Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
File: J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft (raw, json)
Hash identifier: TWMkmudcV0JkvwzmT7eNIKK3VaNEFkEk+ivA8luIGpk=
Subject key identifier: 93:81:F6:64:1E:EE:40:1E:21:77:7E:56:95:E1:70:92:43:51:3E:74
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Certificate issuer: /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial: 019D27DFF8266B0F8EEDB4604D217F4DE4CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
Manifest number: 16E7
Signing time: Thu 26 Mar 2026 02:01:22 +0000
Manifest this update: Thu 26 Mar 2026 02:01:22 +0000
Manifest next update: Fri 27 Mar 2026 02:01:22 +0000
Files and hashes: 1: 8pRpGLC7ufdVgfYDDUF6Zet2ESs.roa (hash: N6b81cttyVRNjS1aPTuek9kLwNALHCKPqaI95N5VpXM=)
2: J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl (hash: 06pxpENJjM3rPHn2cezenI8UoHG2PdyQd5hehTf8s5U=)
3: iLJXM2riD2xLyWPgVHhFPJznv3A.roa (hash: htQVMbTQl+9gmW8aaJPtyq2ErZGw3e/ACgLnMofyCY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:f8:26:6b:0f:8e:ed:b4:60:4d:21:7f:4d:e4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Validity
Not Before: Mar 26 02:01:22 2026 GMT
Not After : Mar 27 02:01:22 2026 GMT
Subject: CN=9381f6641eee401e21777e5695e1709243513e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b8:c8:a3:4d:34:fe:19:9f:49:f8:7b:49:bc:
7c:3a:e3:65:35:66:39:f4:44:bb:30:69:72:af:ac:
20:f5:26:d1:bf:09:f1:ac:18:3f:49:3e:df:fb:20:
56:38:12:1a:fa:66:c1:5c:72:6b:05:a1:3b:f8:24:
58:0b:2f:64:c8:4d:0c:6d:9f:ad:f6:bd:c7:8f:8b:
91:e4:4a:82:42:21:2f:64:b0:29:8e:a2:bc:00:b6:
b3:4a:ab:c1:8c:1c:5d:73:31:c6:28:b9:b6:6e:64:
c2:5e:6e:40:eb:4e:b7:b1:31:f8:45:50:0a:a3:ea:
6d:8b:6a:05:23:6d:d8:4c:1a:0d:02:c9:ee:87:41:
15:f8:20:57:ce:29:41:fc:25:21:12:fe:77:68:d8:
1b:04:bd:e9:33:be:20:c9:19:97:c2:af:a6:52:67:
2b:d0:fd:49:13:5d:a6:3a:83:4a:d7:21:a7:f0:66:
f8:64:4e:17:f6:f9:51:cf:15:7d:4f:ad:0f:04:84:
7a:bf:a5:b8:1a:05:d6:a7:9b:bd:d9:96:ff:b7:26:
f7:32:ca:32:24:66:72:e9:e6:ec:6a:ca:1b:56:2f:
e1:33:7a:40:4a:cf:a4:93:6d:35:4c:8c:3b:09:0c:
f5:7f:1d:e7:d0:76:a2:88:58:c8:4b:63:7b:9f:c1:
1f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:81:F6:64:1E:EE:40:1E:21:77:7E:56:95:E1:70:92:43:51:3E:74
X509v3 Authority Key Identifier:
keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:da:97:64:3c:a0:0d:e9:43:4e:b1:ad:a7:6a:81:d2:b1:5e:
45:aa:4c:25:29:50:39:2f:45:67:54:75:c3:75:9e:2b:eb:74:
95:3c:ae:db:34:7a:f9:0c:23:91:ad:f9:4c:ce:cd:20:cc:9a:
15:dd:6f:67:c3:0c:1e:eb:27:6e:4b:12:df:6a:5c:69:05:18:
80:f6:31:b9:f6:42:7a:6e:5b:6e:94:ff:e1:7c:6c:37:8d:98:
e0:9f:54:47:a4:97:b5:0f:29:bd:9c:42:05:8d:d2:f2:b9:4a:
56:8d:7a:94:a2:53:0c:0e:c8:38:a8:fe:6f:8a:63:a5:41:3c:
92:31:57:9a:95:a4:28:93:c5:99:bf:b5:4e:78:e6:b8:28:8a:
f8:db:1b:19:94:ce:a7:b8:5a:96:1e:60:b9:9d:18:e3:52:82:
b3:d3:77:8a:91:74:3a:98:3f:2f:a5:80:d3:74:49:d7:2c:1a:
a3:3e:9f:ca:5f:d6:90:9d:cb:12:d4:36:c8:c3:c0:c0:c8:f1:
f5:7d:3e:7a:26:7c:ce:e8:22:64:05:e2:af:8c:a5:42:11:15:
d9:55:31:63:a9:5f:b7:b5:3a:e1:51:7c:56:85:76:77:cd:e5:
90:b1:9a:c8:f2:98:ff:be:98:65:96:81:34:22:c8:91:28:ab:
bf:48:14:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:40 2026 by rpki-client