Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
File: J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft (raw, json)
Hash identifier: qOs28E/0MfnqdRTKjFjykc8/THYMQiwBTU1EEUqWn8M=
Subject key identifier: 04:21:BA:E7:07:1F:DC:79:D4:31:A8:72:9A:1F:7B:12:82:8C:E2:19
Authority key identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
Certificate issuer: /CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Certificate serial: 019E1E35C3FC8FCF6A25024738F6EC873AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
Manifest number: 191C
Signing time: Tue 12 May 2026 22:01:40 +0000
Manifest this update: Tue 12 May 2026 22:01:40 +0000
Manifest next update: Wed 13 May 2026 22:01:40 +0000
Files and hashes: 1: 0T_OaQCbJNCqGeMPQhOWXxsxGm4.roa (hash: Ft44EkrKyKsAFbkVxuqQXqMtrjyV/ZdKGwAAf8PGKYI=)
2: J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl (hash: fbCdqj70Tjq5IzkCItu6DFGvxjuFCVDMdXVNGaUew74=)
3: j54P9E7HJNxXnzx0c4ZlhgLNrmk.roa (hash: 9KgP+vcQVnAWqyQznz1mnI6dtjZmqs2SRf03m1FIUiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:c3:fc:8f:cf:6a:25:02:47:38:f6:ec:87:3a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Validity
Not Before: May 12 22:01:40 2026 GMT
Not After : May 13 22:01:40 2026 GMT
Subject: CN=0421bae7071fdc79d431a8729a1f7b12828ce219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:8e:03:da:06:8d:4f:50:a3:b0:39:d9:00:
a6:9e:e1:d6:6c:8a:ff:b2:be:62:d1:3c:f3:a0:2d:
d2:dd:49:85:d2:cb:65:29:06:db:05:97:78:d7:2b:
a3:fb:3a:aa:fe:61:25:23:c9:91:6b:22:6c:45:5c:
7a:48:f8:d4:2d:e2:e5:ce:d1:d7:9a:ee:ac:0b:73:
5d:c5:65:c7:9b:d0:59:4f:d0:8c:3f:f8:0a:a7:a8:
46:2c:96:41:a1:c0:d9:96:c7:8f:7f:10:43:f3:f1:
c4:ab:fc:32:a2:99:8a:e9:78:b2:ea:35:4d:57:24:
95:e7:ba:b8:97:97:8e:bc:f4:e6:7b:93:aa:45:fc:
91:aa:95:45:aa:d5:dc:58:64:5c:3c:40:76:fb:50:
d3:35:05:81:05:c9:cb:ec:fd:0e:4e:fc:d4:6a:cf:
58:89:1d:60:73:1b:a2:08:ea:ca:e8:95:c7:a3:0c:
71:64:4c:93:4b:6e:2b:53:e5:1c:f5:2a:38:08:eb:
8a:bc:c5:f5:f0:ca:80:a8:53:b6:63:40:7c:58:9e:
de:90:f9:77:43:bd:e6:bb:ec:bf:a7:a0:b3:0c:cb:
8b:47:81:8d:ca:7a:b7:dd:6f:2f:b1:4c:c4:d9:54:
7f:53:09:d2:ba:45:91:78:c2:0f:b5:12:1c:84:ab:
ce:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:21:BA:E7:07:1F:DC:79:D4:31:A8:72:9A:1F:7B:12:82:8C:E2:19
X509v3 Authority Key Identifier:
keyid:27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9c:de:25:ce:15:9e:04:99:97:4b:79:d1:4b:2c:2b:68:50:
67:76:af:19:f0:08:10:72:84:c6:a1:1e:8f:31:70:02:41:dc:
7a:e1:8c:66:63:b2:09:92:95:24:c6:1a:61:31:2c:97:86:7c:
01:69:2d:22:99:6f:89:db:1a:81:d8:9d:c9:6a:d0:be:89:9c:
ef:48:fb:7d:97:ec:6c:ed:ab:50:03:f0:0e:6d:66:f2:7c:5b:
a9:1c:52:25:08:e8:a6:5c:ed:de:8f:53:df:28:63:24:4d:b3:
4a:23:7a:07:a0:74:8c:b8:36:15:6f:1b:37:cd:5b:0f:01:62:
54:b1:dc:31:72:29:86:9b:28:43:30:c2:50:bf:73:9d:50:64:
72:db:eb:3d:30:c1:35:fa:cd:b0:5a:96:94:94:26:09:6e:f1:
d0:0b:00:39:ad:99:6d:d6:d0:c0:ae:53:85:03:2e:10:a8:20:
43:ba:d7:2a:3a:7d:59:58:d6:e4:df:51:1e:d1:75:db:eb:3e:
cf:ed:49:ba:70:85:d2:28:02:77:43:fa:23:0b:aa:35:b6:bb:
df:a0:b2:03:48:ac:74:ae:e7:4f:d7:35:4f:76:b8:48:3b:dc:
76:bc:a0:4c:0f:cb:67:ae:cb:a6:4a:b7:ba:d6:1b:78:32:65:
39:db:d6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:09:39 2026 by rpki-client