Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/613ee1-cf44-4601-b442-22c3dca13cf2/1/J7hwJNscaaLTuXJIflDBl2w_RUU.mft
File: J7hwJNscaaLTuXJIflDBl2w_RUU.mft (raw, json)
Hash identifier: /OD2l8ds6dVGc577Crt3H19byDmcWRcmdoEYJ/nZrIU=
Subject key identifier: BE:10:8A:8D:A6:17:25:DE:7C:00:04:99:6B:6E:4A:BD:04:1A:02:5A
Authority key identifier: 27:B8:70:24:DB:1C:69:A2:D3:B9:72:48:7E:50:C1:97:6C:3F:45:45
Certificate issuer: /CN=27b87024db1c69a2d3b972487e50c1976c3f4545
Certificate serial: 019D322BF4855EC1051C9F768712AA59EAA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7hwJNscaaLTuXJIflDBl2w_RUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/613ee1-cf44-4601-b442-22c3dca13cf2/1/J7hwJNscaaLTuXJIflDBl2w_RUU.mft
Manifest number: 29
Signing time: Sat 28 Mar 2026 02:00:34 +0000
Manifest this update: Sat 28 Mar 2026 02:00:34 +0000
Manifest next update: Sun 29 Mar 2026 02:00:34 +0000
Files and hashes: 1: J7hwJNscaaLTuXJIflDBl2w_RUU.crl (hash: m1Vj69+MT1JzgtlXUCcVSq+O2/vz3iIb1HWeyTJssRU=)
2: stC61sOedsoSINR65bY2_kcf1sM.roa (hash: qNq//nyBD92kkMpXP5fJO6OfkjTQXDaO+/slLPSU6z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/613ee1-cf44-4601-b442-22c3dca13cf2/1/J7hwJNscaaLTuXJIflDBl2w_RUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/613ee1-cf44-4601-b442-22c3dca13cf2/1/J7hwJNscaaLTuXJIflDBl2w_RUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7hwJNscaaLTuXJIflDBl2w_RUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2b:f4:85:5e:c1:05:1c:9f:76:87:12:aa:59:ea:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b87024db1c69a2d3b972487e50c1976c3f4545
Validity
Not Before: Mar 28 02:00:34 2026 GMT
Not After : Mar 29 02:00:34 2026 GMT
Subject: CN=be108a8da61725de7c0004996b6e4abd041a025a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5a:fc:0d:56:19:07:9d:89:12:cf:a0:73:36:
79:05:cb:41:af:88:36:7f:06:80:32:b4:be:ac:f3:
e3:1e:b2:51:32:62:0d:49:77:d2:5c:dd:b3:64:a3:
33:70:48:4f:c8:89:0b:0d:b6:a2:b9:a6:a3:7c:45:
09:34:c5:97:76:23:84:fa:e3:a9:a5:a7:a0:07:cb:
db:fd:df:d2:16:f9:84:25:b0:5b:19:79:8e:44:46:
68:b7:af:c3:dc:a8:e3:15:8c:a0:2d:49:52:83:6f:
13:5e:ef:7d:63:0a:48:5e:3e:01:62:44:e1:22:1d:
66:b4:f2:17:c9:ff:d5:e2:52:ff:89:ba:b4:f5:80:
84:e5:ea:78:f2:59:d3:72:45:90:64:9b:f4:bd:e3:
1f:3a:9a:e9:28:dc:b2:c3:cb:ee:7b:ec:8c:b0:eb:
9f:0d:54:8a:6a:10:3b:81:03:c0:e6:93:43:98:1a:
26:8d:30:d2:45:0e:14:f1:57:17:67:6e:95:6b:7c:
ae:75:68:47:be:4e:95:a9:7a:57:f5:a6:40:2a:76:
49:b3:66:9d:79:c2:c1:fa:04:8f:d8:f6:dd:a3:57:
3f:7d:e7:82:ab:f7:e7:cb:2b:7e:64:cd:cb:8d:4c:
f1:64:ee:32:97:d2:91:f0:f5:00:80:13:1a:48:7c:
8d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:10:8A:8D:A6:17:25:DE:7C:00:04:99:6B:6E:4A:BD:04:1A:02:5A
X509v3 Authority Key Identifier:
keyid:27:B8:70:24:DB:1C:69:A2:D3:B9:72:48:7E:50:C1:97:6C:3F:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7hwJNscaaLTuXJIflDBl2w_RUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/613ee1-cf44-4601-b442-22c3dca13cf2/1/J7hwJNscaaLTuXJIflDBl2w_RUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/613ee1-cf44-4601-b442-22c3dca13cf2/1/J7hwJNscaaLTuXJIflDBl2w_RUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1a:c7:9e:1c:06:a1:e3:68:4c:e0:33:bb:f7:38:61:a6:3e:
59:cb:0a:6e:0c:5b:58:2c:98:63:95:c6:d9:36:5f:69:d0:5d:
29:9d:0d:bb:a4:11:40:17:64:27:a3:6d:a8:de:fd:9b:a1:ba:
4b:7d:97:1b:1b:14:3b:a3:a2:b7:5a:56:29:5f:ea:01:e6:50:
c7:47:2a:c3:35:f6:76:d8:42:8f:60:fe:d4:0c:78:ab:6c:19:
54:5a:7d:e0:4e:cb:57:30:73:64:5d:55:54:8a:20:7b:b6:c6:
c2:f4:84:c2:76:2d:b3:7c:22:4d:21:43:c0:ba:bb:01:d6:1c:
49:62:5f:70:6d:42:24:c8:41:2b:1e:ac:ff:a5:9c:e7:7e:45:
ac:ec:fd:11:d6:83:c8:2e:1e:d6:34:80:95:13:ce:7a:3a:04:
17:56:12:78:37:9f:02:eb:2c:bb:0f:01:c0:e1:37:96:db:db:
29:22:9b:b6:f5:8f:65:b2:05:de:2f:09:cc:d9:5d:a5:7d:5f:
5c:59:4b:6a:81:a0:ce:e6:3a:14:24:6c:3e:78:05:35:5a:81:
94:92:02:dd:93:83:dd:83:64:48:65:a2:1c:0f:13:50:6a:56:
f6:dc:6d:a4:8c:80:6a:57:08:1e:94:bc:4d:10:d1:8e:fd:5b:
44:65:8f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 09:55:07 2026 by rpki-client