Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
File: j9-HylMGV5hEdkUlX4KbU7wdohU.mft (raw, json)
Hash identifier: vDaQN5lyBsPJNO5OLnqapNujB3fPadkhEtC4SyvnrXQ=
Subject key identifier: 3D:A9:73:D9:40:D9:BC:36:02:5E:7D:F0:E0:AB:C5:D0:94:67:BF:6C
Authority key identifier: 8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15
Certificate issuer: /CN=8fdf87ca53065798447645255f829b53bc1da215
Certificate serial: 019D29CE76D4C43EA145DA4AD13BCC7FCB78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
Manifest number: 07D2
Signing time: Thu 26 Mar 2026 11:01:29 +0000
Manifest this update: Thu 26 Mar 2026 11:01:29 +0000
Manifest next update: Fri 27 Mar 2026 11:01:29 +0000
Files and hashes: 1: aiNfAtwLgUKsL4qA7akVZhQU1bA.roa (hash: Hw2VjFxuxUBTnIvwm5B0o1nhy9vvmSj+hAxZVQnZIws=)
2: j9-HylMGV5hEdkUlX4KbU7wdohU.crl (hash: 4h21NZjxpeU+CEjY+Us/XHNoHHMU36lbGNKcOJRiJIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:76:d4:c4:3e:a1:45:da:4a:d1:3b:cc:7f:cb:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fdf87ca53065798447645255f829b53bc1da215
Validity
Not Before: Mar 26 11:01:29 2026 GMT
Not After : Mar 27 11:01:29 2026 GMT
Subject: CN=3da973d940d9bc36025e7df0e0abc5d09467bf6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:46:7d:08:e5:d6:70:af:a1:dc:14:4b:ea:a6:
a0:19:b7:00:1e:34:1e:bc:38:cd:eb:ed:b2:a6:be:
4a:c5:80:26:44:47:ab:b2:c7:c6:0f:87:12:3a:bd:
3a:eb:55:8d:21:64:70:05:1e:59:0c:37:eb:d1:24:
da:a7:eb:ea:0c:c2:17:b6:f3:b1:83:28:25:d3:03:
ba:87:e6:f2:55:b0:5c:13:43:84:95:da:0e:09:91:
cb:7c:15:96:1c:6b:fa:3a:74:5d:26:cb:d6:8e:91:
af:4a:23:79:2d:c4:a9:33:91:1e:20:81:b4:cb:6e:
eb:9b:df:b6:c1:96:ca:52:74:f4:9f:26:06:f5:22:
d3:2a:f8:0b:82:ba:5d:99:99:cd:b2:ee:fa:c4:69:
2c:51:d0:2e:bd:7b:6b:64:61:13:db:31:9d:14:d1:
88:ec:e5:5e:e0:bc:5d:71:7f:21:52:a4:c2:9b:ec:
6a:cd:7e:31:bc:b5:b3:86:3c:c9:d7:7a:49:81:d9:
64:8d:87:dd:86:20:7d:0b:3f:91:16:fb:b6:ef:f9:
81:21:3f:b9:91:4b:b0:3f:b1:1e:80:00:e2:bf:ab:
06:02:ed:05:e3:f4:ca:e5:69:3f:d4:ee:06:c4:bf:
bd:52:fe:bc:74:65:44:53:f2:cf:38:3d:b0:ce:00:
de:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A9:73:D9:40:D9:BC:36:02:5E:7D:F0:E0:AB:C5:D0:94:67:BF:6C
X509v3 Authority Key Identifier:
keyid:8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:46:e2:b5:49:e4:b7:36:76:c3:7c:dd:a1:1a:a4:0d:b0:7b:
ec:f6:89:8c:46:49:9c:95:b9:9d:df:dc:f5:5f:c0:5d:18:9a:
af:47:92:52:40:c8:77:51:df:82:2d:00:22:44:5b:37:c2:65:
29:59:4f:f6:89:f5:27:0f:39:e1:fc:84:53:c9:54:3e:dd:8e:
c0:83:44:7a:bc:2b:36:a5:28:df:65:de:fb:73:60:a9:dd:3e:
5f:b8:ce:45:1d:df:1c:b2:e1:41:4d:2d:2a:e5:5a:fc:55:80:
12:f4:28:5e:46:3d:6e:a6:77:30:e8:f8:ec:31:e2:5d:e9:10:
5c:02:1e:53:3d:5d:02:5b:1e:42:25:ef:76:21:a4:bd:c0:2d:
7f:58:25:b2:85:31:c8:7e:3a:4f:11:94:0b:c8:bf:13:71:6b:
70:e8:f9:82:71:43:9a:97:9d:d2:76:96:45:78:52:1e:33:0f:
a2:d5:35:d9:05:f6:79:86:c1:89:76:03:63:86:a4:68:ef:5e:
14:fe:44:d3:45:93:64:a0:3c:f3:52:f1:8e:0f:5b:f7:b1:cd:
38:f3:42:d7:92:04:cd:47:b7:6a:81:6c:d8:9c:ba:70:8c:f4:
57:13:0e:c6:e6:de:9a:b6:20:1c:d1:dc:3a:49:0d:15:f9:51:
9f:e1:39:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:31:01 2026 by rpki-client