Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
File: J2PZz8gXMu0vpKZC7a4zTAApUPg.mft (raw, json)
Hash identifier: TiLoOqXET5+FDRVZpzvxRURseSpv9TkBOYuXiqPyRDY=
Subject key identifier: 0C:B5:DE:13:FE:84:D0:1B:87:F3:FB:33:D4:61:76:5F:74:CE:96:B9
Authority key identifier: 27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
Certificate issuer: /CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Certificate serial: 019D2884D585628372BFB14A646869C23D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
Manifest number: 0321
Signing time: Thu 26 Mar 2026 05:01:27 +0000
Manifest this update: Thu 26 Mar 2026 05:01:27 +0000
Manifest next update: Fri 27 Mar 2026 05:01:27 +0000
Files and hashes: 1: J2PZz8gXMu0vpKZC7a4zTAApUPg.crl (hash: fdjzQSOB+3/3XU7Jdm1sMRIejgxJDA5oG4VSQvtCkpg=)
2: xqDiTE82VfBKD9rVWVzUaZpsTPI.roa (hash: 9m/z8uOFFSLz+xo2V7/xt7po1ubSIknfY+Jf0uQ8ei0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:d5:85:62:83:72:bf:b1:4a:64:68:69:c2:3d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Validity
Not Before: Mar 26 05:01:27 2026 GMT
Not After : Mar 27 05:01:27 2026 GMT
Subject: CN=0cb5de13fe84d01b87f3fb33d461765f74ce96b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c1:6b:ce:e6:ac:31:02:86:66:d9:e7:eb:53:
f7:48:cc:60:fd:7d:b6:02:52:79:04:5e:13:93:09:
7d:98:2a:99:ff:e6:28:e6:5a:83:2f:e0:69:d1:c7:
15:25:7d:cb:28:63:b0:48:67:de:a2:94:c3:44:36:
64:82:79:22:0d:52:3e:05:d4:d3:f9:29:7b:d9:50:
ef:f5:29:63:9c:85:b8:43:dd:97:b0:b6:f7:82:02:
d3:57:19:b7:93:3e:85:28:1d:61:c0:5c:61:c0:2a:
94:a9:35:4f:f3:26:56:96:32:3b:5a:16:6f:9d:eb:
da:14:a0:01:cb:73:7d:be:e2:3c:29:fc:59:2a:b1:
92:4d:84:79:e8:a3:24:a7:69:8f:10:e3:1c:05:4c:
71:3d:06:e9:65:a4:37:c4:d0:f5:e2:1b:9a:08:3a:
50:a4:8a:81:c1:4f:1f:c6:ab:c6:0f:58:14:a0:67:
2d:87:87:52:0a:cd:91:9a:f6:9b:26:1c:1f:9a:d0:
e1:68:8a:73:55:3c:f2:6a:ba:5d:0e:75:29:da:d5:
9f:dc:4f:a7:10:94:b8:5d:64:a4:7d:c8:95:0a:17:
42:d4:24:69:db:07:78:e0:b0:5c:85:73:8e:09:48:
dc:4f:b1:b4:14:37:65:4f:8e:c2:ec:44:fb:94:e0:
f6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B5:DE:13:FE:84:D0:1B:87:F3:FB:33:D4:61:76:5F:74:CE:96:B9
X509v3 Authority Key Identifier:
keyid:27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:aa:9d:90:be:4b:c7:c2:7b:a9:53:7d:23:e1:1b:06:1d:f0:
70:ec:59:b6:29:6a:f5:d7:47:79:84:6d:8d:f7:db:91:49:1f:
61:80:fa:a4:87:73:ba:92:74:b5:83:1d:1d:f8:84:ea:00:f0:
c4:87:4c:bd:78:84:7c:3b:51:5b:4c:9f:d1:e2:55:72:e0:b0:
3e:00:07:5e:23:76:57:85:67:92:4f:98:04:d9:45:6d:98:e6:
98:30:94:d6:e6:10:f7:71:b6:c8:e0:8e:dd:a0:54:ca:80:e4:
f5:ce:70:6b:75:dd:f6:16:99:46:7e:a5:4d:dc:73:51:a1:c8:
06:0a:18:fb:ae:c3:3b:b0:5f:c8:18:23:e7:10:bf:75:56:b4:
03:f8:23:86:82:71:70:d1:05:20:3b:f6:25:4a:f8:3b:1e:87:
10:26:62:78:20:df:1d:7d:9f:33:1f:93:7b:a4:60:0f:77:52:
31:5d:60:de:a9:05:f5:18:b6:a2:a9:97:f0:6b:db:44:3b:f1:
2a:bf:e6:28:a5:5a:32:99:c8:66:c0:c1:26:1b:44:82:47:6b:
ba:aa:47:74:8f:79:b8:4e:3d:00:a6:37:60:9e:70:d9:e3:e5:
d0:dc:4f:51:4d:9f:3b:92:f4:52:3d:9a:ed:17:c6:0c:a2:a6:
56:59:44:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:02 2026 by rpki-client