Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
File: J2PZz8gXMu0vpKZC7a4zTAApUPg.mft (raw, json)
Hash identifier: fXsVi2CeWC4yned9h6EEJvEcwZ4EyBhU4i3hbmVGDMU=
Subject key identifier: C9:F4:FB:96:73:17:A9:83:01:EA:82:41:8E:B4:B7:21:47:7D:5E:CC
Authority key identifier: 27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
Certificate issuer: /CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Certificate serial: 01A0E663F07B73B241D37B0CF922434EAEB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
Manifest number: 0511
Signing time: Mon 28 Sep 2026 05:01:44 +0000
Manifest this update: Mon 28 Sep 2026 05:01:44 +0000
Manifest next update: Tue 29 Sep 2026 05:01:44 +0000
Files and hashes: 1: J2PZz8gXMu0vpKZC7a4zTAApUPg.crl (hash: /Co3BAb1TmmFab2Rd2wl51MVaaZaU17RkZKlsEkHvS0=)
2: v2RhzwzRYxDBxoI8x3qcoCuvcCY.roa (hash: +dNdFFmraUSumCJQ+HT3ZgjMQ3xG8lfqVtX8iY6CtK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 05:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:63:f0:7b:73:b2:41:d3:7b:0c:f9:22:43:4e:ae:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Validity
Not Before: Sep 28 05:01:44 2026 GMT
Not After : Sep 29 05:01:44 2026 GMT
Subject: CN=c9f4fb967317a98301ea82418eb4b721477d5ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:36:fd:6e:29:fc:db:bb:f7:aa:d8:b8:58:2b:
5c:15:34:fd:3e:d2:c2:32:8b:46:3a:59:cd:ef:72:
32:0c:13:61:65:aa:77:0e:5d:19:86:65:60:e3:fd:
2c:60:74:d2:cb:8b:60:20:a3:8a:cb:b4:9d:79:ad:
15:6b:16:fc:8b:77:13:81:c5:8c:35:6c:1c:99:b9:
af:0f:4e:50:2b:c9:82:44:0f:ef:22:d0:bb:f4:a6:
0e:c8:4c:3f:0b:2a:90:62:8a:3c:ef:22:c3:34:f5:
9b:5c:51:7d:87:4b:2f:c2:52:77:4e:4b:00:fc:9d:
f8:80:96:4f:28:99:1d:83:14:35:29:91:0f:f1:62:
0f:7f:e3:da:85:be:07:af:a4:05:8e:59:ad:3f:35:
23:a2:61:6c:9d:eb:21:73:f6:94:ca:7b:69:86:40:
1e:b9:4e:f4:58:fd:d3:cb:71:30:62:fe:a3:ba:5b:
41:e1:8b:94:af:ec:b0:67:7e:09:af:84:42:a4:aa:
13:a8:da:c8:ec:34:a1:6a:02:f6:04:58:1a:cf:07:
76:ca:2d:be:68:69:ef:aa:83:81:35:00:45:69:13:
6f:01:59:d3:23:15:e1:59:8b:e2:68:fc:2d:62:78:
a1:c1:c6:a4:7b:f9:f6:53:5a:17:a3:e8:6f:00:c6:
bf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F4:FB:96:73:17:A9:83:01:EA:82:41:8E:B4:B7:21:47:7D:5E:CC
X509v3 Authority Key Identifier:
keyid:27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a8:84:11:ba:08:91:a3:ab:eb:77:91:ec:23:32:35:8e:6f:
54:da:eb:e3:1b:22:68:44:5d:f3:c0:f2:ae:f8:99:2b:fe:22:
a8:8d:e0:b3:cc:51:db:10:b9:9f:9b:33:41:b1:48:a3:b1:02:
3c:ba:11:ad:57:28:1f:9f:0f:0e:a4:57:60:a4:ad:33:80:6c:
46:73:20:c9:d8:c7:9b:12:e3:c3:10:81:a9:4e:0f:98:7d:db:
d6:93:a5:a4:1f:57:5d:21:ec:fc:ff:19:0f:99:6a:ee:d0:23:
71:00:f0:2c:1b:2d:82:62:42:1f:56:07:4e:a8:b8:39:b5:7b:
4c:d0:25:f3:87:29:68:e4:bf:48:26:97:12:44:04:8e:6a:a6:
e6:06:c8:dc:72:08:6a:53:e7:d0:e5:9d:ee:7e:a0:a5:23:99:
16:53:db:46:89:ba:c4:32:97:94:f3:0b:ce:44:f7:84:9d:17:
ff:4a:9e:59:6e:0c:dd:52:63:97:7f:f8:b2:27:7a:1c:fa:27:
f3:99:06:56:56:20:bd:c0:7a:b0:ab:6b:00:83:9f:55:5d:be:
2b:24:e4:96:c2:93:5f:6d:40:0e:1a:12:64:9e:7a:34:dd:83:
d9:cf:f1:f5:bb:7d:fc:b2:b6:d9:b1:f7:bb:e3:d7:87:23:f2:
a1:85:70:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:17:34 2026 by rpki-client