Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
File: J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft (raw, json)
Hash identifier: k14yaA0YluMHSbnk/3PwiwMxNSZwx0fyPU4htg14ehQ=
Subject key identifier: B7:71:9B:A4:A1:A2:71:DC:0E:23:3F:EC:30:64:02:C7:B4:86:3D:47
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Certificate issuer: /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial: 01A0DA284C986675BB9164FBBE3EAFF6C34A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
Manifest number: 18D1
Signing time: Fri 25 Sep 2026 20:01:09 +0000
Manifest this update: Fri 25 Sep 2026 20:01:09 +0000
Manifest next update: Sat 26 Sep 2026 20:01:09 +0000
Files and hashes: 1: 8pRpGLC7ufdVgfYDDUF6Zet2ESs.roa (hash: N6b81cttyVRNjS1aPTuek9kLwNALHCKPqaI95N5VpXM=)
2: J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl (hash: 0uzeJ/kOOu7LBKnpKiSAHr3AJRLmZ2xGksYMr+ImUbQ=)
3: iLJXM2riD2xLyWPgVHhFPJznv3A.roa (hash: htQVMbTQl+9gmW8aaJPtyq2ErZGw3e/ACgLnMofyCY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:4c:98:66:75:bb:91:64:fb:be:3e:af:f6:c3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Validity
Not Before: Sep 25 20:01:09 2026 GMT
Not After : Sep 26 20:01:09 2026 GMT
Subject: CN=b7719ba4a1a271dc0e233fec306402c7b4863d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:cf:c0:11:7d:3b:65:99:bb:1e:3b:26:27:
2d:40:49:a2:16:4b:91:d1:c4:18:3c:aa:8b:5b:3e:
0f:55:26:e8:1f:b3:69:93:ab:19:2f:19:22:bb:f2:
d8:52:db:93:82:a9:74:c6:81:5c:f2:43:f3:80:d8:
f1:c1:53:fa:3d:35:14:b1:14:e8:e1:61:1a:c0:f3:
64:7a:8f:fb:7f:96:49:89:3c:a9:63:37:d9:64:44:
d0:1b:ea:ec:c0:f7:31:58:44:c2:13:b2:1f:b2:45:
31:62:e7:63:9a:fb:1f:51:22:fb:48:ce:75:c5:bd:
7f:ff:fa:f3:ab:a0:16:5f:83:01:63:28:1a:f3:dd:
15:47:2a:f8:29:db:25:44:01:b3:11:a3:77:fd:c3:
8d:84:8b:35:2e:bd:e6:e0:14:b1:d5:fb:5b:bb:b0:
d3:ee:02:fa:cc:4f:0a:7b:5e:53:63:45:a1:3a:73:
1d:c4:d9:ed:67:e3:38:da:6e:ae:20:cc:8c:3e:82:
b0:d4:48:05:e9:37:b5:5e:d4:97:c8:04:29:74:ea:
1a:a8:16:b6:0a:c2:72:61:b8:d8:c6:81:98:ef:4e:
ef:7c:69:d6:68:7e:33:53:9a:6c:44:8a:9b:cc:be:
e6:b4:f0:9c:20:46:23:33:e1:15:2c:36:70:40:8f:
c0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:71:9B:A4:A1:A2:71:DC:0E:23:3F:EC:30:64:02:C7:B4:86:3D:47
X509v3 Authority Key Identifier:
keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2a:4e:61:a7:77:ad:e5:e3:58:85:bf:c5:e5:28:b6:a5:4e:
c2:4a:c9:7b:87:e0:f9:2f:38:05:70:ed:3c:45:e9:d6:52:7c:
ea:c4:da:a7:0b:ed:42:0c:e2:9e:fd:b9:a4:3f:0b:57:ce:53:
c1:0d:b3:ea:e0:b0:53:50:8d:77:9e:ea:fc:5d:df:cf:45:2b:
4d:40:2a:5d:b9:47:4d:c5:4b:09:6e:df:bc:8b:44:38:a2:53:
6e:77:64:6b:67:53:7b:1e:12:a2:26:1c:a4:80:96:36:91:72:
cf:0c:94:52:1d:64:31:82:14:32:b2:66:a3:27:54:77:c9:ec:
64:31:22:21:b1:19:6a:27:38:b4:41:41:21:58:03:a8:3e:2f:
c6:86:b7:fa:42:45:f9:18:23:21:b6:c5:88:05:a2:47:09:cb:
f1:13:f3:b8:3e:5a:2f:79:92:20:77:15:15:f0:09:09:e6:77:
69:1d:40:17:e6:aa:56:9a:e4:5b:27:f0:0e:de:7c:eb:29:b5:
4e:47:70:4e:d9:47:9d:a1:02:ef:e3:67:4a:ed:5f:fe:f4:2d:
8e:44:6c:2c:e9:6d:a9:16:15:74:f3:0f:bd:3e:9f:fb:b9:43:
a2:1c:a0:82:56:7d:c3:63:f2:ee:41:6e:01:34:ad:c9:be:d1:
65:79:81:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:57:45 2026 by rpki-client