Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
File: J0PbfuNKwtTtV49JXgCWy5iv9xw.mft (raw, json)
Hash identifier: WMiE2+DajiQWyYtDpSUrrYAW3opGQyNssn02yMyOA8g=
Subject key identifier: 57:6E:4E:87:A7:A6:C9:CD:48:C3:52:2A:51:14:32:99:ED:5A:0A:75
Authority key identifier: 27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C
Certificate issuer: /CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
Certificate serial: 019D2884A0261EC890EC5370042C343E640F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
Manifest number: 03D2
Signing time: Thu 26 Mar 2026 05:01:13 +0000
Manifest this update: Thu 26 Mar 2026 05:01:13 +0000
Manifest next update: Fri 27 Mar 2026 05:01:13 +0000
Files and hashes: 1: FSCr9rK0vEudDS9_bQ3O-hGkqrk.roa (hash: ddVmg0mXECaptmy2zncQhSGmVK6AKxm9h3sGTc6VHOM=)
2: J0PbfuNKwtTtV49JXgCWy5iv9xw.crl (hash: 7OvADlZyg7UkBvNZTEygHr1vXG7A/tPqBEX/+4Rk3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:a0:26:1e:c8:90:ec:53:70:04:2c:34:3e:64:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
Validity
Not Before: Mar 26 05:01:13 2026 GMT
Not After : Mar 27 05:01:13 2026 GMT
Subject: CN=576e4e87a7a6c9cd48c3522a51143299ed5a0a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:12:23:bb:ab:3d:33:51:14:f9:8d:ad:3a:f9:
15:ec:19:89:c4:1f:73:01:82:42:2b:63:c9:30:97:
ed:78:34:20:d1:85:0f:9b:08:e2:97:f8:1a:e7:02:
a9:35:71:a3:85:a5:3a:8d:7a:7d:70:6b:55:64:f6:
8c:1a:4d:f6:28:9b:ce:f3:0c:6b:d7:ab:1d:64:a7:
0a:b3:b3:c0:14:a2:20:3b:3c:95:c4:a1:fe:14:2f:
35:b1:0d:6e:77:48:c0:07:41:76:72:f0:c5:2d:c1:
e1:0d:1e:6d:b8:35:3d:2c:02:9d:e9:33:15:22:39:
a5:14:79:60:af:58:91:48:48:ad:39:57:80:71:a8:
a9:6b:bb:fb:ae:37:58:bf:af:9a:2d:5f:a6:ed:ad:
cf:ed:be:02:21:81:41:ac:99:ac:39:7b:54:d3:b1:
e5:95:a9:31:fd:f2:4e:38:1c:95:ce:ec:a0:81:23:
55:3a:d4:00:25:81:6e:fd:a2:ec:eb:e5:ff:c0:6f:
8a:af:55:45:c4:e9:01:fb:cd:0e:a6:51:52:bf:e3:
ce:f4:f7:be:f9:89:f7:9f:d6:5c:9c:b5:e6:fe:a1:
2c:24:e0:4e:3c:c6:d6:3a:12:59:0b:18:e9:1a:e3:
75:b1:73:d5:f8:2d:82:c1:23:ba:48:33:b6:d6:f7:
e0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6E:4E:87:A7:A6:C9:CD:48:C3:52:2A:51:14:32:99:ED:5A:0A:75
X509v3 Authority Key Identifier:
keyid:27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d2:3f:9a:03:d0:23:04:73:4b:7a:a8:c9:de:6a:8c:b4:ea:
d2:38:45:54:23:6c:ed:76:44:59:47:b6:42:bb:44:50:c1:e6:
78:23:4e:9d:0f:fa:c6:c5:2f:8e:c5:3e:e1:12:2d:70:a7:91:
53:d2:46:6a:5d:20:b3:49:b5:0e:f2:b2:b5:bc:03:93:90:51:
5b:34:40:2b:25:3c:49:fa:20:ca:73:51:71:97:3b:05:74:ed:
4d:4e:e9:9a:75:06:d3:95:fb:55:72:24:9f:ee:a7:2d:86:c8:
88:66:89:ec:19:1a:8a:46:3b:17:99:36:4b:41:99:29:41:8e:
79:69:39:47:d5:d6:80:1a:07:c6:b3:07:42:7a:c2:ba:cf:14:
c5:26:dc:6b:56:f0:7c:b2:3a:1b:80:f6:67:7e:49:14:95:75:
9a:39:77:7d:69:1b:48:07:61:42:cc:a6:52:69:8c:bf:94:ad:
60:af:1f:6b:ea:52:71:da:02:c8:b4:39:10:2e:fc:f8:fd:00:
6a:4c:7a:93:b4:69:a0:1f:d5:ed:55:db:e7:bf:43:61:4b:f0:
d8:08:5d:92:37:6f:24:48:1c:c8:0f:28:83:09:e0:fc:d9:d3:
ac:41:fd:b0:99:ea:ec:07:1c:04:21:59:b1:82:bc:aa:c3:eb:
f4:de:aa:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:42 2026 by rpki-client