
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
File: J_lYw7dZsseJb17WY-gHeB8_9aI.mft (raw, json)
Hash identifier: XbYJ5aOMlXeXeeFLuPx4d7FgSKwlx+5duGEFDmSeCWo=
Subject key identifier: B2:77:02:BB:55:9B:7F:B9:7E:2D:F1:9F:39:99:3C:84:99:5B:B1:72
Authority key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
Certificate issuer: /CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Certificate serial: 019D28846FC12FD5E75190A83BB14021AF28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
Manifest number: 10B5
Signing time: Thu 26 Mar 2026 05:01:01 +0000
Manifest this update: Thu 26 Mar 2026 05:01:01 +0000
Manifest next update: Fri 27 Mar 2026 05:01:01 +0000
Files and hashes: 1: ElTViivmjGxEdxaxj11VFkP14YI.roa (hash: YUVaRGC2xsx0b6XubgQiQ6H3U/a4QTrhpMWWRuXADx4=)
2: J_lYw7dZsseJb17WY-gHeB8_9aI.crl (hash: 3LAo7SZVQxOlN0g7tH4+sk4EMYFu9pHKa3Y8NLcSImQ=)
3: MH507cRFXNNeqadxQdKywhHkylA.roa (hash: SJpj63kNuERbqmJKNAG4loDyhiVzSuV9bopPuk1oXO0=)
4: yXUQWiWAuj52X2blMDF0ySpC9kY.roa (hash: 2dpSoguExI4LCzpUhvwGpd2mxrAlFFlJZgWzZagSNCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:6f:c1:2f:d5:e7:51:90:a8:3b:b1:40:21:af:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Validity
Not Before: Mar 26 05:01:01 2026 GMT
Not After : Mar 27 05:01:01 2026 GMT
Subject: CN=b27702bb559b7fb97e2df19f39993c84995bb172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0b:b8:c7:78:98:ec:c3:e5:cb:1c:68:94:dd:
2e:3a:54:46:28:a3:83:41:4b:94:5e:8a:e3:f6:ca:
e1:c2:79:be:99:4f:fd:d9:46:8c:75:d0:cb:5b:f9:
04:88:79:8c:17:e8:87:ed:05:a0:bf:cc:55:fc:b3:
d3:3e:21:c8:95:a5:e9:56:06:bc:2c:e2:b9:6b:a3:
07:09:3c:d1:9d:82:de:82:6a:ca:fa:5b:d6:39:1b:
b2:a6:8d:2e:89:a4:73:41:ef:a7:0d:c8:9d:a3:67:
f5:f2:57:72:b1:ec:69:f9:ff:4c:39:5e:65:b7:e4:
fe:9c:f8:a7:49:a7:ae:cb:48:25:41:75:45:bd:95:
b9:5a:77:4a:a3:39:82:f5:73:9c:26:12:24:91:7e:
e6:bd:1a:7f:c0:4a:4e:6c:79:6e:00:5a:3d:19:45:
ae:fb:4a:c8:21:43:9d:89:7c:98:c4:25:a0:de:84:
9e:cc:20:9c:97:1a:fa:81:73:a7:31:59:78:00:41:
47:93:cf:45:9a:40:0b:33:6b:90:64:9a:23:10:45:
4b:75:af:4d:2e:46:8c:aa:10:a2:1d:64:6a:33:ad:
d4:35:d0:bf:fc:25:41:c8:e9:93:4d:38:29:88:be:
eb:cf:94:d5:0d:11:86:d7:26:27:16:c3:40:ed:62:
85:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:77:02:BB:55:9B:7F:B9:7E:2D:F1:9F:39:99:3C:84:99:5B:B1:72
X509v3 Authority Key Identifier:
keyid:27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:50:6c:3e:76:90:17:de:8c:3c:eb:d4:5e:b6:7f:92:17:c6:
a8:da:20:df:25:b2:2f:ac:89:0d:b3:4e:82:78:3b:f9:03:8b:
ae:33:b9:9f:8d:1f:05:03:0c:21:6b:3f:99:61:9b:ee:6a:d4:
75:4a:ae:4a:89:d0:09:e1:f8:6a:d1:37:bf:4a:63:25:3f:34:
1c:d8:a4:6b:54:39:0a:a6:2b:67:dd:08:91:2e:0d:c2:23:95:
c9:97:7a:76:77:e7:d0:ca:12:58:3c:66:17:cf:7c:eb:66:b6:
78:6b:be:8a:c8:cf:7b:1c:ca:f6:6f:03:73:3e:66:fc:39:6c:
97:7a:88:0a:45:b3:43:ac:dc:b8:d1:aa:e7:5c:4f:35:61:6f:
e2:df:16:15:07:6b:bc:05:e0:55:c5:59:0e:73:c8:66:e7:3b:
00:35:43:a6:02:a5:b7:00:d9:e5:b7:22:6f:b8:ae:a7:ec:2e:
7d:6d:05:31:91:a3:1a:fd:2d:e3:31:ec:eb:b8:a9:48:70:c5:
2a:86:67:94:ca:37:c3:87:bd:39:1e:37:79:d7:69:87:7f:ab:
4b:ff:ee:c7:ef:32:a8:06:af:fc:c5:0f:d7:3f:08:7e:51:62:
2f:19:c4:72:b0:ca:46:2e:88:1f:85:b0:d2:ae:c1:8c:aa:74:
0b:8b:39:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:56:26 2026 by rpki-client