Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
File: J4YXdA7NlbcE2pel-eU8AxFEQms.mft (raw, json)
Hash identifier: 9kqH3c0cGpTuh3AvVcRUwo2LrTF6F0igd2M7aPleNdU=
Subject key identifier: 95:EA:AC:6F:C5:2A:FB:1A:CA:0A:A7:23:58:52:B3:F3:77:AD:9A:43
Authority key identifier: 27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B
Certificate issuer: /CN=278617740ecd95b704da97a5f9e53c031144426b
Certificate serial: 01A0DCBB7B3209777ABD6AC776B75A3D9EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
Manifest number: 161B
Signing time: Sat 26 Sep 2026 08:01:09 +0000
Manifest this update: Sat 26 Sep 2026 08:01:09 +0000
Manifest next update: Sun 27 Sep 2026 08:01:09 +0000
Files and hashes: 1: J4YXdA7NlbcE2pel-eU8AxFEQms.crl (hash: GWTj7len41153F7+AswVxDkk1x+ZKIVJ6KZS8c0yG8U=)
2: hv5F2fKm7cZ-fqlTGhS4HLwa_Mo.roa (hash: 3e8QQ5wpWIE1xn2kF+A/CiSMbxQICMGVp/zM+nv9PN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:7b:32:09:77:7a:bd:6a:c7:76:b7:5a:3d:9e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278617740ecd95b704da97a5f9e53c031144426b
Validity
Not Before: Sep 26 08:01:09 2026 GMT
Not After : Sep 27 08:01:09 2026 GMT
Subject: CN=95eaac6fc52afb1aca0aa7235852b3f377ad9a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:a3:71:22:d1:bb:d1:56:71:20:6e:44:40:
97:cd:ef:9d:d0:2f:85:67:8d:0c:0d:8e:5b:e2:56:
47:53:22:ea:8f:79:e9:78:69:37:2c:60:f4:ef:91:
27:62:32:d6:2b:70:1e:4d:21:1c:e2:d4:49:b3:ad:
1c:2f:73:05:05:cb:81:ca:46:fe:f4:75:5a:ad:c3:
ae:68:b3:29:8e:8d:60:ee:c4:99:44:2b:94:b5:22:
3d:0d:07:d2:32:53:91:ca:74:a1:26:c5:2c:2f:8e:
db:56:47:88:5b:59:7c:8e:ea:f4:f3:09:d6:cf:20:
7f:ae:d8:f1:04:8f:bc:49:a0:d1:85:a3:6b:f3:db:
b6:dc:51:24:a2:7c:c6:8a:7c:93:ac:45:33:a9:51:
2d:22:1b:66:34:1c:e2:35:89:7e:98:48:81:90:85:
07:ae:2b:0c:f6:ee:69:40:af:b7:3e:71:cc:c0:21:
ee:86:43:f2:5e:14:cd:fd:d7:50:f5:d3:b3:f9:1c:
96:2a:6f:4f:95:5f:ff:31:67:5c:40:6c:6e:39:8e:
91:c2:82:81:e9:c3:89:90:ab:a3:d3:74:1e:2a:4e:
f2:f5:e1:fb:9f:8d:c5:48:9e:48:c1:94:38:54:60:
2d:ad:07:b1:ea:3b:45:91:b4:90:73:9e:23:71:90:
96:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EA:AC:6F:C5:2A:FB:1A:CA:0A:A7:23:58:52:B3:F3:77:AD:9A:43
X509v3 Authority Key Identifier:
keyid:27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2b:16:17:b8:61:69:cf:46:24:f9:6c:cc:03:b8:ce:41:03:
e2:67:79:96:cb:fa:fd:7d:5f:14:65:94:76:4e:80:27:9c:f8:
68:4a:b0:46:6d:ae:04:40:77:21:89:e3:f9:99:3f:1f:0e:94:
36:55:8e:42:16:75:ce:7c:c0:1c:07:e3:ab:be:b9:fd:61:d1:
1d:52:0c:2f:39:61:31:6a:15:e5:d4:20:b0:7c:7b:31:ed:8f:
0b:3b:d9:db:23:1e:9a:f1:dc:4b:2d:4a:29:19:fc:98:cc:30:
63:64:b4:d3:6f:a8:59:f9:66:c1:1c:78:e0:01:72:12:1c:68:
a1:b6:ca:ce:d4:70:78:36:0f:bb:54:86:3e:fe:bc:8a:9a:ad:
c3:62:73:a6:b6:47:3e:97:21:c0:93:e1:42:ed:0f:12:71:ac:
e3:e6:30:99:00:d3:c5:e4:4f:aa:6a:f2:e3:3c:e2:c8:52:1f:
55:ee:f4:4c:74:d0:02:46:78:90:54:78:e0:33:0a:ac:82:19:
3f:d6:fd:24:f7:ad:76:13:9a:d3:68:ec:ef:0c:c3:03:09:15:
a0:e1:a5:b7:b5:d1:42:31:a7:9b:cf:a4:63:ae:4f:2b:3b:df:
a5:51:dc:6b:80:68:c0:8f:e5:e5:43:56:0e:83:15:c6:c6:0d:
e7:9d:16:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:31:35 2026 by rpki-client