Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
File: J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft (raw, json)
Hash identifier: gb5VrkkaaWZ3VkLc92FyjNWCFmGQ04m7yUZymB/SaK4=
Subject key identifier: 23:E6:C0:95:B3:B2:55:A8:DC:E7:61:22:35:0F:D5:E4:5B:43:25:0F
Authority key identifier: 27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0
Certificate issuer: /CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0
Certificate serial: 019D296182391290F9647530ABC5DB9F85B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
Manifest number: 0434
Signing time: Thu 26 Mar 2026 09:02:29 +0000
Manifest this update: Thu 26 Mar 2026 09:02:29 +0000
Manifest next update: Fri 27 Mar 2026 09:02:29 +0000
Files and hashes: 1: 93ujOdlhvkLDrlQTo0WR0HGkUOA.roa (hash: CSiF98tZ8HUGXFu9Nj6Ewi7SDw/vSSQkj6eyMK8B53I=)
2: J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl (hash: vWAU9dlOjSEYv+//zoeEY991kWcs4yB20dFK2mqIq+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:82:39:12:90:f9:64:75:30:ab:c5:db:9f:85:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0
Validity
Not Before: Mar 26 09:02:29 2026 GMT
Not After : Mar 27 09:02:29 2026 GMT
Subject: CN=23e6c095b3b255a8dce76122350fd5e45b43250f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fb:77:19:c4:26:a8:41:00:38:53:f8:24:87:
e9:e9:03:7a:32:f7:6a:b0:27:b9:42:27:eb:1c:57:
3c:a8:a4:3c:87:14:dc:4a:b0:12:73:57:0c:6b:3a:
9b:61:4a:1c:91:cb:51:4e:34:7a:8a:f0:0b:39:cf:
50:0f:c5:3e:3b:d9:90:15:6d:8b:27:b6:be:67:a9:
f7:c2:43:f2:55:7f:a8:7e:47:44:fb:52:09:86:97:
79:5c:33:ba:d3:35:58:db:23:69:a1:7a:dc:d4:79:
d2:30:4a:05:62:de:b2:9f:78:b1:23:19:76:08:13:
eb:3a:56:ec:60:36:7d:3a:cd:60:32:41:c3:5e:18:
23:74:1f:7a:04:b6:4a:03:93:92:e5:8a:b9:24:8c:
72:1c:ee:13:55:0e:2f:6a:a0:1d:c2:0a:93:db:17:
54:38:52:a5:c1:5e:c8:5e:8b:ea:18:c2:bd:c7:31:
7a:c7:d6:ea:78:11:89:4f:1d:06:27:fe:4b:1e:46:
7d:17:e8:fd:fe:88:1c:60:5e:1b:b9:5d:5a:99:c2:
17:15:02:0a:f0:5d:a3:39:77:d7:64:08:d9:73:c3:
05:5c:65:76:92:8b:28:12:9f:51:9e:3c:b2:ce:62:
56:10:48:55:bf:b8:24:c2:6b:c2:18:b3:75:76:b6:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E6:C0:95:B3:B2:55:A8:DC:E7:61:22:35:0F:D5:E4:5B:43:25:0F
X509v3 Authority Key Identifier:
keyid:27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:69:21:be:c1:ea:04:f5:e3:de:37:4e:4e:a5:8b:bc:4f:16:
5a:04:c9:74:bf:a0:a3:4a:56:5a:00:9b:9c:a0:f7:67:a8:94:
9b:a3:ac:8e:c0:79:8e:ef:ce:11:ef:65:e9:45:07:8f:c9:27:
5b:08:63:4f:c6:80:66:78:86:a6:da:81:eb:7c:ed:a9:1a:99:
7b:69:4b:57:df:b6:fc:89:a3:a2:83:80:42:2b:5e:37:b9:d2:
53:2f:ba:6c:78:ac:92:89:ca:f9:98:3c:de:3a:7d:af:21:23:
02:70:c9:a6:e5:dd:10:79:9d:ae:62:4d:85:58:a9:45:d8:3a:
53:71:88:a3:69:54:c0:08:d5:89:7b:8f:67:ce:44:a8:97:7b:
91:9c:5b:f1:d3:15:01:70:78:91:a0:fb:92:ee:9f:13:3c:32:
b8:a7:11:17:c8:ff:e2:4f:9d:4a:70:61:74:72:65:ef:f8:7c:
f1:a4:04:5d:4f:e1:6f:04:c4:ae:83:f1:93:b6:59:24:60:b6:
eb:04:d7:55:36:44:4d:1b:01:4d:89:ac:60:c7:62:77:86:84:
ee:32:e8:88:84:9a:04:24:dd:32:eb:8a:18:3f:f4:80:b0:e1:
17:fd:32:94:36:de:c6:e3:e2:8d:59:94:44:1c:66:19:71:3f:
a5:f3:35:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:28:32 2026 by rpki-client