Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
File: J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft (raw, json)
Hash identifier: kAcXuYZ1Duktqig2xpiXcRlxt1aQxPrfsHcLBzyUQgI=
Subject key identifier: 19:09:7C:0C:FB:87:70:DD:0E:E3:A4:B1:24:D5:0D:29:6D:E0:19:4F
Authority key identifier: 27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A
Certificate issuer: /CN=278901c061a355a3fdaace0c80b967ad1cd3717a
Certificate serial: 019D25F12AE313E09E34A78CC0EF4D09FCA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 17:00:55 +0000
Manifest this update: Wed 25 Mar 2026 17:00:55 +0000
Manifest next update: Thu 26 Mar 2026 17:00:55 +0000
Files and hashes: 1: J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl (hash: JDxJjrDChTpoW1usTXXYtkfknUyQBFRzXWkgbmg+Azo=)
2: do8SOe-ERpHxMjDsw45T1qLXF5s.roa (hash: r8j5u9eIygVJJMrAiUaqnzsEWnLw7mdb+0WkkpHgFnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:2a:e3:13:e0:9e:34:a7:8c:c0:ef:4d:09:fc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278901c061a355a3fdaace0c80b967ad1cd3717a
Validity
Not Before: Mar 25 17:00:55 2026 GMT
Not After : Mar 26 17:00:55 2026 GMT
Subject: CN=19097c0cfb8770dd0ee3a4b124d50d296de0194f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:a9:bd:ad:f6:e0:f0:85:29:db:94:e9:24:
82:b8:ff:a4:4d:91:62:e0:4a:1c:32:be:30:c6:3f:
51:e5:ef:63:68:64:8c:03:39:35:ae:07:13:89:60:
5e:03:10:40:10:a0:85:07:a2:9c:ca:4e:8b:d2:70:
3f:30:cb:40:93:72:6e:d3:5c:59:be:2b:16:40:d3:
89:fc:94:f9:35:60:00:88:04:2e:6e:b1:6b:9e:b9:
bf:f6:7f:13:09:8f:57:58:b4:f1:91:d9:5d:1a:72:
71:a7:89:79:9c:dd:b7:4a:55:7a:1b:7e:61:97:9e:
40:74:f9:7c:46:8e:3a:65:72:bc:f9:72:0d:de:f2:
b9:22:83:e8:05:d4:7f:39:de:3b:75:67:30:5f:10:
05:7c:da:87:39:b0:d1:82:db:bd:50:8c:8e:2f:11:
fc:48:41:9c:68:13:d5:cf:ca:6d:36:45:6a:56:3c:
89:9f:b1:9f:93:5a:30:d2:c7:ba:3b:9d:4b:7a:1d:
1b:ff:b4:a6:58:11:01:1f:06:9d:2c:3a:35:78:a6:
d8:7a:78:56:e1:7e:ac:aa:0a:22:a2:1a:76:c0:e9:
ae:8c:f8:31:e0:0c:13:05:40:72:59:11:80:4a:a8:
9f:f7:fb:ae:00:9e:95:ef:c6:84:9c:53:c3:2e:c3:
82:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:09:7C:0C:FB:87:70:DD:0E:E3:A4:B1:24:D5:0D:29:6D:E0:19:4F
X509v3 Authority Key Identifier:
keyid:27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9e:bf:8a:16:37:a9:ec:2d:8f:c6:db:12:12:6a:91:db:c8:
b4:8f:52:f6:5e:12:4e:f1:08:84:6e:31:61:2e:2e:9f:be:58:
73:ff:71:a8:e1:6c:d8:72:38:f4:85:5c:01:ba:2d:97:52:3a:
94:19:a1:ba:14:8f:8f:10:b2:49:03:c4:bd:2b:ad:45:a7:75:
ce:f2:2d:eb:ab:95:03:52:92:8e:bc:68:63:96:4b:e9:11:b7:
bb:a8:d1:1e:c6:dc:3e:7a:cf:ab:f1:45:ba:7e:19:9e:a5:70:
65:95:c4:ba:75:27:3b:cf:95:e8:f6:28:ab:9b:92:0c:25:9a:
80:a2:23:c1:8c:ab:9b:05:be:4f:e7:8b:86:92:da:bd:37:f8:
ea:91:2c:8b:d2:18:22:8b:46:cc:09:46:5f:f1:e1:b5:15:a5:
6b:e4:39:75:3d:f7:d5:99:71:0a:14:cb:5f:10:3e:b3:67:4b:
ee:ff:e6:25:e0:28:c5:4a:ad:63:ff:6b:74:0c:ea:41:c2:df:
d1:37:a3:21:6f:f7:64:c5:6b:6b:17:69:56:19:7b:b8:30:5b:
2a:8c:44:13:89:5b:01:fd:e8:9b:29:ed:6a:b8:e4:56:f3:9a:
36:6d:c0:c6:2f:6e:8b:53:42:23:e5:34:b1:c7:b4:22:6a:bf:
2f:21:67:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:13 2026 by rpki-client