Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
File: J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft (raw, json)
Hash identifier: 18afOJ7F6ZNRkooyQo0QZNRtS/K+Xu3l6OEpuZc52SQ=
Subject key identifier: 48:88:36:68:48:95:7F:74:BF:52:15:EC:30:E0:E4:B0:E4:E2:74:34
Authority key identifier: 27:E3:67:D8:DE:CF:7D:62:6E:54:78:0F:80:E5:73:60:D2:C0:78:CD
Certificate issuer: /CN=27e367d8decf7d626e54780f80e57360d2c078cd
Certificate serial: 019D25F1C08B2D39DE13C06B3DD6F7B4C2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
Manifest number: 0F71
Signing time: Wed 25 Mar 2026 17:01:33 +0000
Manifest this update: Wed 25 Mar 2026 17:01:33 +0000
Manifest next update: Thu 26 Mar 2026 17:01:33 +0000
Files and hashes: 1: 1fpQlBlZNTYlkF-qEKj33K1FJqM.roa (hash: S56U8pRP1AVtpcAW66WhCd3vXonP456VUW1c22wHBzM=)
2: J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl (hash: TFYuN03Sf9ZDYZdq+Hw0TxJVeDvoC4MNKkYmKowhZXU=)
3: Y4zsoHDrVMPcu-R8PV2UYMlFVJs.roa (hash: /HK4f/kDKpNIzHK5rblbzw+upNbRr54CVkE3fI0aAtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:c0:8b:2d:39:de:13:c0:6b:3d:d6:f7:b4:c2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e367d8decf7d626e54780f80e57360d2c078cd
Validity
Not Before: Mar 25 17:01:33 2026 GMT
Not After : Mar 26 17:01:33 2026 GMT
Subject: CN=4888366848957f74bf5215ec30e0e4b0e4e27434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d3:d2:44:9b:db:b5:37:b0:81:de:10:c4:18:
07:1b:b9:cc:9e:6a:b8:15:7a:d2:58:97:cc:3d:4d:
d9:c5:64:00:b7:9b:26:4b:b1:4c:c0:e1:6d:98:e8:
2a:d8:fa:79:cf:a0:ba:ef:85:88:dd:53:be:46:a6:
23:f4:f9:5b:b4:06:f5:60:7c:84:0d:41:7d:5e:b9:
e6:70:80:32:bc:26:e0:2a:a2:9d:a7:18:86:1e:4c:
03:bc:b5:f0:af:dc:ca:b9:11:06:b1:60:2d:c1:21:
4c:d9:9b:a0:d6:b5:d9:0c:d3:c0:81:26:97:3d:af:
b0:52:38:34:62:a1:08:8f:9b:a4:8d:ec:b4:62:ff:
f4:07:e1:ac:41:24:38:da:de:85:7a:98:1c:39:42:
17:77:85:f9:e1:76:f9:61:f5:cd:5a:95:66:cc:72:
9c:f3:0e:24:6f:e2:14:4d:9b:66:ac:eb:50:57:09:
6d:5e:37:2d:8f:4c:b3:a8:1e:b5:38:01:95:71:06:
10:93:6b:c0:80:73:19:cf:34:86:00:97:54:84:81:
9b:84:b3:61:20:c2:cc:ff:3c:c2:60:63:19:1d:2e:
0c:0d:62:c8:dc:22:b2:d3:b0:82:c6:d8:ea:31:da:
b6:29:0a:e5:c0:90:4a:c6:4a:5d:2c:0d:30:7a:3a:
e1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:88:36:68:48:95:7F:74:BF:52:15:EC:30:E0:E4:B0:E4:E2:74:34
X509v3 Authority Key Identifier:
keyid:27:E3:67:D8:DE:CF:7D:62:6E:54:78:0F:80:E5:73:60:D2:C0:78:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8d:3b:69:7e:65:ce:6d:2f:6f:2a:96:67:e0:d5:c0:3f:6f:
13:b5:bd:94:89:01:6f:e1:93:12:95:6c:0a:4c:ab:90:21:7c:
cd:50:e3:f7:54:3b:70:98:85:e0:ea:2a:d3:01:8e:66:ab:f5:
8f:50:d3:d8:bc:07:f0:17:52:18:14:11:21:9e:bf:bc:b3:b5:
21:81:10:74:4b:93:c1:ce:a4:f1:46:28:7a:b9:4d:78:a6:2b:
ee:cc:9a:91:33:a6:02:f9:9e:47:70:01:2c:7d:9f:a4:f5:d7:
52:d1:40:d7:10:fe:18:6b:a1:ef:4b:24:4e:9a:e9:f0:14:c8:
e0:31:a6:ff:0f:36:5f:d5:65:5c:1f:b1:2f:4f:6c:b4:3a:0a:
b7:46:bd:1a:32:2d:41:40:89:5f:1f:9d:47:25:e9:56:57:98:
46:9e:e3:91:c5:7e:82:ec:67:a6:98:36:4f:ed:e1:a3:aa:ac:
0d:13:c7:d3:b7:75:b0:93:06:8a:7b:1e:cb:ca:ee:ae:87:3d:
c3:a5:f4:00:83:af:68:d4:36:f2:91:e7:24:e0:ac:df:c9:11:
f0:7e:da:02:f8:b8:06:60:d8:b3:a6:db:0f:2d:c9:9c:6d:86:
11:8e:87:2b:de:e9:03:44:d9:e2:77:30:6f:ff:2e:23:75:77:
48:b7:a7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:50 2026 by rpki-client