Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.mft
File: J5_fPkke9m13cUOJrjbwRXFfJ2g.mft (raw, json)
Hash identifier: /ehE1h9RCLVoY9BSRvIut1O5F6Q50GKJf632ukJsxus=
Subject key identifier: 9D:F0:2A:54:25:21:2A:F4:DD:02:A2:72:38:0C:B5:C8:7B:75:17:AF
Authority key identifier: 27:9F:DF:3E:49:1E:F6:6D:77:71:43:89:AE:36:F0:45:71:5F:27:68
Certificate issuer: /CN=279fdf3e491ef66d77714389ae36f045715f2768
Certificate serial: 01A1DC829F467A915318652B2D35BA5B0165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.mft
Manifest number: 01FC
Signing time: Sun 15 Nov 2026 00:01:50 +0000
Manifest this update: Sun 15 Nov 2026 00:01:50 +0000
Manifest next update: Mon 16 Nov 2026 00:01:50 +0000
Files and hashes: 1: J5_fPkke9m13cUOJrjbwRXFfJ2g.crl (hash: E7ODAnDST9hygudvrqEYtRMxUV2Im9kOOL1BviwVY5g=)
2: kdWxwdb3--Gp8fSsVOp_pQmv_K4.roa (hash: 2aE+DR6z8Nipyh7a4rYx1FZfn1tSWOEnntH0xVl6zkI=)
3: vqegGbOw9ug7ca8tjyBl9_DhnQA.roa (hash: CPfXqy4c+792v7Q0ZVna5MfLZ17SbN/a5+7gBpyzZkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:82:9f:46:7a:91:53:18:65:2b:2d:35:ba:5b:01:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279fdf3e491ef66d77714389ae36f045715f2768
Validity
Not Before: Nov 15 00:01:50 2026 GMT
Not After : Nov 16 00:01:50 2026 GMT
Subject: CN=9df02a5425212af4dd02a272380cb5c87b7517af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:8a:40:0b:9e:84:bf:80:34:fe:00:2d:e6:
75:56:da:52:1e:f7:b4:eb:3c:6e:2f:8d:af:34:87:
c8:4d:f0:da:53:de:10:01:00:7a:f2:7b:8f:a8:b4:
a2:03:af:52:c4:92:89:af:10:4a:2e:a8:25:32:2f:
50:f4:0e:fd:13:cb:85:7f:94:fb:1e:bc:9d:02:52:
a5:26:34:d9:a0:63:17:a1:05:73:f5:4a:eb:05:01:
6f:93:9c:7a:21:24:bd:d8:dc:dc:d7:bb:48:22:a5:
3d:af:f2:54:cd:2d:ec:65:33:4c:b3:90:3d:56:35:
ce:65:d2:35:bd:8a:ed:d3:4c:1f:d7:a9:ef:10:da:
0a:08:78:f3:ea:50:40:2b:1f:ec:cb:37:64:67:a7:
41:40:ff:7d:88:7b:6e:ef:2b:5d:0d:a8:54:c2:e2:
a6:96:0c:dc:87:31:2f:69:02:7c:83:21:54:5f:79:
1f:4d:d1:79:7b:37:06:9a:5e:04:72:cb:98:06:28:
9a:f0:78:e2:ae:93:36:c1:5f:2f:81:66:95:1a:4d:
6f:b4:64:70:c9:1f:66:e9:27:00:fa:5d:d2:ee:b3:
66:a2:cf:da:62:a1:cf:b8:dd:60:1b:75:e3:68:e7:
5a:dc:50:59:2f:53:e1:de:87:f2:c6:cf:31:81:f4:
f3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F0:2A:54:25:21:2A:F4:DD:02:A2:72:38:0C:B5:C8:7B:75:17:AF
X509v3 Authority Key Identifier:
keyid:27:9F:DF:3E:49:1E:F6:6D:77:71:43:89:AE:36:F0:45:71:5F:27:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1c:dc:28:0b:9e:a2:be:43:ac:1f:ef:ae:17:f8:1f:ea:e9:
8b:cf:12:1f:55:eb:bc:d9:61:2c:c3:1c:84:a1:3f:1c:c1:b7:
74:0b:6b:b5:ed:ff:d8:99:14:c6:27:0f:5d:77:0e:d0:92:6b:
a3:d8:a3:73:3e:cd:7d:47:38:44:a4:4e:eb:91:17:2c:62:c6:
dc:0e:b6:1b:79:c8:60:95:0c:59:05:54:e3:b5:9a:5f:94:62:
db:ad:7a:4d:cd:56:32:b4:95:b2:bd:30:f6:72:1a:5b:e0:1e:
a1:15:62:7f:10:3f:aa:a7:81:f4:1c:75:fb:fc:64:05:f8:56:
1f:23:31:1f:19:3c:e2:c2:af:06:1e:88:6c:00:29:5b:27:1e:
b4:1c:2e:6f:95:e0:26:07:47:3b:b6:e5:5e:2a:09:96:1a:e4:
1b:18:d4:8a:7e:c7:22:02:6a:bc:c0:e2:0d:07:56:cb:b0:c5:
16:12:e7:c5:3c:0f:27:f2:97:d2:db:f6:6a:85:1c:54:f3:8e:
b6:cc:dc:76:e0:7b:56:1a:7b:92:3e:e3:05:28:13:f1:f0:70:
47:6b:04:3c:86:d7:aa:99:be:85:ae:b7:29:88:31:c3:40:fe:
ac:b2:89:f1:4d:9d:b4:b7:a0:4c:14:1e:b8:4e:14:6d:6b:e0:
f2:16:33:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:50:40 2026 by rpki-client