Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
File: J-cRzjQCblevMpDH3izSHcZx4Pw.mft (raw, json)
Hash identifier: luUy8lb6TA/kBfJmxgph467NZnyL+OqZ4AQ387zra3k=
Subject key identifier: 0F:A2:4F:7D:3F:C9:96:3B:81:CA:0A:85:BC:0C:1F:0F:DD:96:C6:53
Authority key identifier: 27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
Certificate issuer: /CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Certificate serial: 019D265FAC8BED8A4B6FB31AFB01FEDAD79D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 19:01:37 +0000
Manifest this update: Wed 25 Mar 2026 19:01:37 +0000
Manifest next update: Thu 26 Mar 2026 19:01:37 +0000
Files and hashes: 1: J-cRzjQCblevMpDH3izSHcZx4Pw.crl (hash: xiTLQvsaWRlt4TbHxDs8w4PkmCjXvPdpxeqpwVlt5pA=)
2: _n04tbHejANq8Ug_J-BPx0EeIOY.roa (hash: XtKxscitCuMv9T8d0VZ6njYDJbqu3csyAljLvKPr+l0=)
3: y_SBLUhzBtU72NxeeIak4RRDnEU.roa (hash: x10yvxp0EebXuA7j4nfdDlIV0rhNw6PWqLB8KW20YOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ac:8b:ed:8a:4b:6f:b3:1a:fb:01:fe:da:d7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Validity
Not Before: Mar 25 19:01:37 2026 GMT
Not After : Mar 26 19:01:37 2026 GMT
Subject: CN=0fa24f7d3fc9963b81ca0a85bc0c1f0fdd96c653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e0:c6:21:f5:9f:c5:16:f9:1d:a6:44:c1:53:
b2:78:80:49:40:7d:1d:6f:38:09:0f:96:92:3b:78:
2a:3d:9f:3b:a1:56:43:c4:4f:4b:7b:4e:a3:bb:08:
04:7d:49:65:f0:54:97:5b:87:df:a9:a1:a9:98:48:
13:0f:16:21:e3:ab:53:b3:22:60:bc:26:89:46:62:
a4:b0:8b:a5:01:7f:03:44:08:af:f2:3f:42:c6:9c:
d3:a4:65:44:4f:f6:ec:87:50:35:d2:d6:fa:81:7c:
7f:18:bf:21:a0:fd:2d:57:6e:74:f5:58:04:1b:75:
d7:62:e3:12:a8:1d:9e:73:cc:5c:2e:fc:1c:95:1f:
d6:49:5e:f6:0e:b2:49:7d:b5:6d:52:fa:05:31:61:
4d:77:4e:c1:04:c7:5a:65:84:21:d0:97:f6:ad:b3:
75:c7:8f:1f:89:c7:af:b3:1e:ef:ee:5a:9e:f7:d7:
7d:bc:bd:d7:3e:e5:c7:88:a9:71:e3:31:8a:bf:d1:
fa:1a:d2:88:7a:7e:01:04:82:51:98:f6:f9:05:d1:
27:2e:c8:4b:cd:40:2b:86:01:44:94:bb:db:6f:76:
59:bf:31:d9:1d:3f:b3:2b:50:ed:d6:b0:bb:8c:08:
ac:cb:c4:14:e1:07:e1:f7:61:fd:19:e0:1d:be:df:
01:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A2:4F:7D:3F:C9:96:3B:81:CA:0A:85:BC:0C:1F:0F:DD:96:C6:53
X509v3 Authority Key Identifier:
keyid:27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fd:cb:e9:0a:18:d3:fd:bf:0d:16:ca:93:da:75:27:0c:1c:
a9:73:80:ee:41:c3:ae:e1:5a:d3:0d:11:4c:2b:50:e7:a9:d4:
