Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
File: J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft (raw, json)
Hash identifier: dr4IlxEiEEd5hQBgeysSilbHSQXpyUcj45jyMQ/V7ZQ=
Subject key identifier: FE:EA:13:AF:DD:1B:CA:F2:5B:76:0A:B9:97:39:12:4F:E0:AB:70:5A
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial: 019D2A7290D231E155716E85EDD20A668F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
Manifest number: 1595
Signing time: Thu 26 Mar 2026 14:00:44 +0000
Manifest this update: Thu 26 Mar 2026 14:00:44 +0000
Manifest next update: Fri 27 Mar 2026 14:00:44 +0000
Files and hashes: 1: 9ROo0iC15VlIOvkEDWyQwJOCacY.roa (hash: X5stVJ1ytEh0HyvZJyffab9oO2fx+fQjNKYB1CriIiQ=)
2: J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl (hash: hStIL6mBzysCPUTCC5G6DbIu1ouEg1fo871yqX9CoMU=)
3: nZXVAEhAwzesGngGVae3JHM5UNg.roa (hash: JJvr3kNnqWeUrrnpiI7ivzQbH103rdFaTcpNQ7xPtuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:90:d2:31:e1:55:71:6e:85:ed:d2:0a:66:8f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Validity
Not Before: Mar 26 14:00:44 2026 GMT
Not After : Mar 27 14:00:44 2026 GMT
Subject: CN=feea13afdd1bcaf25b760ab99739124fe0ab705a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:09:18:22:6a:2d:e3:c5:6e:ad:f8:69:7d:85:
11:1d:08:e0:4c:55:58:a4:46:2f:48:3b:dc:03:8e:
67:b6:42:fe:ac:8d:59:93:e4:49:b2:d0:f8:4d:9c:
3f:f8:44:f7:28:99:ea:3b:1b:35:85:34:6d:f1:cd:
d1:aa:fa:b2:66:c4:c1:45:9e:08:06:2a:42:55:48:
91:c3:a2:eb:41:e8:c0:bb:1d:4d:6d:da:63:9d:a7:
d2:8f:45:42:fd:ed:3a:82:fa:38:e3:0c:d0:a2:0b:
86:50:7f:90:0f:2c:dd:6d:e8:e5:7f:82:d8:23:ab:
8b:53:88:c8:c8:f6:2b:50:9f:86:25:8b:97:f2:ff:
9c:1b:40:d2:2f:56:20:cf:1e:1b:2d:53:2a:c1:a2:
c6:83:63:c8:fc:84:d5:44:d9:8f:fe:fd:c2:0d:eb:
7b:22:b4:57:5f:76:08:58:1b:8c:78:85:49:43:79:
20:1e:fb:60:4e:42:b6:62:42:c4:d8:f9:3e:3a:6b:
1a:37:b1:50:c3:ed:8b:90:0e:2c:77:06:f2:c8:46:
eb:09:2f:92:a4:ca:b0:fc:03:95:10:e3:ca:ce:d2:
8e:f7:bc:fe:ea:18:bd:08:62:3a:7e:4d:50:a2:45:
3c:cb:d8:27:c3:3a:e2:bd:fa:d5:b1:eb:31:53:80:
50:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EA:13:AF:DD:1B:CA:F2:5B:76:0A:B9:97:39:12:4F:E0:AB:70:5A
X509v3 Authority Key Identifier:
keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:57:12:b0:20:5c:7b:20:c8:d1:d7:7d:32:a1:8c:e1:ba:ed:
da:e9:f3:4b:56:6f:99:2e:a2:b1:ef:a9:24:f2:01:80:19:68:
c6:3a:c8:10:8a:25:a3:9e:4a:7d:00:ac:b0:7c:be:31:cb:ef:
a1:b3:e3:8d:76:d5:f4:85:27:47:fa:ba:c0:ae:71:ab:f3:0c:
e8:59:53:c6:09:ba:b2:98:48:1b:d9:ca:66:38:26:54:f7:f4:
26:02:08:9f:4e:53:37:d2:a4:57:06:21:e6:36:f8:3d:00:ee:
18:57:9d:36:1a:a6:7d:eb:f5:72:d2:08:7c:f9:76:9e:6e:77:
b5:9a:88:ab:15:d5:86:d0:98:63:d3:11:06:c2:c1:18:8d:e9:
f2:1d:9e:4c:d2:b7:bf:e0:de:c8:44:5c:e8:f7:60:76:34:f0:
31:3d:74:d5:51:da:08:3b:b6:2d:90:a5:79:b8:3a:19:fd:ea:
ce:ec:6a:c3:43:cd:60:10:c4:dd:94:0f:18:d3:0d:21:ed:24:
32:b0:d9:33:de:32:04:7a:b2:36:0f:82:9a:63:48:e6:8c:7b:
07:29:5a:97:df:a9:14:6c:5e:27:5e:ad:f0:7a:e2:70:31:c1:
71:c0:ce:36:c8:ba:8f:37:1b:ba:14:82:d2:c1:a3:42:59:ef:
f6:88:4e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:23:12 2026 by rpki-client