Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
File: J9rx4g0ElJnor1-LcVr23PIIpSE.mft (raw, json)
Hash identifier: 71eVMmVxIUgyDX8VqcpJP6Vk7Sd1BThL6UwxpzGkjys=
Subject key identifier: 21:55:8E:89:C4:01:7A:A4:4E:5F:53:2B:34:5C:63:8D:B2:A2:0C:E9
Authority key identifier: 27:DA:F1:E2:0D:04:94:99:E8:AF:5F:8B:71:5A:F6:DC:F2:08:A5:21
Certificate issuer: /CN=27daf1e20d049499e8af5f8b715af6dcf208a521
Certificate serial: 01A13A48E303204805F6A4F9F7F24DFAEB2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9rx4g0ElJnor1-LcVr23PIIpSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
Manifest number: 010F
Signing time: Wed 14 Oct 2026 12:00:17 +0000
Manifest this update: Wed 14 Oct 2026 12:00:17 +0000
Manifest next update: Thu 15 Oct 2026 12:00:17 +0000
Files and hashes: 1: J9rx4g0ElJnor1-LcVr23PIIpSE.crl (hash: Atf5KvPHUoFnJ2IrXQVkgO3XK4tH2yWQ0fqnzM6Qv5s=)
2: s3CTsEzepaXlQZBtmGn_vCqhH9c.asa (hash: pkiv835CcXvEGW6xy8WrRo2GTtt82YoHF6DEjpPgKn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9rx4g0ElJnor1-LcVr23PIIpSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:48:e3:03:20:48:05:f6:a4:f9:f7:f2:4d:fa:eb:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27daf1e20d049499e8af5f8b715af6dcf208a521
Validity
Not Before: Oct 14 12:00:17 2026 GMT
Not After : Oct 15 12:00:17 2026 GMT
Subject: CN=21558e89c4017aa44e5f532b345c638db2a20ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:39:cc:7d:19:16:5b:9f:3c:94:73:8e:29:
4c:27:1a:1c:66:52:6e:6f:3a:2c:88:03:b1:3f:d9:
8e:9d:b2:19:49:95:de:6d:66:0f:1a:d2:01:f0:76:
da:bb:17:d3:4c:03:3e:7d:5f:1a:d2:12:20:3c:b2:
21:40:6d:77:c3:35:01:a6:9d:e7:4f:86:e2:f5:fb:
d9:b2:81:a9:e8:39:9c:f8:b0:28:a8:a5:89:11:c1:
d9:eb:85:af:05:d1:df:79:e6:11:65:db:c6:76:9a:
fa:0b:ad:d9:03:63:1a:1b:90:77:5b:9f:a8:58:83:
2b:a9:17:51:79:95:0a:b0:a8:8b:81:97:ec:ed:51:
85:df:34:d7:68:40:09:be:39:c1:e1:17:88:2e:0e:
6d:1b:90:3a:f8:fb:6d:b9:0c:d3:22:bb:5b:54:f7:
fc:26:fc:49:7e:7e:ad:dc:ea:cd:cb:57:03:aa:fd:
59:3f:66:ef:3b:56:dc:60:7e:22:2b:92:37:2d:50:
c5:66:cd:7a:1a:3e:18:57:f0:26:0c:25:de:86:21:
b7:53:c5:69:f1:6a:2c:62:b7:5e:d6:57:ca:95:7f:
05:1b:16:f6:c7:14:b1:63:1f:64:29:5d:c0:ac:9a:
83:84:77:db:70:b8:a8:21:ae:40:f1:47:08:40:24:
c1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:55:8E:89:C4:01:7A:A4:4E:5F:53:2B:34:5C:63:8D:B2:A2:0C:E9
X509v3 Authority Key Identifier:
keyid:27:DA:F1:E2:0D:04:94:99:E8:AF:5F:8B:71:5A:F6:DC:F2:08:A5:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9rx4g0ElJnor1-LcVr23PIIpSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8f:2f:cc:8b:bd:0d:5c:fa:7c:f3:e5:33:2b:fa:a0:a8:51:
5c:4a:5f:fd:23:59:95:e5:b6:f9:ea:38:c1:97:0d:1e:50:f6:
54:60:bc:36:69:a8:53:55:42:57:8c:72:49:04:40:8c:52:a5:
c3:ea:1a:e0:ef:c7:32:47:39:5c:89:9c:34:fa:18:e1:b7:6e:
6a:a7:5c:95:c7:24:fa:96:c6:42:99:3c:27:7b:81:cb:e4:be:
2c:38:14:df:19:59:70:f7:02:46:de:6d:cb:d7:b9:1a:2c:1d:
97:df:20:da:56:d7:f4:16:9a:90:ea:de:7c:81:53:f4:de:de:
fd:3e:fd:12:51:4d:f0:e9:85:ce:c8:ce:d8:6c:fe:33:3c:2a:
72:87:f7:dc:81:b5:97:10:b6:31:5e:06:e9:6c:a0:d1:a5:b1:
69:57:95:70:3e:d0:ec:35:12:1e:35:3b:6b:a6:94:4b:74:74:
a0:90:99:30:ac:50:73:3e:34:8b:a1:e1:1c:bd:c5:6b:78:77:
6e:31:9a:0a:ec:bb:0b:14:5f:19:c7:c3:ea:e2:b9:2f:c8:81:
74:0d:62:32:91:e6:67:cc:36:c3:a1:ce:49:68:e4:4b:bb:64:
a7:73:8e:96:6b:d6:7d:93:98:0f:75:45:5f:0d:60:bd:c8:68:
4f:62:b0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:34:23 2026 by rpki-client