Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
File: J7jb2X3kzUBZtS5RPc81zTgaMrM.mft (raw, json)
Hash identifier: 0f8ElbKq5Lpcu5SGUfEk5EWjDXxQ2uOFMmFY9wzLz38=
Subject key identifier: 3A:67:68:52:17:B6:1C:C5:C9:67:6E:7A:8E:15:B6:49:98:A3:B9:57
Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
Certificate issuer: /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Certificate serial: 019E1FED07AF3B2F19AB2A50E5BF56F4921B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
Manifest number: 11E1
Signing time: Wed 13 May 2026 06:01:28 +0000
Manifest this update: Wed 13 May 2026 06:01:28 +0000
Manifest next update: Thu 14 May 2026 06:01:28 +0000
Files and hashes: 1: 0oxdyMukMZaAGBeo9l9rFsh78pk.roa (hash: DX6ZwX+iC1cN81KUv6aS7NPJaf7Awa86RPypXOmFS5E=)
2: J7jb2X3kzUBZtS5RPc81zTgaMrM.crl (hash: CPlbMvQ6+IqVMLPWIe4bhmVJsqJsouJcgzparfgIqnM=)
3: dyVWHuwmCwNemfhA3NEDaxJ2sdw.roa (hash: Q8NYEk98UWxN0ux4Y6DtAD9386w6kojLNf1xUJ5/UcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ed:07:af:3b:2f:19:ab:2a:50:e5:bf:56:f4:92:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Validity
Not Before: May 13 06:01:28 2026 GMT
Not After : May 14 06:01:28 2026 GMT
Subject: CN=3a67685217b61cc5c9676e7a8e15b64998a3b957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a9:04:a8:74:d9:77:1f:c8:da:80:fb:a1:e6:
cc:79:af:02:7b:f6:89:6f:c3:fb:30:12:ec:89:a0:
a8:05:02:e8:1d:a7:28:b8:3c:a8:09:9f:48:bb:45:
b4:a8:52:8d:41:25:38:10:7c:68:82:56:2b:79:36:
9f:6a:56:1b:f5:e4:79:4e:ac:0b:cb:3c:f4:7e:74:
20:07:0a:d3:ca:8f:3b:06:b8:8e:b3:23:4b:65:b3:
7f:30:c3:17:40:49:74:6d:c4:21:bf:76:b7:cb:71:
37:9b:db:a5:53:e8:28:a5:06:cc:a6:27:c2:ff:0f:
21:3e:52:db:d2:f9:e4:22:81:0e:ad:80:4c:73:54:
08:24:87:8e:2c:06:a7:d8:19:a8:42:5c:5e:a7:b6:
e5:94:dd:6e:6d:e4:27:11:74:63:b7:29:94:ca:a4:
30:9a:f8:60:33:ca:8d:e0:99:90:20:93:40:34:46:
3f:d1:1b:5a:c8:fc:39:94:52:a2:8f:52:0b:9b:03:
be:ef:8c:3b:b7:16:a2:01:c9:b0:5a:f3:6c:86:10:
62:55:a5:dc:a3:c3:bd:75:31:6e:be:6d:82:60:f3:
2d:6b:30:5e:62:16:9e:cc:92:3d:04:e2:36:61:70:
09:07:f6:4d:75:c7:9c:b6:27:f9:91:d5:a8:06:88:
59:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:67:68:52:17:B6:1C:C5:C9:67:6E:7A:8E:15:B6:49:98:A3:B9:57
X509v3 Authority Key Identifier:
keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:2f:af:cc:be:cb:c4:12:5c:a1:7a:48:5c:91:a9:df:ba:4b:
bf:88:d5:d2:2f:40:4c:31:00:bb:6f:76:6a:bb:85:a2:1b:f3:
bc:00:c3:ea:77:92:99:7c:6d:a8:b1:a7:44:c4:a4:29:64:2f:
af:c5:95:e2:ae:1e:1b:86:fd:a1:7a:15:46:c7:5c:87:e9:dc:
c7:1c:7a:b2:4a:32:f4:bd:69:b5:47:55:0f:e3:b9:bc:f5:0d:
a2:ec:7d:7e:aa:4b:3a:02:dd:e2:e3:57:f9:99:3a:54:bc:28:
b6:c5:2e:7b:cc:27:a6:6e:f2:47:99:be:95:c7:e9:ac:b1:1d:
6d:a2:93:0a:38:ac:b8:72:7e:0f:4f:53:d1:ef:03:59:87:29:
5d:39:bb:11:ab:3d:ca:46:29:42:93:4b:25:f6:c1:3d:fd:a3:
65:90:4c:31:d7:05:99:b7:20:ea:25:55:0e:ce:b2:87:c9:c7:
06:e7:c6:67:c0:27:5b:ba:7b:1d:b6:16:d0:89:82:82:94:e1:
be:f5:f5:3f:8d:39:f9:48:5e:d8:49:51:1d:13:3a:45:cd:46:
fb:ab:ec:24:58:2a:24:7c:10:41:23:60:01:cf:63:67:d0:7c:
5f:ff:4b:0f:4c:e6:e0:42:07:e4:8b:b8:1f:dd:1b:9c:bc:d0:
9b:81:3a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:37:40 2026 by rpki-client