bb:20:2d:68:e8:66:ea:13:a1:e0:62:3e:6e:25:b1:45:d1:9f:
41:24:04:7a:6b:e2:8f:5f:9e:27:a2:fa:b1:e4:ab:2a:b0:85:
16:ef:f5:a5:8c:67:eb:72:4a:5a:87:76:2b:a2:a4:fb:b6:11:
e5:63:86:60:b5:17:08:3e:30:77:39:10:be:9a:9a:85:df:de:
fd:a0:1d:77:9f:2d:6f:d5:17:4c:d0:8a:74:be:a9:6d:d2:18:
84:25:c9:84:a5:ca:9e:2d:06:29:3e:99:34:e3:cf:aa:ec:7d:
09:38:d9:69:2e:a2:70:d9:f1:3c:96:3d:b8:19:c8:8c:5e:f1:
d7:c1:bf:a9:51:b6:f4:42:12:36:b8:03:ce:1f:ce:82:d8:07:
e9:11:7b:ca:73:e2:15:c3:a9:a7:8b:4d:5d:2c:9d:e0:65:69:
3a:fc:60:d4:2c:65:2b:e2:f0:ed:92:27:e1:50:fb:5a:30:07:
88:ad:af:8c:95:e2:aa:16:ce:bf:14:1d:a7:eb:f7:41:2d:ee:
6e:6e:1e:76:cf:18:a6:2d:51:cc:4a:92:9f:8e:6a:f2:df:73:
ee:ba:a1:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX6yL7YpLb7Ma+wH+2tedMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZTcxMWNlMzQwMjZlNTdhZjMyOTBjN2RlMmNkMjFkYzY3
MWUwZmMwHhcNMjYwMzI1MTkwMTM3WhcNMjYwMzI2MTkwMTM3WjAzMTEwLwYDVQQD
EygwZmEyNGY3ZDNmYzk5NjNiODFjYTBhODViYzBjMWYwZmRkOTZjNjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+DGIfWfxRb5HaZEwVOyeIBJQH0d
bzgJD5aSO3gqPZ87oVZDxE9Le06juwgEfUll8FSXW4ffqaGpmEgTDxYh46tTsyJg
vCaJRmKksIulAX8DRAiv8j9CxpzTpGVET/bsh1A10tb6gXx/GL8hoP0tV2509VgE
G3XXYuMSqB2ec8xcLvwclR/WSV72DrJJfbVtUvoFMWFNd07BBMdaZYQh0Jf2rbN1
x48ficevsx7v7lqe99d9vL3XPuXHiKlx4zGKv9H6GtKIen4BBIJRmPb5BdEnLshL
zUArhgFElLvbb3ZZvzHZHT+zK1Dt1rC7jAisy8QU4Qfh92H9GeAdvt8B7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+iT30/yZY7gcoKhbwMHw/dlsZTMB8GA1UdIwQY
MBaAFCfnEc40Am5XrzKQx94s0h3GceD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSi1jUnpqUUNibGV2TXBESDNpelNIY1p4NFB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yNmMwZjktMjRhNC00NmZkLTgwNDIt
YjcyZTVmZWY4ODZhLzEvSi1jUnpqUUNibGV2TXBESDNpelNIY1p4NFB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8yNmMwZjktMjRhNC00NmZkLTgwNDItYjcyZTVmZWY4ODZh
LzEvSi1jUnpqUUNibGV2TXBESDNpelNIY1p4NFB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/3L6QoY
0/2/DRbKk9p1JwwcqXOA7kHDruFa0w0RTCtQ56nUuyAtaOhm6hOh4GI+biWxRdGf
QSQEemvij1+eJ6L6seSrKrCFFu/1pYxn63JKWod2K6Kk+7YR5WOGYLUXCD4wdzkQ
vpqahd/e/aAdd58tb9UXTNCKdL6pbdIYhCXJhKXKni0GKT6ZNOPPqux9CTjZaS6i
cNnxPJY9uBnIjF7x18G/qVG29EISNrgDzh/OgtgH6RF7ynPiFcOpp4tNXSyd4GVp
Ovxg1CxlK+Lw7ZIn4VD7WjAHiK2vjJXiqhbOvxQdp+v3QS3ubm4eds8Ypi1RzEqS
n45q8t9z7rqhmQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:00 2026 by rpki-client