Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
File: J7syqoyfjQXFF74q1mUvZlUKjVc.mft (raw, json)
Hash identifier: ChlJh4UvYVXEnaoHHChJLjghtollx55qb+USaN5kWSY=
Subject key identifier: B6:55:F0:EC:F7:3A:BB:03:26:6C:49:2F:57:B7:8A:DA:A6:D9:5F:8A
Authority key identifier: 27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
Certificate issuer: /CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Certificate serial: 01A0E7AE70A3B7080923799C1CB880396BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
Manifest number: 1A7D
Signing time: Mon 28 Sep 2026 11:02:43 +0000
Manifest this update: Mon 28 Sep 2026 11:02:43 +0000
Manifest next update: Tue 29 Sep 2026 11:02:43 +0000
Files and hashes: 1: 1yorneBH_uni2t074VYTQfK78WU.asa (hash: ysYqB1Mc/GnPUjyx8+b5ttlTyIkBVoc1lRsKiq7EAvU=)
2: 3RCjNuMxUkfSYyNOUlggwRfWfc4.roa (hash: UnwrsssJDeDLbtzFhokPg+3DUFYJBO3poSSiUsMCOJk=)
3: J7syqoyfjQXFF74q1mUvZlUKjVc.crl (hash: jAOMzHnI2xIMx/QB+aQlaKxGc+4NeMILyn5HFTKSSWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:ae:70:a3:b7:08:09:23:79:9c:1c:b8:80:39:6b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Validity
Not Before: Sep 28 11:02:43 2026 GMT
Not After : Sep 29 11:02:43 2026 GMT
Subject: CN=b655f0ecf73abb03266c492f57b78adaa6d95f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:32:d9:62:8d:ef:f6:c6:52:78:2b:00:2f:3d:
69:e2:68:d5:bc:a1:ee:4f:ce:97:12:c5:46:3b:4a:
c2:bf:4b:22:47:9c:9b:c0:5c:8a:22:71:75:a1:6b:
fb:38:2d:b6:39:c3:2b:e3:16:ef:27:1d:30:72:9a:
f6:35:e5:30:ac:70:ba:01:e1:57:09:60:1c:f0:c2:
1b:06:c4:8f:2b:25:d7:c6:68:b1:4b:3c:7c:73:29:
c0:70:25:52:34:e7:46:93:33:ea:de:72:cc:e1:c3:
bc:2b:54:cd:cf:db:99:3b:22:7a:31:b7:77:b6:a2:
c0:b3:23:d3:53:1d:a5:f7:8e:50:23:c7:46:6a:14:
83:5c:a3:41:20:0b:a1:2f:3d:1e:60:db:5d:fc:47:
a8:86:82:a1:ce:09:ba:d7:a7:ae:32:c7:e5:bc:da:
c1:8a:3d:ea:1a:1d:9c:c6:88:00:ce:06:c9:ba:ff:
34:ca:9d:fb:54:3f:34:e2:57:15:f4:75:59:8d:3d:
81:f0:57:81:16:51:34:38:9d:ba:ae:72:43:58:27:
33:18:d9:a3:1d:4f:e1:c1:43:ef:27:2c:dc:08:f6:
81:ef:6b:5e:da:d5:07:29:4e:a2:fe:b1:f7:96:5f:
94:dd:f0:5b:58:63:df:fd:32:9c:8a:78:17:dd:ad:
fd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:55:F0:EC:F7:3A:BB:03:26:6C:49:2F:57:B7:8A:DA:A6:D9:5F:8A
X509v3 Authority Key Identifier:
keyid:27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:34:55:b2:c8:f0:72:3a:58:97:5a:59:73:06:7c:5d:c2:a0:
b8:b7:95:2c:34:a7:b7:f5:b3:0b:64:c7:2a:86:1b:90:6a:7f:
25:0d:09:57:db:ea:7d:7c:e8:80:c0:8a:26:e3:20:f6:39:5b:
c9:27:aa:62:c8:db:f0:4a:dd:ce:df:05:5c:2b:07:46:7b:d1:
ab:3a:bf:fb:0a:8f:ac:e3:fd:86:c2:1d:58:e5:24:df:84:26:
bc:cf:ac:7b:7c:f6:01:44:b4:24:ca:2b:59:81:ab:b1:f5:3d:
09:73:9e:da:dc:a1:d8:a2:74:4d:f8:2c:13:c8:8a:31:69:80:
55:83:c2:87:76:04:2d:95:b4:53:44:d6:b3:ea:51:8d:b2:cf:
a3:be:a4:77:7c:de:31:b4:54:a4:8a:06:fe:16:4b:db:b6:1a:
3d:5c:1b:aa:91:2d:ad:ea:48:b0:f4:41:cc:03:a6:75:0d:01:
53:c1:89:f3:ad:a9:81:dd:0f:86:2f:20:e0:52:4e:b8:b8:af:
27:e8:90:5b:cd:07:1c:6f:0c:01:33:24:c8:46:ec:43:f1:31:
4c:84:ec:8e:c8:17:73:cd:24:36:ca:50:3e:af:26:6a:59:63:
3f:3b:61:22:bd:ef:b2:2b:c4:b1:f4:8b:03:f1:4a:14:86:a3:
69:ec:f4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:00:05 2026 by rpki-client