Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
File: J9VOSniNaWei7vOmaSYiYm9U760.mft (raw, json)
Hash identifier: F3SsebIRC1IbLrmJdkfYhgXUJZDvMRmTsQGUxv9s+a8=
Subject key identifier: 42:4A:FD:AD:BF:B1:21:6F:74:37:5B:F6:BE:39:DC:F6:65:9F:82:CA
Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
Certificate issuer: /CN=27d54e4a788d6967a2eef3a6692622626f54efad
Certificate serial: 019D2AA9FE8AE1C8CB9C4D20B19299E47558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
Manifest number: 0DB0
Signing time: Thu 26 Mar 2026 15:01:16 +0000
Manifest this update: Thu 26 Mar 2026 15:01:16 +0000
Manifest next update: Fri 27 Mar 2026 15:01:16 +0000
Files and hashes: 1: J9VOSniNaWei7vOmaSYiYm9U760.crl (hash: HcSRMzkPQk1y5vJF700iOvj7pYyv3my4r9yUidhTTv8=)
2: tDGcwqlaTPnixLkEemSY0dR8oEE.roa (hash: dntAFtICbpLiWSfID0C/faNT0VRienZetlVV8mxC9ro=)
3: zm911m8cc8YZZfJbwYQ5aTAaoOY.roa (hash: ReJF3cVbfAIqGPp+g2zOsYcwozrF/qsi8DLjV5pxna8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:fe:8a:e1:c8:cb:9c:4d:20:b1:92:99:e4:75:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad
Validity
Not Before: Mar 26 15:01:16 2026 GMT
Not After : Mar 27 15:01:16 2026 GMT
Subject: CN=424afdadbfb1216f74375bf6be39dcf6659f82ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:c2:28:22:0b:2a:d1:cd:8f:94:d5:b8:ee:
6a:f6:7e:b8:ed:51:db:54:1e:19:b4:3a:44:a1:01:
d3:bc:f4:da:4f:7c:86:1f:5a:7e:2b:d6:40:5a:72:
0b:36:d5:3a:55:9a:1e:46:d8:af:56:e8:cc:4a:6c:
3b:97:64:b3:a2:7e:9e:88:07:6b:cb:05:4d:4e:ea:
6f:d5:2e:0a:41:cc:9d:1b:f6:55:e4:85:30:a0:b0:
c4:15:8f:a7:38:f8:32:0d:8c:80:a4:9b:7e:93:a0:
db:6f:98:d5:6d:b6:cd:31:2a:9f:2d:96:93:65:83:
97:e8:f6:80:5d:9b:fc:69:74:d7:ac:78:70:06:45:
f0:68:f3:24:0c:03:51:3e:3b:93:b8:7a:c2:89:98:
d0:c3:9c:03:af:56:6d:c3:8a:59:81:da:63:45:68:
1e:e4:4d:d3:f1:e0:52:9c:13:98:10:9d:f0:86:7d:
23:b0:b0:6d:be:ab:34:b0:9e:e3:82:8b:70:32:af:
21:32:8d:ac:33:01:b2:bb:fd:52:dc:02:a7:79:9f:
81:7c:a3:45:06:e4:47:f2:50:c3:b6:60:a2:21:92:
6b:b2:56:50:3c:47:e0:bb:8c:4c:a1:06:53:89:e1:
9b:03:07:77:5a:b1:99:24:e1:33:d9:4a:31:f6:71:
cb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4A:FD:AD:BF:B1:21:6F:74:37:5B:F6:BE:39:DC:F6:65:9F:82:CA
X509v3 Authority Key Identifier:
keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b0:ad:84:fd:5d:5c:f4:bd:2e:0c:6f:21:5c:11:ff:00:31:
d6:78:ef:ff:fd:11:9e:d5:e9:ac:07:94:68:d0:40:40:7b:ba:
db:e2:1d:53:36:c3:30:21:5f:a6:5c:05:34:4f:a8:47:1b:f4:
64:9e:dd:79:eb:cd:d5:33:e7:e7:de:0b:72:ad:d4:68:06:1d:
88:a5:ca:e2:37:fc:24:12:4c:b6:d9:b2:71:b2:0a:24:32:43:
9b:0e:fd:ed:38:19:be:82:d5:b9:c8:15:02:f9:7c:60:5e:4a:
04:b3:1d:13:43:ce:c7:0b:e9:53:a9:b6:c6:b5:2d:dc:78:c7:
67:bc:05:01:e3:bb:22:81:9d:75:91:ce:87:75:6a:e5:8b:5f:
f2:98:47:f1:cd:67:7f:1e:d1:7e:c4:6f:01:43:4c:58:22:bf:
6a:20:3b:f7:08:26:c6:07:14:8e:fe:26:ed:10:e6:e8:69:dd:
90:2b:95:98:51:9d:af:df:e1:6a:f0:fb:96:48:12:84:81:fe:
0b:60:fe:e7:97:25:96:ff:66:35:b3:88:dc:ba:5d:5c:3a:7e:
97:bb:2e:26:56:75:a2:f7:f3:d1:37:28:ba:77:a4:31:22:bd:
0f:66:aa:76:90:c2:7a:38:00:41:fc:8a:62:2c:09:1e:33:c2:
fd:30:d0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:23:03 2026 by rpki-client