:c0:69:95:79:a2:8c:e7:f7:65:3a:ea:1a:
c2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4B:F4:BF:01:8A:BE:19:39:1F:09:F2:F8:8D:79:24:57:B6:38:6F
X509v3 Authority Key Identifier:
keyid:27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9d:55:31:da:d3:22:c3:4a:2c:e2:47:e6:7f:5e:72:f5:33:
87:d9:3b:dc:d8:60:6b:93:82:25:4f:3a:7b:3f:5f:98:6b:f3:
ee:1c:46:bb:b0:55:ef:f3:98:e5:91:af:47:b8:25:17:1a:30:
8c:00:20:cf:58:96:b8:63:21:42:10:25:e1:52:a5:4c:f0:9e:
ed:4c:50:f7:f9:7d:33:a9:99:f8:38:cf:8e:f8:bf:84:c3:85:
42:14:17:5d:2c:e1:d6:03:60:95:6d:76:7a:ca:eb:a6:08:f3:
f9:14:b8:0f:48:3a:35:60:8f:9b:75:29:03:58:95:be:27:54:
d2:86:cc:4f:f9:1f:28:66:b3:18:67:95:ea:7b:92:db:7b:c6:
51:e0:01:b8:a1:d9:b6:4a:32:99:b2:2e:0a:c9:b3:cc:16:e8:
a4:69:ca:80:9a:97:28:24:98:16:1e:2a:d2:e6:e9:fe:b1:2e:
3f:57:c9:f7:f9:76:b5:34:f6:26:43:16:dc:b0:76:b0:7f:82:
07:42:a4:1d:99:2c:66:95:0a:6c:ca:35:3e:98:94:8c:39:e0:
36:2e:11:3a:91:c0:77:3a:25:69:d2:5c:11:40:a8:38:64:da:
ab:f1:c9:c8:6e:b8:85:8e:9b:ab:22:fe:f1:f8:cd:4a:fe:c7:
66:b4:18:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:33 2026 by rpki-client