Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
File: J5YqM_0jSHgawSOhJyKghu6Pun0.mft (raw, json)
Hash identifier: EMcG75if/bwRcj2LiCuwiPCBfzLw+/6oZo/SRjIZOtI=
Subject key identifier: AF:8A:90:5F:88:F8:64:03:5A:4D:31:6E:1B:B8:31:AE:6B:73:5A:B0
Authority key identifier: 27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D
Certificate issuer: /CN=27962a33fd2348781ac123a12722a086ee8fba7d
Certificate serial: 019D32D0D4291405E42FD00B54F104CBF8DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
Manifest number: 188D
Signing time: Sat 28 Mar 2026 05:00:39 +0000
Manifest this update: Sat 28 Mar 2026 05:00:39 +0000
Manifest next update: Sun 29 Mar 2026 05:00:39 +0000
Files and hashes: 1: J5YqM_0jSHgawSOhJyKghu6Pun0.crl (hash: aKNjgEFrMdh+9C0/8W1ZKa5onG8DDS9yPBZXKpXcd2M=)
2: aK-KiOW1egsjAqwNXfFKte8mrTM.roa (hash: cMN/aBHsJKW/o3mLC7qajGiwbSYm63ebF4bSsFTDBjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d0:d4:29:14:05:e4:2f:d0:0b:54:f1:04:cb:f8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27962a33fd2348781ac123a12722a086ee8fba7d
Validity
Not Before: Mar 28 05:00:39 2026 GMT
Not After : Mar 29 05:00:39 2026 GMT
Subject: CN=af8a905f88f864035a4d316e1bb831ae6b735ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e7:5f:69:cb:65:4a:86:76:bb:ee:4f:16:3b:
55:33:ea:18:7d:17:55:ab:6f:32:bd:63:ae:1f:51:
94:d8:ed:58:96:98:42:1d:03:3f:f1:6d:79:e2:84:
df:50:90:5e:b8:f5:a2:dd:3f:78:b2:d4:7b:0f:0b:
f1:3f:fa:1d:75:5b:24:e1:24:18:0b:1e:38:5e:a7:
45:63:f3:9e:98:c0:6c:04:bc:a6:3a:a4:6e:78:52:
66:c1:80:53:f8:b0:dd:09:b4:15:d1:8c:57:ba:d0:
47:4d:22:60:25:d7:a2:25:ea:a6:bb:19:76:25:25:
a1:e9:63:05:b3:08:4a:e9:42:17:32:43:42:93:6c:
14:b9:1c:77:4f:b6:4f:f8:b8:2e:79:09:43:0f:5c:
d7:30:48:59:cb:05:12:4e:18:af:83:99:9d:69:eb:
27:35:a3:a5:84:fb:7c:ac:2f:99:91:56:9a:3d:10:
96:b9:5b:0d:06:77:37:18:f2:3c:d7:44:27:54:78:
51:41:46:6a:fc:5e:71:7a:92:f5:4c:bc:18:42:11:
96:0f:55:24:e4:42:b7:1d:a6:fd:2d:59:25:ae:f2:
05:57:8e:dd:c2:84:07:ea:b0:a1:00:fd:f2:df:16:
79:16:e3:dc:58:c7:2b:a7:48:22:86:99:b1:d7:f1:
a7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8A:90:5F:88:F8:64:03:5A:4D:31:6E:1B:B8:31:AE:6B:73:5A:B0
X509v3 Authority Key Identifier:
keyid:27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:51:8f:91:ca:20:65:9b:ec:90:55:b5:7f:34:38:51:10:e7:
d2:24:95:da:6d:07:32:08:13:94:29:20:67:b9:02:63:8c:18:
e9:80:3e:04:53:62:29:9d:cf:93:38:5e:9d:53:c4:af:98:db:
fe:b9:70:a4:b8:8d:3a:27:af:33:06:04:6b:61:61:41:3b:d5:
0f:7f:53:e2:85:06:f6:18:3c:be:24:7f:05:75:b4:21:a9:49:
c2:ec:57:ca:45:a9:43:22:7c:bf:1f:8c:34:ee:fc:8a:1a:77:
a3:89:cc:7b:27:ed:24:10:0a:b9:70:5d:cf:6a:c7:39:23:b5:
4c:39:ec:0f:15:a1:17:a9:ed:5f:e5:12:c7:52:9c:9f:71:92:
50:b1:f4:a4:75:04:19:b7:64:16:9a:e5:8f:17:3d:73:45:17:
b4:ea:b5:16:ea:8b:9b:16:ab:42:43:83:a8:80:7e:04:44:b7:
fc:d2:1d:83:52:7b:e8:2f:7c:d5:01:7b:be:8d:0b:61:1f:ae:
1a:9f:0f:8f:6a:1e:1d:69:1a:4b:7a:67:78:66:a3:42:30:3d:
0e:76:cc:f4:3e:b5:17:1f:74:02:3a:2e:00:b8:92:0b:f0:eb:
8f:a2:1f:9a:f8:62:dc:36:2f:46:e8:d5:1e:f2:6d:98:52:62:
04:c7:b2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:16:52 2026 by rpki-client