Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft
File: J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft (raw, json)
Hash identifier: h7j+B6PxOFM5/LUX5aRsIE89Vzj+bW9dj1E7P3SRaKA=
Subject key identifier: DF:BC:8A:45:CB:84:15:AF:23:DC:08:14:D3:42:59:3F:8D:F5:8F:70
Authority key identifier: 27:FC:A5:B7:A7:7D:88:76:49:F6:8A:45:C9:0D:66:7C:76:50:01:64
Certificate issuer: /CN=27fca5b7a77d887649f68a45c90d667c76500164
Certificate serial: 01A0DF4EC8151ED70A19E34909E990B57CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft
Manifest number: 03D2
Signing time: Sat 26 Sep 2026 20:01:17 +0000
Manifest this update: Sat 26 Sep 2026 20:01:17 +0000
Manifest next update: Sun 27 Sep 2026 20:01:17 +0000
Files and hashes: 1: J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.crl (hash: ybYKnqmr2KiRKR9v725k3k3mdHFM9xuIgqOdIjE1rR4=)
2: Pw54cR_7mXTkLCTeaH82cHb0imE.roa (hash: kgaWLO8vhTm+FZNrLVuG24dAqylNjIiRO5sGejr42ro=)
3: tdhlzfacO8WrsoVHSei0cAaQkIY.roa (hash: rQkZvbNaqYP3J0TMZHz+SZ9Zlj8EyrQh6pS9XIjNqgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:4e:c8:15:1e:d7:0a:19:e3:49:09:e9:90:b5:7c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27fca5b7a77d887649f68a45c90d667c76500164
Validity
Not Before: Sep 26 20:01:17 2026 GMT
Not After : Sep 27 20:01:17 2026 GMT
Subject: CN=dfbc8a45cb8415af23dc0814d342593f8df58f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e9:ff:1b:96:68:2d:df:fb:6c:f3:f6:f1:00:
53:2a:6d:ed:8a:fe:bc:ef:0f:86:48:24:bf:70:a1:
a3:4b:51:37:70:f9:dc:08:17:b0:24:d8:10:28:10:
c5:ba:fa:f3:ec:f0:82:2e:9b:2c:94:d3:1a:ef:1e:
4a:56:5d:9a:0f:bd:41:76:a1:d0:ca:e7:a9:2a:e7:
14:a6:da:d8:a4:55:92:b8:16:b0:c4:0a:b8:ba:32:
e9:05:15:f5:96:d2:81:0c:2e:9f:15:82:c1:34:a6:
fe:63:ed:6c:84:f3:a0:59:36:05:d7:36:e2:51:55:
11:28:86:a4:56:fd:fd:84:37:8f:ef:ac:01:9f:c7:
8f:6e:02:af:5c:be:9a:6b:9e:bb:aa:2d:c0:1c:36:
09:86:78:fd:7b:5b:bb:4e:5b:ee:66:18:ad:d0:77:
56:8a:0a:11:69:f9:08:13:cc:ab:83:2f:1a:31:f1:
27:43:44:2f:08:df:cc:ac:74:5b:ff:c5:c9:1c:2a:
22:6d:e9:64:5c:70:6f:0b:fd:8a:b2:bb:1b:73:88:
24:fc:58:41:bb:3e:38:0f:23:cf:7e:6e:e7:98:af:
ba:03:49:bc:ec:e6:a1:39:d2:1b:52:b9:72:4c:b8:
6a:16:f5:89:d0:1f:a7:17:0d:37:ce:27:48:43:63:
ba:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BC:8A:45:CB:84:15:AF:23:DC:08:14:D3:42:59:3F:8D:F5:8F:70
X509v3 Authority Key Identifier:
keyid:27:FC:A5:B7:A7:7D:88:76:49:F6:8A:45:C9:0D:66:7C:76:50:01:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:4f:52:2f:77:23:08:40:ba:05:37:df:5f:36:54:03:6d:45:
