Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft
File: J6-AiEvc7y-e2bqXgRYKBnyMTws.mft (raw, json)
Hash identifier: 1AVgpSnOQ4enOjSVWlfln0fkJnlTAsJ4X28frENJSlQ=
Subject key identifier: A3:1D:73:F0:8B:4D:E1:AB:B7:BE:5B:89:D9:1A:57:1C:11:0E:E1:3D
Authority key identifier: 27:AF:80:88:4B:DC:EF:2F:9E:D9:BA:97:81:16:0A:06:7C:8C:4F:0B
Certificate issuer: /CN=27af80884bdcef2f9ed9ba9781160a067c8c4f0b
Certificate serial: 019D2703F55895178561DA7065F0416C3731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft
Manifest number: 0698
Signing time: Wed 25 Mar 2026 22:01:03 +0000
Manifest this update: Wed 25 Mar 2026 22:01:03 +0000
Manifest next update: Thu 26 Mar 2026 22:01:03 +0000
Files and hashes: 1: J6-AiEvc7y-e2bqXgRYKBnyMTws.crl (hash: lezmTveJpFQGLDP/K0j4KcXxbZbJie9bh0ZvBhONhk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:f5:58:95:17:85:61:da:70:65:f0:41:6c:37:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27af80884bdcef2f9ed9ba9781160a067c8c4f0b
Validity
Not Before: Mar 25 22:01:03 2026 GMT
Not After : Mar 26 22:01:03 2026 GMT
Subject: CN=a31d73f08b4de1abb7be5b89d91a571c110ee13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:c0:22:29:c8:1a:b7:dd:8e:bd:3c:f2:03:
05:c5:51:8d:f1:6c:d5:00:65:fd:7b:bc:e2:5f:78:
a4:8c:a1:a5:a9:cb:e9:76:5c:72:f7:3a:d0:ed:3c:
9d:a3:28:e5:54:84:7d:96:11:63:e1:73:ad:c4:a8:
bd:32:ec:0a:23:6c:dd:f1:21:7a:d5:90:e5:c4:36:
fd:4b:e7:69:35:6e:2c:e9:60:01:24:86:ae:d0:91:
23:39:cf:19:0a:fa:ba:ec:09:6c:25:fa:68:2d:25:
0d:9e:9d:e3:4f:be:8a:37:37:88:05:5e:4e:78:bc:
59:73:09:b6:7e:c7:7e:13:16:c8:41:e4:4d:81:3a:
f2:30:ec:a1:5b:cd:ff:a0:44:1d:5a:d2:cd:08:98:
e6:14:99:f2:5c:d4:cb:c9:6a:71:2b:23:29:3c:39:
eb:6b:f6:11:95:10:ac:7a:a0:d8:a6:2e:9f:99:77:
24:c2:8e:08:00:db:16:be:9d:d8:f8:a6:14:94:95:
62:77:77:48:34:03:14:cd:e7:a9:ce:ae:29:3b:e7:
fb:c6:64:ef:89:1e:a0:b7:da:ed:aa:f8:06:ec:56:
df:8e:96:b2:d7:a1:bf:e6:73:4c:83:c2:b7:27:c8:
85:fd:71:59:e9:d5:4b:a2:fa:bf:3f:6a:25:1e:2b:
6f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1D:73:F0:8B:4D:E1:AB:B7:BE:5B:89:D9:1A:57:1C:11:0E:E1:3D
X509v3 Authority Key Identifier:
keyid:27:AF:80:88:4B:DC:EF:2F:9E:D9:BA:97:81:16:0A:06:7C:8C:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:be:71:14:38:a3:ec:d4:01:ea:08:5a:2b:5a:bd:dc:3b:fb:
43:82:41:46:f7:47:86:20:89:26:c4:40:1e:0e:be:d0:6b:13:
61:d4:5c:13:91:8f:1d:47:b7:f0:a9:8f:12:a9:34:e7:dd:43:
51:49:b0:b8:90:a3:91:9d:04:cb:f0:ee:6b:d4:f7:b8:ed:81:
68:a8:aa:3e:31:6d:88:c4:db:08:01:be:ee:0d:3b:18:de:19:
31:0e:92:0c:6d:c5:fa:e4:69:c3:15:18:b6:5a:c2:eb:d2:b5:
c4:5c:ae:33:dc:bb:4f:f9:1d:88:ef:40:f3:9c:9b:3e:24:9f:
1d:af:c9:c2:67:7c:19:81:b1:20:b6:7c:f2:60:a7:75:b6:b0:
a1:5e:c6:50:12:30:57:d8:89:9b:13:d3:67:9f:db:35:3a:d5:
4f:41:98:9b:27:bd:5d:6c:07:c5:d8:0a:ab:e9:08:72:34:c4:
ed:4a:14:32:54:92:71:84:d9:14:28:12:9d:f1:75:09:33:60:
14:ad:4d:52:81:40:b8:4f:e3:8d:42:3b:e6:1f:44:f0:06:9c:
9f:63:a6:8c:bd:73:71:96:9f:b2:e3:25:9c:a4:e0:04:28:0f:
64:2d:c7:10:1d:68:57:b1:c1:03:a2:5c:0a:13:10:a8:5c:9c:
82:24:11:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:54:40 2026 by rpki-client