
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
File: J9rx4g0ElJnor1-LcVr23PIIpSE.mft (raw, json)
Hash identifier: 0oJe9zGg4O2H9/VE2SAF3fVWA0lsx5sm03j74/H8WTA=
Subject key identifier: 9C:D4:58:56:E9:2F:F0:08:8A:FF:EB:F4:5C:88:19:A8:BA:A5:A0:27
Authority key identifier: 27:DA:F1:E2:0D:04:94:99:E8:AF:5F:8B:71:5A:F6:DC:F2:08:A5:21
Certificate issuer: /CN=27daf1e20d049499e8af5f8b715af6dcf208a521
Certificate serial: 019F8F7E8DED58C6F13D4D4D442D5FB74C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9rx4g0ElJnor1-LcVr23PIIpSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
Manifest number: 32
Signing time: Thu 23 Jul 2026 15:01:03 +0000
Manifest this update: Thu 23 Jul 2026 15:01:03 +0000
Manifest next update: Fri 24 Jul 2026 15:01:03 +0000
Files and hashes: 1: J9rx4g0ElJnor1-LcVr23PIIpSE.crl (hash: D4BhX/75QxrfQSzS5Nkjx4EnB4v40KB0GmclrpfcYo8=)
2: s3CTsEzepaXlQZBtmGn_vCqhH9c.asa (hash: pkiv835CcXvEGW6xy8WrRo2GTtt82YoHF6DEjpPgKn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9rx4g0ElJnor1-LcVr23PIIpSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:8d:ed:58:c6:f1:3d:4d:4d:44:2d:5f:b7:4c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27daf1e20d049499e8af5f8b715af6dcf208a521
Validity
Not Before: Jul 23 15:01:03 2026 GMT
Not After : Jul 24 15:01:03 2026 GMT
Subject: CN=9cd45856e92ff0088affebf45c8819a8baa5a027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:72:01:98:05:36:e1:e1:23:ad:71:7a:01:46:
a7:55:bb:eb:47:62:04:be:2b:27:be:57:7a:81:d8:
58:3f:08:98:6e:27:31:ad:51:b4:15:c2:07:67:64:
4e:03:e9:c5:b3:35:17:b9:eb:43:83:ab:3e:47:19:
b9:a2:1f:05:15:67:b4:cb:b8:e3:56:29:54:7a:04:
8d:43:38:a4:41:ce:68:b4:41:84:7f:ae:b5:2a:2d:
0a:34:35:be:75:0c:45:2c:b9:75:5b:da:49:b8:8d:
3a:af:b8:15:9b:2f:cf:02:5e:4e:96:26:b5:b0:49:
1f:05:81:79:48:62:33:67:de:71:fa:74:11:d2:b2:
6f:4d:ab:a6:04:63:f6:31:e8:1d:12:6c:a0:fd:ae:
0f:92:d2:e8:f4:ee:0c:96:f1:23:32:a4:af:60:6e:
2c:74:71:21:1d:ff:c2:ee:32:ce:45:bf:da:0d:56:
b1:55:fd:56:84:e6:8c:16:cb:a2:41:91:57:0c:5d:
22:64:2a:ac:9e:43:97:dd:bf:0a:c9:2b:b6:d8:bc:
86:2c:a1:8e:93:32:90:44:b2:d0:18:3b:c5:bc:a3:
58:33:4e:a6:ef:a7:cc:2a:c0:29:03:67:be:cc:5c:
e5:8c:dc:77:53:c9:b6:d0:87:a0:0c:2f:3d:f1:df:
18:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D4:58:56:E9:2F:F0:08:8A:FF:EB:F4:5C:88:19:A8:BA:A5:A0:27
X509v3 Authority Key Identifier:
keyid:27:DA:F1:E2:0D:04:94:99:E8:AF:5F:8B:71:5A:F6:DC:F2:08:A5:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9rx4g0ElJnor1-LcVr23PIIpSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2d:e3:51:f5:87:23:8b:de:e5:52:e5:a1:6c:c3:01:67:9a:
55:ec:f6:2d:a9:41:7e:84:20:41:d1:8e:99:ba:50:0d:6a:33:
0a:9b:9b:fe:66:fb:8b:a6:b5:3a:15:c9:92:0f:c9:ca:78:6a:
21:34:88:16:02:1a:00:0e:d4:d8:62:c4:46:5c:7e:90:97:35:
71:44:bf:f4:e7:6f:ad:bc:2a:79:d8:05:e1:bf:75:23:1f:ca:
ec:48:10:2d:a5:2f:2f:95:89:61:37:65:a3:1a:fc:b7:66:a4:
f4:61:fc:a8:a4:58:89:72:f9:9d:4b:d6:82:22:7b:e0:f4:4c:
5c:b1:39:b5:92:f8:64:7e:04:c3:41:02:db:bc:64:23:c6:ba:
74:61:00:fc:65:8e:d1:86:ff:cc:89:2e:fb:5e:a9:7a:e3:8c:
a9:49:6f:27:05:24:19:4d:48:99:0c:1d:90:c7:04:ff:33:15:
6f:10:6a:53:2b:16:18:b5:cc:e7:02:3d:3e:cc:55:1c:86:f4:
f3:5e:ab:b6:a7:a3:f0:0e:96:04:c7:43:a6:43:b7:99:01:6f:
52:70:45:3f:ba:a6:3f:99:ee:a4:f8:df:e5:cb:87:af:84:32:
92:8d:cd:87:d3:fc:f5:a8:22:14:7b:3b:2c:3f:8e:20:7f:fa:
e2:56:a7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:47 2026 by rpki-client