Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
File: J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft (raw, json)
Hash identifier: h//MHOMH/1izALuSydixtSvMf8pn2RgmNgmf8phijo4=
Subject key identifier: 47:59:8E:F1:33:BF:D5:C7:6D:B3:BD:47:65:11:96:B5:F0:6E:79:B9
Authority key identifier: 27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F
Certificate issuer: /CN=2750f3d7ed825617e26be09aeccc62dda4ea314f
Certificate serial: 019D2816CE2CFBBA7E311BA16E24A89F9C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
Manifest number: 02EC
Signing time: Thu 26 Mar 2026 03:01:16 +0000
Manifest this update: Thu 26 Mar 2026 03:01:16 +0000
Manifest next update: Fri 27 Mar 2026 03:01:16 +0000
Files and hashes: 1: J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl (hash: ZeznPDjOMssvgplgLF7DnvY0qLTc6Q/LOZwljybCSfY=)
2: TKAcyjW-K2fMWFteP_AgVE5Sf58.roa (hash: EQ/0GqnYlDDezTnOJGpjIfUWvXw1RICNNg5+3Mf+uqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ce:2c:fb:ba:7e:31:1b:a1:6e:24:a8:9f:9c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2750f3d7ed825617e26be09aeccc62dda4ea314f
Validity
Not Before: Mar 26 03:01:16 2026 GMT
Not After : Mar 27 03:01:16 2026 GMT
Subject: CN=47598ef133bfd5c76db3bd47651196b5f06e79b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:0c:a7:8e:35:15:ae:f0:bb:8f:27:24:76:
21:0b:d0:7b:4b:02:74:b3:d4:73:89:ed:2d:b9:6d:
85:3e:3c:fc:ff:7b:7d:9e:a9:e8:8d:98:45:8e:f5:
1c:1a:85:bc:13:c0:dc:e4:95:04:e0:23:0c:fe:91:
c0:e5:a3:e8:e4:d9:6c:10:d9:f6:70:1a:2a:dc:26:
22:b7:f0:46:c3:25:3b:af:b3:be:1d:74:02:5f:23:
b5:61:db:04:75:c0:7e:1b:45:d3:a2:ba:79:20:96:
8d:7d:7b:82:50:69:13:cd:a0:78:66:35:b2:eb:6a:
08:97:04:32:16:b6:ed:0b:54:52:24:9f:4d:33:6a:
85:bb:15:52:f2:d9:ec:ad:b2:b1:03:c0:33:8b:87:
10:bd:06:18:08:84:5d:1c:80:87:d2:75:da:b4:af:
f8:bc:6f:72:3f:d7:59:a4:44:b1:84:a7:a3:29:cf:
65:23:e4:25:58:7e:ed:00:70:e4:f2:6e:f3:0e:05:
4d:f8:9c:df:05:47:64:8f:25:80:a3:1c:7d:b9:47:
c6:88:98:ff:62:ae:7d:47:a4:40:e4:66:f1:60:d5:
f6:28:50:d0:e2:2c:a0:16:d5:d8:68:44:cf:16:28:
a1:26:77:43:6a:f7:f0:13:ba:89:56:94:8b:4b:9c:
69:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:59:8E:F1:33:BF:D5:C7:6D:B3:BD:47:65:11:96:B5:F0:6E:79:B9
X509v3 Authority Key Identifier:
keyid:27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:7d:d8:d6:e2:f3:83:5e:ce:28:f5:b6:61:d2:fb:15:97:5f:
74:52:41:32:62:a8:51:96:6c:47:f7:a0:97:66:24:7f:d6:d3:
ae:c9:e0:6c:d1:cc:98:4e:b2:5a:36:1a:2d:72:7a:fd:dc:31:
d3:b2:ae:7b:64:3d:80:fc:86:4c:9f:fa:75:d8:90:cf:07:c3:
33:f0:84:4c:fa:b4:b1:e4:8b:a6:91:64:18:ae:03:d5:db:55:
d5:fc:21:07:43:c5:3b:f0:f4:5f:41:29:e7:09:54:7f:d7:0d:
14:73:01:17:ec:19:bc:0c:8e:be:97:81:4d:66:cd:9a:f6:70:
e6:e3:84:b0:da:a0:27:6c:65:23:fb:88:cc:f3:25:a1:31:f5:
67:20:e7:6f:3e:d5:48:ac:8b:0c:f5:ca:48:ca:74:08:08:49:
ee:1d:5c:52:a1:8d:51:af:f2:f5:5b:8e:f8:dd:42:6f:f8:13:
c3:a7:18:c7:78:3e:97:7f:9f:0b:5a:79:0f:6d:63:5f:44:98:
f8:85:17:88:f9:0b:52:16:dd:e9:95:1e:33:03:9e:f7:4c:1f:
f1:dd:3b:e9:cd:3f:dd:65:5f:5c:92:11:9e:72:df:60:b2:97:
d6:68:51:d8:f5:9e:84:e7:f6:4b:b7:21:d7:37:9b:26:e2:f4:
e4:d6:05:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:38:00 2026 by rpki-client