Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
File: J97R2QxNUraHECO8cSltCKmMTNs.mft (raw, json)
Hash identifier: zwW4pXD8O3KyRvggiTth1U/8E115+NUvOcMYaffmbzE=
Subject key identifier: 82:73:AB:2F:AF:B8:17:6F:A4:EC:12:85:98:D7:EB:4D:CA:A9:97:38
Authority key identifier: 27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
Certificate issuer: /CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Certificate serial: 019D2771E7399B2D1588E1CA612A7A77A263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
Manifest number: 0E48
Signing time: Thu 26 Mar 2026 00:01:09 +0000
Manifest this update: Thu 26 Mar 2026 00:01:09 +0000
Manifest next update: Fri 27 Mar 2026 00:01:09 +0000
Files and hashes: 1: 9eN7qSejmD6NfaFbsmt0-Q4AgoA.roa (hash: EthJtYsvDPJskDLNQI0HAM0yvVrJhOQozB0uYpm7BsE=)
2: J97R2QxNUraHECO8cSltCKmMTNs.crl (hash: BC449i5Yz5iaQ08yl2Sx7ya42A/dwbZhS532egiPD/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:e7:39:9b:2d:15:88:e1:ca:61:2a:7a:77:a2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Validity
Not Before: Mar 26 00:01:09 2026 GMT
Not After : Mar 27 00:01:09 2026 GMT
Subject: CN=8273ab2fafb8176fa4ec128598d7eb4dcaa99738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:38:aa:98:99:70:74:8b:5d:53:58:4c:37:19:
d3:4a:a2:60:d0:69:3f:94:9b:26:d0:f4:ca:f4:63:
b0:93:a1:65:e6:72:87:08:4c:56:e0:6a:52:9e:17:
2e:c3:1f:7d:05:c8:d7:93:dc:ec:b5:54:22:63:03:
f5:47:6c:9a:25:5b:84:8c:ce:e9:33:22:7a:63:b2:
fa:61:ae:e2:d6:f5:14:ec:c0:95:92:6b:79:ad:6f:
f8:98:a9:e4:d3:d7:06:2d:27:03:12:4d:15:a6:0f:
44:0c:b4:e7:76:f4:31:64:34:79:8c:bd:09:f0:24:
86:6b:20:97:4a:10:3f:f5:5b:3d:ad:80:27:26:cd:
ad:ba:5c:1b:1f:d5:ff:e8:00:c7:56:a6:2a:c7:92:
b9:1e:33:0e:ab:af:97:fc:e9:a4:84:8b:7f:9d:16:
30:fe:86:22:0c:d3:3c:df:29:c5:f3:32:5c:12:85:
65:e0:4e:1e:70:f3:aa:ce:67:3f:41:f2:34:45:82:
eb:0a:aa:3b:07:73:17:a8:4a:b0:39:af:69:2f:f0:
c5:22:67:80:f8:b0:7a:9b:26:6d:c9:89:63:7e:43:
4e:d4:3e:a6:f4:30:f4:e6:95:7a:8b:00:fb:c0:e4:
4e:20:1d:d2:f9:58:33:e2:76:ae:c1:aa:4a:65:ca:
89:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:73:AB:2F:AF:B8:17:6F:A4:EC:12:85:98:D7:EB:4D:CA:A9:97:38
X509v3 Authority Key Identifier:
keyid:27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:02:cf:29:2e:74:f2:54:4b:95:ed:94:1d:62:5e:4d:0f:26:
c5:d0:03:97:51:88:01:cd:15:7f:b0:93:ad:7c:96:2a:46:a9:
26:1a:1e:7e:f0:f1:4d:35:c9:3c:ac:71:26:31:21:ab:62:63:
6c:f3:e6:bd:a5:e4:1b:fc:a6:12:04:af:42:44:1d:9a:f1:dd:
f0:76:c5:c3:eb:49:1b:de:0c:fc:c9:57:e5:99:10:55:9c:f0:
89:7a:ae:8d:82:a5:94:47:cf:60:15:4d:22:47:d9:27:dc:06:
c0:ec:d0:23:a2:b6:cb:2e:3c:15:f6:d5:62:09:16:53:f8:c0:
64:18:b4:24:81:f5:f7:c6:d3:9f:f7:c8:a7:46:af:0c:33:b2:
83:cc:24:43:b5:d1:7e:25:b4:41:e8:b5:9c:d5:0e:c9:4c:0c:
2e:5f:53:47:14:ca:4c:4d:85:02:d9:c9:92:2d:99:7f:be:ab:
4a:ca:90:34:64:70:8b:5a:34:9d:69:08:68:c4:72:ac:ee:51:
cd:de:bb:63:27:a9:ab:2f:82:ed:37:e4:1b:8d:1c:86:e3:81:
b8:ae:a0:27:af:d2:5d:e5:dc:de:a4:65:4e:8a:82:b4:18:08:
84:1c:9a:d1:a7:86:b3:7d:53:3f:9f:70:36:96:b3:9d:ed:19:
e2:b2:fe:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:23:55 2026 by rpki-client