Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
File: J90kebrctAokpDax7cw2HD-mKvs.mft (raw, json)
Hash identifier: +lAvwGhm62uKwanmMye7e/QOyW/9FyGLxhT3V1amTYY=
Subject key identifier: EA:5E:16:4D:C8:84:08:43:C7:7D:6E:08:CA:12:56:2A:CB:7C:76:14
Authority key identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
Certificate issuer: /CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Certificate serial: 01A0E098F582F2D919D9A36E5986C8745E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
Manifest number: 1A76
Signing time: Sun 27 Sep 2026 02:01:55 +0000
Manifest this update: Sun 27 Sep 2026 02:01:55 +0000
Manifest next update: Mon 28 Sep 2026 02:01:55 +0000
Files and hashes: 1: J90kebrctAokpDax7cw2HD-mKvs.crl (hash: Ei3noH6otBaCY1MYdj04a3Mx5bY7wPjnmUQhnrNQs8s=)
2: gZ_db6GfXmBOp4kcCy-i3uexrlk.roa (hash: ThO+Sk/jrlZwpr+FgeFErC3/Gl+3M/mev1BE/Xmuy2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:f5:82:f2:d9:19:d9:a3:6e:59:86:c8:74:5e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Validity
Not Before: Sep 27 02:01:55 2026 GMT
Not After : Sep 28 02:01:55 2026 GMT
Subject: CN=ea5e164dc8840843c77d6e08ca12562acb7c7614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:22:0a:9c:99:66:5c:f2:61:29:08:59:f5:
09:7a:2d:8b:de:39:c7:93:e7:78:6a:c6:43:80:94:
15:ee:a6:d1:01:63:34:db:ba:ed:83:86:71:41:94:
cb:6d:6d:0f:a5:52:00:d9:53:14:d8:6f:1a:4b:28:
fb:80:a2:e7:11:18:e5:48:1c:64:0a:de:96:13:fb:
40:7e:03:d0:16:a2:2d:e9:eb:b0:7b:e8:ab:aa:7b:
a6:90:4d:21:10:69:12:76:da:94:78:a5:44:d3:2c:
7e:33:20:44:5c:5e:87:95:42:7c:75:6b:1e:71:b3:
31:6e:c9:10:ef:4f:22:40:2a:b6:a0:b3:2c:27:b4:
fb:7b:4f:26:ae:7d:a4:4b:a7:c6:0f:3b:fa:c7:6c:
dc:72:44:ab:37:47:0a:18:66:08:d5:8e:6c:03:f3:
c5:e6:88:28:63:ca:59:de:b9:b2:81:24:93:26:3b:
83:8e:0e:09:aa:e9:9d:99:09:ae:ba:10:73:03:19:
f7:f9:ee:b8:e0:8c:86:85:21:48:53:b4:8e:76:1e:
38:18:d0:62:44:ab:7f:7f:18:6d:ea:18:1e:78:e3:
8f:d7:e1:65:cf:fb:83:b0:7c:d9:fe:91:fb:97:1b:
20:0d:7a:17:39:a5:95:30:b3:66:36:8e:bd:b8:19:
4a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5E:16:4D:C8:84:08:43:C7:7D:6E:08:CA:12:56:2A:CB:7C:76:14
X509v3 Authority Key Identifier:
keyid:27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b3:3b:3d:07:76:f2:df:3c:72:42:e9:c2:0d:81:e1:cc:f6:
08:d2:6a:87:80:92:60:87:a8:c3:9a:f0:77:86:fb:92:e0:31:
08:86:0c:b1:6b:2e:65:a5:3c:09:eb:ca:37:ef:02:f6:07:23:
92:c5:75:83:c4:3c:67:8a:51:63:52:ae:5a:48:f0:79:40:ad:
b1:50:0b:a6:4c:08:d5:af:56:67:04:e2:b2:4f:41:df:6d:b3:
a0:54:fe:11:8a:75:61:50:e6:dc:ff:d7:d1:bd:ca:c2:af:ff:
fe:1e:23:56:ae:0c:73:e2:2b:67:e8:6f:6f:f9:e5:18:7c:b8:
b8:ac:a6:5a:99:ac:9b:e7:be:0b:d7:4f:bf:46:4a:2a:1a:54:
47:69:58:fa:22:3d:bf:c4:99:29:49:83:a8:56:48:c2:d2:39:
86:73:38:8c:1e:8e:b4:5f:b3:f0:7e:2d:91:6b:c0:b7:c3:e1:
7d:64:fd:c2:4f:7f:93:7d:7f:f7:4b:93:d1:12:da:0f:04:6e:
b1:cb:9d:59:cb:e3:1a:dd:e2:54:f3:e5:aa:9b:76:45:51:1c:
3f:be:90:07:58:36:58:97:19:0f:02:d8:29:66:31:ca:93:63:
91:c9:9f:7a:2e:62:0a:41:e7:81:ed:6b:3d:b6:b2:b1:e2:b6:
49:66:3a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:11:39 2026 by rpki-client