Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
File: J97R2QxNUraHECO8cSltCKmMTNs.mft (raw, json)
Hash identifier: cO/3Z10xCN0Ls5WvkqMRGAa1d+K1GqOoMrCf8rWyD/Q=
Subject key identifier: A7:01:0C:4B:B7:7C:AB:D8:D9:CE:9E:20:45:05:CE:D2:36:87:39:8F
Authority key identifier: 27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
Certificate issuer: /CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Certificate serial: 01A0DD98288A99696C967BEC8F1A4ED3853B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
Manifest number: 1034
Signing time: Sat 26 Sep 2026 12:02:11 +0000
Manifest this update: Sat 26 Sep 2026 12:02:11 +0000
Manifest next update: Sun 27 Sep 2026 12:02:11 +0000
Files and hashes: 1: 9eN7qSejmD6NfaFbsmt0-Q4AgoA.roa (hash: EthJtYsvDPJskDLNQI0HAM0yvVrJhOQozB0uYpm7BsE=)
2: J97R2QxNUraHECO8cSltCKmMTNs.crl (hash: qt2tLFdeHpfe+fvOUHVIsyl80Dn8pqXuegSlC8AaVxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:98:28:8a:99:69:6c:96:7b:ec:8f:1a:4e:d3:85:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Validity
Not Before: Sep 26 12:02:11 2026 GMT
Not After : Sep 27 12:02:11 2026 GMT
Subject: CN=a7010c4bb77cabd8d9ce9e204505ced23687398f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:ab:83:a9:21:af:4e:e2:b3:4b:15:8d:c2:
c6:2f:b5:7a:81:33:26:f4:6f:3a:64:de:de:01:86:
f8:b3:6f:1d:15:e3:3c:7e:f0:b5:4f:4e:f5:b1:a2:
e5:c8:a3:3d:3f:e9:fa:38:34:53:c8:56:76:d2:04:
c7:ff:46:fe:ce:ec:17:c3:9f:fa:33:dc:df:a2:03:
61:24:3b:42:97:1c:f5:3a:d8:e7:36:0d:93:a0:4b:
2f:b0:c7:6d:d0:ee:a9:6f:b1:b1:a2:a2:0c:57:f3:
5a:b6:18:be:06:5a:93:f8:ce:9f:0c:f2:78:6d:30:
13:1d:89:43:0f:c9:1b:17:8d:5c:8d:b5:9d:5c:ac:
5c:f2:a5:a7:f2:00:ae:e1:95:e1:99:c3:d4:97:5f:
d2:37:89:87:dd:e5:7d:fe:ca:da:21:ce:fb:6d:38:
ba:98:b0:b9:23:28:8b:99:0e:24:f6:30:eb:49:a1:
e0:6b:41:61:e5:b3:85:dc:a7:80:62:08:36:24:96:
5d:f8:3f:46:c0:25:d9:8f:ad:d3:c8:ab:8c:11:13:
9e:85:8a:18:e5:d0:fc:6a:4c:a2:ae:4b:16:e4:5b:
36:c1:04:e2:c3:66:14:6e:34:f3:10:62:4b:14:f4:
f4:42:a6:47:3b:5a:2b:e9:8b:5d:0c:a4:0c:28:c2:
3e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:01:0C:4B:B7:7C:AB:D8:D9:CE:9E:20:45:05:CE:D2:36:87:39:8F
X509v3 Authority Key Identifier:
keyid:27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:33:ad:6a:49:04:7f:1b:23:8c:62:e4:5f:ff:7a:f8:c4:4e:
45:5e:3c:30:86:87:1a:5e:14:02:e1:02:f4:3e:f2:cd:75:ab:
10:f2:6f:dc:53:33:63:9b:2e:fb:dd:d9:4b:9b:b2:8b:82:4b:
9e:1c:ad:ec:e9:52:53:be:37:5d:df:de:6b:5a:1f:36:8c:c2:
d0:56:42:18:a1:4d:a2:4d:ac:5d:04:fe:b9:10:dc:ae:8d:c3:
5a:58:40:52:9c:96:dc:18:92:23:a9:a7:22:e4:f9:6d:9d:40:
29:df:b6:81:d2:2e:a5:01:99:ca:83:52:dd:7c:92:90:31:90:
09:7c:a2:ef:0b:e2:37:c6:32:4a:1a:0a:65:23:97:35:0e:81:
68:48:97:1d:b1:d8:cd:c1:6d:53:01:14:5e:5c:2f:da:90:fc:
b1:9c:43:3f:d7:4b:7b:d3:7a:d9:53:76:cb:69:e6:2a:14:87:
72:52:8e:92:82:d8:25:51:c3:59:14:43:5a:27:6f:77:7a:fe:
be:3b:b1:74:ed:87:d5:0e:11:9f:ee:08:f0:2f:a3:0b:c8:31:
9a:c3:14:6f:af:34:31:3f:29:d3:88:ef:9f:da:25:b9:02:40:
d3:fc:2b:8e:4f:4d:ae:7a:e0:dd:e1:94:0d:6d:f2:74:aa:8a:
6a:fa:ed:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:45:34 2026 by rpki-client