Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
File: J3bWTqj9AotoiON0VXu5HwXuDsY.mft (raw, json)
Hash identifier: krlfKOdbZhz/u1ALJaEF9omuiVGctwUBHnUzKjdC/rI=
Subject key identifier: F3:A4:36:86:4F:B6:89:C2:04:C6:2C:4C:70:C2:11:25:5C:44:3E:69
Authority key identifier: 27:76:D6:4E:A8:FD:02:8B:68:88:E3:74:55:7B:B9:1F:05:EE:0E:C6
Certificate issuer: /CN=2776d64ea8fd028b6888e374557bb91f05ee0ec6
Certificate serial: 019D2583AAA659E4B27FD35835CBF532C493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
Manifest number: 0E9A
Signing time: Wed 25 Mar 2026 15:01:18 +0000
Manifest this update: Wed 25 Mar 2026 15:01:18 +0000
Manifest next update: Thu 26 Mar 2026 15:01:18 +0000
Files and hashes: 1: J3bWTqj9AotoiON0VXu5HwXuDsY.crl (hash: fePe2n+WhhD1gRedn6dlG2rhQhYDdBjSKwMvpB8jjxQ=)
2: sdhGA-D8N0DheaeqCdaBETgkfIk.roa (hash: 4XflHV7qg++MD8lYex2YKEHuIVOaLfMa2L7b2xLJq54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:aa:a6:59:e4:b2:7f:d3:58:35:cb:f5:32:c4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2776d64ea8fd028b6888e374557bb91f05ee0ec6
Validity
Not Before: Mar 25 15:01:18 2026 GMT
Not After : Mar 26 15:01:18 2026 GMT
Subject: CN=f3a436864fb689c204c62c4c70c211255c443e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:54:ad:c2:fe:89:5f:22:35:0c:8f:f9:fe:e3:
f0:5f:0e:2f:7c:e7:22:50:5b:64:15:01:7d:d8:9f:
b4:00:d3:e4:d6:eb:a6:92:f3:f2:a4:4a:ee:06:53:
6c:cf:ab:31:89:66:0b:99:27:6c:54:79:c0:b8:68:
98:76:53:c9:17:e7:af:6b:8b:ee:bc:08:5d:e7:41:
eb:b9:32:c6:82:ce:49:1c:54:a2:01:6f:0c:54:5f:
ad:2f:58:dc:8b:4c:39:de:3e:47:cd:b4:d6:44:29:
dc:2c:3f:00:04:d8:38:fe:80:72:55:cc:9a:9c:e4:
25:07:9d:98:fc:0e:bf:ae:c0:96:c9:2b:68:9b:c5:
e7:23:2d:d2:41:65:6b:5d:f3:4d:13:25:a4:1a:6a:
1d:02:50:0c:f4:7c:58:d1:fa:0c:f6:73:55:fe:71:
e0:8f:43:eb:1e:57:07:85:68:fc:e4:30:ab:a9:4e:
10:fa:20:4b:a2:24:a0:99:e3:d3:63:f0:c6:86:53:
df:cc:d1:7d:1b:4d:5b:f9:2f:a5:85:78:19:48:81:
ff:0d:d7:6c:f5:91:33:60:4d:bb:2c:e3:a8:0d:f2:
b2:b4:3a:d9:b0:85:dd:09:25:bf:e5:70:73:41:f6:
44:61:b8:91:3e:cb:05:21:2c:cb:a7:65:00:33:ff:
50:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A4:36:86:4F:B6:89:C2:04:C6:2C:4C:70:C2:11:25:5C:44:3E:69
X509v3 Authority Key Identifier:
keyid:27:76:D6:4E:A8:FD:02:8B:68:88:E3:74:55:7B:B9:1F:05:EE:0E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d8:35:5c:aa:f4:fc:34:a6:e3:9d:3e:18:22:1a:36:9e:2d:
fd:e0:38:a5:c4:02:31:52:b3:b1:51:9e:5d:3f:9d:d6:2c:f1:
cf:de:46:b8:38:4f:85:75:bf:1b:70:ec:93:e5:9b:ae:46:a7:
44:34:88:3c:58:b1:b9:f5:35:66:1b:2e:61:07:33:4b:4a:6b:
53:73:b4:4b:f5:c3:7c:18:23:e1:35:38:18:71:d5:95:ca:0e:
4c:c4:c8:89:bb:c5:61:e2:e0:2b:1b:85:c0:46:b1:bb:f5:36:
13:c3:f4:a6:37:e7:44:e9:09:6c:d3:26:16:d7:99:68:94:d1:
9b:d9:3d:e2:8e:11:10:d9:54:95:60:77:51:80:ce:99:e1:ff:
20:0a:90:7f:ef:78:7c:d3:f9:ac:85:92:6d:80:3d:3a:49:9d:
e5:b5:a1:e8:70:fa:cb:0e:ce:7f:f4:f7:35:00:ca:e0:52:68:
8c:de:21:c6:0f:d3:49:bd:0c:23:23:5a:26:92:a3:c5:95:69:
0a:89:0a:50:3d:86:44:5d:91:4c:de:ce:13:73:03:f1:d5:51:
eb:98:3b:02:59:65:6c:e7:3e:81:c2:03:40:80:16:76:9f:c4:
96:17:da:0f:24:9d:d0:45:79:40:23:44:68:03:5f:1b:a5:64:
85:22:8e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:59 2026 by rpki-client