Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.mft
File: J9QGnis6k_cQuUMOpksNXsQXP80.mft (raw, json)
Hash identifier: tJJyLdqfGWcbMe9MVsRexZ/BzF4xAnh1LnPc3xS1cBA=
Subject key identifier: EC:89:D1:29:59:AB:07:9B:37:B8:B8:A0:B3:77:DF:B2:85:31:F0:46
Authority key identifier: 27:D4:06:9E:2B:3A:93:F7:10:B9:43:0E:A6:4B:0D:5E:C4:17:3F:CD
Certificate issuer: /CN=27d4069e2b3a93f710b9430ea64b0d5ec4173fcd
Certificate serial: 019F8F7F0EDD0514722D11BD45850548467B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9QGnis6k_cQuUMOpksNXsQXP80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:36 +0000
Manifest this update: Thu 23 Jul 2026 15:01:36 +0000
Manifest next update: Fri 24 Jul 2026 15:01:36 +0000
Files and hashes: 1: 1PS3xn2HlB_EI2o2MOu2IRguZ5k.asa (hash: DdJ9Ve9Dta4cddkV96/sbiGA4xK8D4nCSE99B4jzPGw=)
2: J9QGnis6k_cQuUMOpksNXsQXP80.crl (hash: 5vRGOdMNXT/QrZveA728wQdd3A0/Ce0hbTyVgoNPmT0=)
3: kJEm8FnSW7mVLY5IWWP6qEWfx9E.roa (hash: Ej+aimb9neSZBoIZ2FZPgurRvFvkfzoPExucJgSd/L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9QGnis6k_cQuUMOpksNXsQXP80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:0e:dd:05:14:72:2d:11:bd:45:85:05:48:46:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d4069e2b3a93f710b9430ea64b0d5ec4173fcd
Validity
Not Before: Jul 23 15:01:36 2026 GMT
Not After : Jul 24 15:01:36 2026 GMT
Subject: CN=ec89d12959ab079b37b8b8a0b377dfb28531f046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:b7:23:1f:dc:75:21:3a:06:63:3f:9e:4c:
65:f5:b1:72:74:4a:41:33:bd:77:3b:8d:6a:19:6c:
2e:cd:0c:80:21:6c:fb:af:64:42:40:6c:b5:1a:1b:
b8:58:43:26:51:23:69:24:70:8e:dc:8a:64:0b:39:
ab:e3:08:a0:5a:06:e5:54:3e:f3:1a:e4:18:42:45:
18:d6:13:2e:92:fa:04:03:35:66:ad:67:da:fa:c7:
08:88:cd:d9:36:3d:4d:21:9f:ff:a8:63:57:83:f7:
60:b0:c1:1a:36:c2:4f:64:46:2e:9c:c5:96:b7:7e:
69:37:16:55:0d:48:48:14:b6:0e:34:f8:93:26:cc:
0a:77:9f:77:45:a6:93:f0:29:de:a9:ab:5c:2d:d7:
d3:b6:45:31:9b:b6:4e:44:21:d9:83:03:0d:f0:59:
9b:7c:3a:0f:4c:e9:e1:30:75:a3:10:78:37:f2:4e:
1c:76:3e:8c:f7:75:b7:10:99:d4:86:38:f3:65:71:
e6:e1:b9:b4:0d:f6:ee:6b:fa:7b:b3:e0:70:dd:8c:
fa:7d:5c:63:b1:72:6a:65:62:b4:5d:b7:52:eb:81:
b3:67:61:92:6c:6e:13:9b:43:d8:99:f5:27:31:d0:
f9:61:23:c6:3e:0b:84:bd:e4:23:d9:a2:78:63:b3:
ce:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:89:D1:29:59:AB:07:9B:37:B8:B8:A0:B3:77:DF:B2:85:31:F0:46
X509v3 Authority Key Identifier:
keyid:27:D4:06:9E:2B:3A:93:F7:10:B9:43:0E:A6:4B:0D:5E:C4:17:3F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9QGnis6k_cQuUMOpksNXsQXP80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:13:70:6b:83:4c:a4:72:0c:9d:f4:bc:ad:f6:72:cc:e8:66:
48:36:86:88:a9:a1:a2:f1:87:df:10:47:0e:fa:24:ff:80:30:
2c:44:0e:45:2c:ca:6c:69:93:3a:6c:1b:3c:bc:8d:ee:b2:f2:
41:1e:48:ed:e3:2d:d0:eb:5d:db:28:94:55:da:3a:fb:47:09:
f1:32:9a:34:df:58:a7:48:50:8c:73:e1:db:e0:ad:34:99:73:
ab:09:e0:c2:be:16:3a:88:3c:8e:73:80:3e:40:43:4e:47:23:
b2:61:cf:28:a3:aa:26:8c:05:98:27:75:e9:b4:09:cf:c4:be:
90:06:bb:32:2c:df:e5:34:6f:75:d4:e3:2e:2b:0f:30:f0:30:
88:36:56:97:66:94:90:62:ca:14:2d:73:b0:af:b7:f3:4d:af:
b1:27:64:0a:60:f3:fd:c1:dc:46:7e:06:a1:c0:d6:53:99:4e:
d6:f7:20:62:ea:03:60:e6:26:f7:9d:7f:83:74:47:8f:cf:92:
09:7e:a4:da:59:2e:8b:b4:80:31:33:35:cb:bd:83:a6:33:60:
29:74:9f:c1:d8:fd:23:8a:02:58:45:70:ac:29:cc:4e:c3:7a:
60:07:29:d6:d7:7b:45:45:66:47:12:bd:fb:e1:49:49:94:ca:
3e:8a:20:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:17 2026 by rpki-client