Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
File: J7jb2X3kzUBZtS5RPc81zTgaMrM.mft (raw, json)
Hash identifier: EwBcBJrRS+U3MVUw41VRKHUEpO5tBVo4PqoHKAdTKOw=
Subject key identifier: 8E:43:91:72:2F:C6:F2:4D:DB:E0:55:49:E1:BA:AF:B4:6F:DC:12:47
Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
Certificate issuer: /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Certificate serial: 01A12A31D9F05FEB9EED1F404D55E382EA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
Manifest number: 1374
Signing time: Sun 11 Oct 2026 09:01:12 +0000
Manifest this update: Sun 11 Oct 2026 09:01:12 +0000
Manifest next update: Mon 12 Oct 2026 09:01:12 +0000
Files and hashes: 1: 0oxdyMukMZaAGBeo9l9rFsh78pk.roa (hash: DX6ZwX+iC1cN81KUv6aS7NPJaf7Awa86RPypXOmFS5E=)
2: J7jb2X3kzUBZtS5RPc81zTgaMrM.crl (hash: 7okaJdt5a/P8sk09ivb2eQLvitzIBFCBatbXLcaecyw=)
3: dyVWHuwmCwNemfhA3NEDaxJ2sdw.roa (hash: Q8NYEk98UWxN0ux4Y6DtAD9386w6kojLNf1xUJ5/UcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:31:d9:f0:5f:eb:9e:ed:1f:40:4d:55:e3:82:ea:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Validity
Not Before: Oct 11 09:01:12 2026 GMT
Not After : Oct 12 09:01:12 2026 GMT
Subject: CN=8e4391722fc6f24ddbe05549e1baafb46fdc1247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:31:b2:fc:22:2f:cd:4b:25:0c:aa:ab:15:
86:20:d4:5f:7b:c4:47:a1:8f:ed:b1:03:bb:b1:0f:
7f:8e:fc:ae:9e:8b:9b:56:12:01:2e:c3:6e:ea:3b:
84:5d:c5:ea:f4:26:a0:f9:d9:55:d4:ab:9c:6d:ba:
5d:ee:17:97:87:20:ce:e6:7b:c2:6a:27:cb:2b:27:
6a:80:e2:8a:61:d7:d0:05:24:bb:d6:89:a9:72:6c:
e8:62:bf:c5:e7:99:cb:1a:a0:60:d2:0e:8c:94:fe:
c0:e9:2d:54:c2:58:39:a7:81:71:c4:54:a5:90:86:
f6:6b:6e:a7:ef:74:ba:ed:64:60:7b:b9:46:06:11:
79:9b:2c:5c:0b:a0:e4:4e:4d:7a:c5:33:c8:c4:63:
e2:0b:07:ec:16:ed:7f:ca:2f:4d:56:94:72:cc:6c:
07:b3:f6:ac:ac:40:e5:51:f2:13:b4:78:04:50:5e:
49:b4:21:7b:82:d8:30:36:6c:31:9a:a4:65:d5:aa:
18:b8:08:17:26:b3:33:10:1c:b5:d9:bd:28:56:ad:
97:4b:70:cf:a6:b3:fa:b1:c7:9c:73:19:0d:9e:64:
28:4b:18:60:16:57:ae:93:c9:eb:30:76:a8:71:98:
14:6d:7b:ca:50:1d:78:8e:ca:e4:49:7c:9c:4f:5c:
70:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:43:91:72:2F:C6:F2:4D:DB:E0:55:49:E1:BA:AF:B4:6F:DC:12:47
X509v3 Authority Key Identifier:
keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:ad:d0:59:5e:42:94:b9:ee:f6:9a:3b:37:0d:b5:f9:78:8f:
61:d4:3d:8e:fc:dd:bf:75:3a:5c:ed:99:d4:98:3b:5c:0b:b4:
a7:96:6d:18:5e:86:47:69:2f:fe:6c:4c:27:c0:e0:c0:6b:8d:
4c:58:62:ef:4a:18:08:dc:da:19:6c:ad:0a:73:00:f6:2d:8d:
21:d5:54:ef:3d:af:cb:c4:ba:0a:7e:7a:4b:c8:ac:6e:b4:ea:
b3:07:cd:0c:aa:8e:e2:0e:80:1f:53:6c:09:12:10:c7:3a:86:
24:c1:2c:e9:88:f7:4b:92:90:fc:b6:20:91:6a:8c:7f:16:58:
9d:ec:c5:60:de:0e:d4:a5:20:52:84:3d:2b:c4:e3:0b:af:05:
5e:a5:c4:44:bd:76:89:30:b0:3b:69:66:22:76:c8:a1:df:5b:
94:33:ed:e9:0a:cb:23:7d:9a:71:39:fa:4d:3e:82:45:63:d4:
1b:cd:59:7a:fa:08:40:b0:b5:47:f5:3f:a3:e2:77:a3:c5:46:
aa:a4:bc:ad:58:8b:c5:38:6e:b5:71:35:cd:e7:40:5b:09:bf:
6e:f4:3c:3d:65:db:ed:40:6a:fa:b5:57:f6:4b:a9:d4:b0:d9:
15:02:1e:a2:35:83:ba:12:9a:9d:8c:bc:87:fe:ba:f7:ea:f8:
0e:7e:ad:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:56:48 2026 by rpki-client