3a:e3:a6:d2:4c:e6:04:ec:c8:92:f7:c5:b3:82:15:14:53:40:
ea:3a:61:ce:7b:49:af:a4:b0:83:98:3d:6b:de:8c:08:b3:78:
5b:91:97:14:60:79:74:f7:4f:25:76:8d:99:ac:9a:ef:07:ca:
e8:66:1d:e5:79:18:18:4c:24:ca:04:42:fb:29:9e:7b:cb:4d:
60:6a:de:d9:fa:8d:1a:38:0a:76:58:7a:75:41:85:72:f6:81:
98:1b:1a:26:c7:f3:9d:af:b9:c3:64:7a:7d:87:5f:a0:d8:37:
3b:6d:9e:79:53:cf:5d:15:21:14:f2:62:1f:e0:0c:d8:bb:ea:
54:0b:0d:d8:27:f9:67:4a:11:9d:d9:6b:8e:b2:9f:00:a2:87:
d4:7b:8f:29:cf:a4:22:6c:69:01:c5:83:73:f3:5f:a5:f2:0f:
2d:a7:87:6c:16:23:32:9a:97:33:5a:bd:cf:7c:3c:7f:e7:8a:
08:8a:64:38:1f:2a:37:b7:ec:2d:1d:22:93:eb:d1:23:d8:75:
ea:f5:fa:47:e2:b9:cb:0c:02:67:c9:e8:92:78:62:48:71:90:
3d:56:0d:ba:bf:73:0a:fc:8d:d1:ca:8b:3e:a4:0f:28:77:a5:
24:c5:c8:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfTsgVHtcKGeNJCemQtXy4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZmNhNWI3YTc3ZDg4NzY0OWY2OGE0NWM5MGQ2NjdjNzY1
MDAxNjQwHhcNMjYwOTI2MjAwMTE3WhcNMjYwOTI3MjAwMTE3WjAzMTEwLwYDVQQD
EyhkZmJjOGE0NWNiODQxNWFmMjNkYzA4MTRkMzQyNTkzZjhkZjU4ZjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6en/G5ZoLd/7bPP28QBTKm3tiv68
7w+GSCS/cKGjS1E3cPncCBewJNgQKBDFuvrz7PCCLpsslNMa7x5KVl2aD71BdqHQ
yuepKucUptrYpFWSuBawxAq4ujLpBRX1ltKBDC6fFYLBNKb+Y+1shPOgWTYF1zbi
UVURKIakVv39hDeP76wBn8ePbgKvXL6aa567qi3AHDYJhnj9e1u7TlvuZhit0HdW
igoRafkIE8yrgy8aMfEnQ0QvCN/MrHRb/8XJHCoibelkXHBvC/2Ksrsbc4gk/FhB
uz44DyPPfm7nmK+6A0m87OahOdIbUrlyTLhqFvWJ0B+nFw03zidIQ2O6XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+8ikXLhBWvI9wIFNNCWT+N9Y9wMB8GA1UdIwQY
MBaAFCf8pbenfYh2SfaKRckNZnx2UAFkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl95bHQ2ZDlpSFpKOW9wRnlRMW1mSFpRQVdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8zNTM4NWItNjY4NC00NTllLTgzMjct
YzFmYWUwMDg4OWRiLzEvSl95bHQ2ZDlpSFpKOW9wRnlRMW1mSFpRQVdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8zNTM4NWItNjY4NC00NTllLTgzMjctYzFmYWUwMDg4OWRi
LzEvSl95bHQ2ZDlpSFpKOW9wRnlRMW1mSFpRQVdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApk9SL3cj
CEC6BTffXzZUA21FOuOm0kzmBOzIkvfFs4IVFFNA6jphzntJr6Swg5g9a96MCLN4
W5GXFGB5dPdPJXaNmaya7wfK6GYd5XkYGEwkygRC+ymee8tNYGre2fqNGjgKdlh6
dUGFcvaBmBsaJsfzna+5w2R6fYdfoNg3O22eeVPPXRUhFPJiH+AM2LvqVAsN2Cf5
Z0oRndlrjrKfAKKH1HuPKc+kImxpAcWDc/NfpfIPLaeHbBYjMpqXM1q9z3w8f+eK
CIpkOB8qN7fsLR0ik+vRI9h16vX6R+K5ywwCZ8noknhiSHGQPVYNur9zCvyN0cqL
PqQPKHelJMXIIQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 03:41:05 2026 by rpki-client