Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
File: J9TWlrrbEJTKoV176Gw5pxLg7hI.mft (raw, json)
Hash identifier: em1ohBieQ5ZL94ZEu+GKpwbYBAVWNnEzaLp39/q6Tq8=
Subject key identifier: 81:24:72:93:CD:6A:FC:FE:19:7A:EF:0E:86:B5:F3:EA:84:99:DD:57
Authority key identifier: 27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
Certificate issuer: /CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Certificate serial: 019D27DFC63D58CFADEFB59FFDB6F9489FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
Manifest number: 1815
Signing time: Thu 26 Mar 2026 02:01:09 +0000
Manifest this update: Thu 26 Mar 2026 02:01:09 +0000
Manifest next update: Fri 27 Mar 2026 02:01:09 +0000
Files and hashes: 1: J9TWlrrbEJTKoV176Gw5pxLg7hI.crl (hash: EfrpOpKk1kZCn+CmDyQiph3YEEeJo21NKxczfzlvXKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:c6:3d:58:cf:ad:ef:b5:9f:fd:b6:f9:48:9f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Validity
Not Before: Mar 26 02:01:09 2026 GMT
Not After : Mar 27 02:01:09 2026 GMT
Subject: CN=81247293cd6afcfe197aef0e86b5f3ea8499dd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:59:d0:92:c1:82:21:d1:ac:8a:7c:93:f3:53:
1c:69:cf:49:9a:c0:02:2b:99:ef:a2:25:96:ce:1a:
dc:59:0f:5a:11:72:78:e3:c4:3e:d8:d9:e5:1d:bd:
65:00:36:5f:4f:92:fa:66:c4:ab:8b:11:8c:7e:08:
bb:de:f2:77:5e:6d:10:01:16:44:99:ee:64:08:ae:
1b:68:59:8b:a4:e3:40:2b:bb:b2:f7:28:51:75:ae:
76:4b:b5:41:93:4a:7a:f2:c1:ce:a2:f1:78:e0:8b:
89:7e:31:eb:2c:d3:3c:2e:ec:4f:42:0a:a6:62:c3:
c4:7a:7f:fd:15:88:d6:8c:98:95:b7:1b:6f:0e:db:
50:0d:b6:ba:57:c5:84:6c:1f:1f:a1:76:99:19:23:
ad:17:d0:bf:4d:f4:a9:aa:9c:ca:12:80:dd:9c:14:
c5:a6:82:e8:11:bd:98:ee:16:5c:99:28:4c:e1:a2:
54:bf:fd:72:f5:45:8c:c3:c7:29:a0:b7:bc:2f:03:
e9:d7:87:ac:b9:57:36:5d:d4:49:91:61:71:8c:c3:
e2:36:bd:42:0c:15:d4:45:2c:f7:a8:f8:da:4b:6f:
2c:e4:7f:94:7f:26:60:9e:66:4f:8f:9b:df:c5:11:
a5:9e:a7:09:58:06:9f:5d:31:6f:1e:e6:16:50:0e:
94:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:24:72:93:CD:6A:FC:FE:19:7A:EF:0E:86:B5:F3:EA:84:99:DD:57
X509v3 Authority Key Identifier:
keyid:27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:19:10:9a:cb:98:03:92:7d:39:b5:ae:ad:92:b3:f1:05:c1:
d2:42:99:db:47:aa:24:46:c4:26:d1:71:c8:5a:4d:96:cb:75:
1f:a6:23:f2:86:8e:78:4e:71:03:4f:f7:bc:8f:d3:c4:12:e4:
ef:88:ec:f2:ca:9a:d6:29:38:f3:7b:32:a5:67:0f:87:09:1f:
bd:91:02:98:1e:f7:16:69:f1:34:da:78:f9:04:e0:f5:b0:0e:
82:bd:3b:49:a1:50:dd:7a:e9:e2:e1:cb:b8:c1:17:3f:f5:e8:
cd:2d:03:57:4c:ca:da:e6:ea:84:8c:f1:16:fa:4e:8b:cc:ab:
5a:b3:c2:03:d4:b8:f2:8f:72:45:5d:f4:3e:e3:15:b4:5c:55:
16:b2:96:de:b6:6e:f6:f7:9a:9b:eb:de:07:87:cb:99:33:71:
16:2d:ff:38:a2:b0:80:28:f0:d0:60:88:85:af:39:47:e9:01:
21:d1:49:5a:e7:d1:7f:e7:4c:96:a0:c1:ea:14:43:52:91:ff:
e3:81:eb:cf:85:dc:d7:6c:6a:95:3c:90:51:d9:c0:ea:23:07:
c9:52:16:96:05:d0:ad:1b:fc:08:52:27:56:b9:41:e6:ef:03:
49:92:f2:e3:79:64:d5:de:07:21:e7:fc:9a:87:79:6b:bd:5a:
10:fd:8f:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n38Y9WM+t77Wf/bb5SJ+qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDRkNjk2YmFkYjEwOTRjYWExNWQ3YmU4NmMzOWE3MTJl
MGVlMTIwHhcNMjYwMzI2MDIwMTA5WhcNMjYwMzI3MDIwMTA5WjAzMTEwLwYDVQQD
Eyg4MTI0NzI5M2NkNmFmY2ZlMTk3YWVmMGU4NmI1ZjNlYTg0OTlkZDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1nQksGCIdGsinyT81Mcac9JmsAC
K5nvoiWWzhrcWQ9aEXJ448Q+2NnlHb1lADZfT5L6ZsSrixGMfgi73vJ3Xm0QARZE
me5kCK4baFmLpONAK7uy9yhRda52S7VBk0p68sHOovF44IuJfjHrLNM8LuxPQgqm
YsPEen/9FYjWjJiVtxtvDttQDba6V8WEbB8foXaZGSOtF9C/TfSpqpzKEoDdnBTF
poLoEb2Y7hZcmShM4aJUv/1y9UWMw8cpoLe8LwPp14esuVc2XdRJkWFxjMPiNr1C
DBXURSz3qPjaS28s5H+UfyZgnmZPj5vfxRGlnqcJWAafXTFvHuYWUA6U8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEkcpPNavz+GXrvDoa18+qEmd1XMB8GA1UdIwQY
MBaAFCfU1pa62xCUyqFde+hsOacS4O4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjlUV2xycmJFSlRLb1YxNzZHdzVweExnN2hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kMGNlZDgtZjFiNS00Y2Y1LWI0NGQt
ZThhNGVjZTkzYTM1LzEvSjlUV2xycmJFSlRLb1YxNzZHdzVweExnN2hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9kMGNlZDgtZjFiNS00Y2Y1LWI0NGQtZThhNGVjZTkzYTM1
LzEvSjlUV2xycmJFSlRLb1YxNzZHdzVweExnN2hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBkQmsuY
A5J9ObWurZKz8QXB0kKZ20eqJEbEJtFxyFpNlst1H6Yj8oaOeE5xA0/3vI/TxBLk
74js8sqa1ik483sypWcPhwkfvZECmB73FmnxNNp4+QTg9bAOgr07SaFQ3Xrp4uHL
uMEXP/XozS0DV0zK2ubqhIzxFvpOi8yrWrPCA9S48o9yRV30PuMVtFxVFrKW3rZu
9veam+veB4fLmTNxFi3/OKKwgCjw0GCIha85R+kBIdFJWufRf+dMlqDB6hRDUpH/
44Hrz4Xc12xqlTyQUdnA6iMHyVIWlgXQrRv8CFInVrlB5u8DSZLy43lk1d4HIef8
mod5a71aEP2Pwg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:21:52 2026 by rpki-client