Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft
File: J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft (raw, json)
Hash identifier: iwYz6kHdZm8ixH0dm43sptE9CcT3hofj19ZWJEVsHOg=
Subject key identifier: CD:90:62:54:B1:06:6A:D0:27:3D:7B:3B:4A:B4:25:3C:C3:AC:31:C3
Authority key identifier: 27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD
Certificate issuer: /CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd
Certificate serial: 01A0D803FE843E2A67F6BB26021C9789042F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 10:02:15 +0000
Manifest this update: Fri 25 Sep 2026 10:02:15 +0000
Manifest next update: Sat 26 Sep 2026 10:02:15 +0000
Files and hashes: 1: J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl (hash: NKQNJdRm2pTIS4HAtkwZUsxPJHhXG+tgDanUqala8W8=)
2: U8IK9zOrS2YBTjRbIk-gk-cBt68.roa (hash: yusdb1/WrOXutSMCFdk0bfUHNam0sw06TKJeP0mCnGc=)
3: cV-z3VBLUASMrIq4SMj8YmJTXjU.roa (hash: zZS+jPf5y7gr08V8zCZfQbJhX967ajmJFVAkbk/01Ew=)
4: vLzum_3xiySkT3R3o28koRHRvWg.roa (hash: vj9JWRWLPCy8DDsgu3Xmj2hFdUNWrsZTq4TtJ5bRflE=)
5: wh4k9axfhsDf-Do-dUFqE9nApww.roa (hash: 93omHoRTuFsw/T3J6aAGcVsj1NzTknVj2UFj23gAKLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:03:fe:84:3e:2a:67:f6:bb:26:02:1c:97:89:04:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd
Validity
Not Before: Sep 25 10:02:15 2026 GMT
Not After : Sep 26 10:02:15 2026 GMT
Subject: CN=cd906254b1066ad0273d7b3b4ab4253cc3ac31c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f0:7d:b5:f8:29:d5:81:78:b6:d7:d9:23:47:
81:d2:fe:e7:0a:86:33:42:ae:e9:63:c5:16:fc:b9:
ce:22:80:12:7b:f8:47:0e:6c:87:f5:74:d2:9c:5a:
ef:e4:aa:c2:dd:2c:94:12:3a:01:07:ab:10:3d:21:
56:ff:59:a5:e8:54:27:83:cf:14:fc:8a:3a:42:d4:
bd:ce:a7:07:31:3d:d7:c2:8c:52:b8:f7:7c:20:5f:
c8:c4:9a:68:cc:7d:22:36:5b:c0:fd:62:71:84:38:
f5:26:a0:30:ed:15:6a:3d:22:cb:80:2e:47:9e:ce:
31:84:47:ba:88:e2:d6:fc:3a:83:97:2b:4a:63:e2:
24:73:31:3c:3a:96:76:ef:24:f3:a5:e7:4a:c1:5b:
2f:52:91:2e:84:7b:db:3a:7e:40:ca:29:b7:3d:d0:
ae:55:7d:83:22:b0:60:cd:58:29:d1:b5:c0:fd:13:
1c:d3:e4:62:f0:20:43:5a:6d:1e:ea:e6:85:b0:15:
f3:61:d8:8f:12:9b:dc:26:e6:b1:f8:a1:d3:1f:c3:
0a:e8:b4:71:3f:6f:91:88:d4:d5:32:45:09:3c:9b:
b2:65:e4:5d:76:ce:de:b7:c3:6c:a0:00:95:ed:c9:
2f:f5:17:45:cc:31:a5:60:de:11:ed:d3:b9:01:61:
1b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:90:62:54:B1:06:6A:D0:27:3D:7B:3B:4A:B4:25:3C:C3:AC:31:C3
X509v3 Authority Key Identifier:
keyid:27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:cf:04:f1:54:4a:38:61:10:73:16:91:d3:dc:fb:1c:97:c7:
1f:99:48:65:d3:9b:65:19:b2:cd:83:92:e6:41:f1:05:d0:da:
7f:bc:e3:55:c6:e0:bf:5c:d8:ef:a8:c5:c4:0d:e5:65:2e:b2:
cf:e8:d9:48:34:90:68:5e:00:04:80:30:94:c3:4a:ae:ad:1f:
23:7c:63:72:97:21:24:b9:95:07:79:2c:00:bf:04:23:15:a3:
35:da:35:f0:18:11:eb:df:10:63:50:58:6c:af:a5:d7:16:08:
d9:10:0c:ae:fc:56:26:47:03:ad:eb:5c:90:fd:24:a2:c0:80:
6a:76:f7:42:85:86:3c:92:21:69:84:6b:d7:b3:1a:f7:fa:24:
b6:36:93:88:9d:ca:60:4b:c1:6b:ff:5f:13:0c:05:a6:88:09:
8b:96:a5:ae:0f:df:41:1d:a7:3a:4e:1b:93:c0:6d:e2:58:5d:
d1:03:17:ef:24:4b:e0:17:c9:0a:f9:3b:94:b3:79:4f:c8:04:
95:9a:8d:6a:ae:08:21:ba:f8:31:3a:33:d6:ce:ec:99:fe:4e:
84:61:37:5f:00:aa:3d:22:25:e6:d4:b5:c4:7a:95:d9:24:99:
de:56:a0:00:f3:29:45:37:75:c1:0f:d6:06:af:96:4b:9c:b5:
35:08:bd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:04:26 2026 by rpki-client