Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft
File: J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft (raw, json)
Hash identifier: NQ3z5mqs04jXuy0k+QEmbb53BVef6nBzPnTNoDXP0v4=
Subject key identifier: 2F:BD:F9:54:11:19:0C:C8:7D:60:60:BF:DD:A0:8B:90:B1:6B:FE:55
Authority key identifier: 27:81:00:BF:DC:37:BC:79:92:41:F8:37:60:C9:AD:11:53:44:D8:B0
Certificate issuer: /CN=278100bfdc37bc799241f83760c9ad115344d8b0
Certificate serial: 01A0CA47863EE067D16119D6D597C0E4C9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4EAv9w3vHmSQfg3YMmtEVNE2LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:01:19 +0000
Manifest this update: Tue 22 Sep 2026 18:01:19 +0000
Manifest next update: Wed 23 Sep 2026 18:01:19 +0000
Files and hashes: 1: 85mSZls-XHlgJOvWmgk-VtOFBkA.roa (hash: FPNYFDWtHSvEK1gnIwxleo9g0+U1nGpA9pdz6kB33Sg=)
2: J4EAv9w3vHmSQfg3YMmtEVNE2LA.crl (hash: Ihx6uZ9o6n7EcoQ8mnN9oSSDPoYQv8X7520vmZKaSVk=)
3: kbQFQOWzDlX0E1V08cvnijkeOTY.roa (hash: ZvoM8j+qNFn5EDYwxPR3kym37UjIAoq+nL3E4fERgJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4EAv9w3vHmSQfg3YMmtEVNE2LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:86:3e:e0:67:d1:61:19:d6:d5:97:c0:e4:c9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278100bfdc37bc799241f83760c9ad115344d8b0
Validity
Not Before: Sep 22 18:01:19 2026 GMT
Not After : Sep 23 18:01:19 2026 GMT
Subject: CN=2fbdf95411190cc87d6060bfdda08b90b16bfe55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:97:36:8c:3c:e7:c4:a5:e9:7f:e0:fa:fb:
62:60:b3:b5:2f:e4:1b:3a:4b:89:74:94:be:2c:28:
b3:38:5a:67:b1:a5:9f:42:92:99:fb:0e:b4:0e:42:
46:29:1e:29:d7:f9:2d:37:b5:93:28:ba:af:a4:4e:
3c:01:5a:e8:49:05:30:4a:45:37:ad:84:22:d2:b0:
4b:c3:37:52:33:1e:92:a7:47:e4:d4:6a:6a:66:cd:
84:a3:9e:ac:2c:55:59:97:7c:9a:5b:fa:87:aa:51:
77:6c:05:81:54:d5:55:f3:26:b0:7f:16:6a:f8:c8:
81:5f:3e:9b:a1:a4:1b:f8:2a:30:e9:4f:d9:06:e1:
c3:c2:60:8a:1b:9d:36:0e:9e:e6:64:71:04:31:26:
47:75:8a:1e:25:0e:ee:c5:0a:da:22:6e:6a:fd:46:
61:dd:02:44:bd:3a:3f:7d:cf:1f:2b:6e:c7:02:62:
d3:fd:dd:fd:b2:0b:5b:81:6a:30:87:79:e4:c1:02:
cd:bd:c0:2d:e9:cc:c0:e6:2e:c4:8c:5a:22:b6:77:
5c:f0:f8:80:bb:12:db:a2:7f:c9:94:8e:c2:21:5f:
cb:9f:41:bb:11:4a:c9:fe:81:c0:fe:a5:34:54:68:
b1:98:f2:2e:17:da:17:8a:75:0b:a6:92:c8:5e:ce:
bc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BD:F9:54:11:19:0C:C8:7D:60:60:BF:DD:A0:8B:90:B1:6B:FE:55
X509v3 Authority Key Identifier:
keyid:27:81:00:BF:DC:37:BC:79:92:41:F8:37:60:C9:AD:11:53:44:D8:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4EAv9w3vHmSQfg3YMmtEVNE2LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ab:67:0b:2a:c3:de:e1:c4:f7:06:97:b9:60:46:c0:4d:d6:
3b:25:c4:98:c8:e0:53:27:19:77:58:0a:fc:2e:93:f0:36:d1:
39:4a:04:e8:74:85:ba:66:ca:8c:6f:76:bd:9a:d8:28:69:09:
be:22:ec:3c:b0:ce:b2:70:c0:c8:fa:60:e8:1d:26:81:1e:95:
0c:af:65:47:af:1f:c2:7b:dd:76:86:98:b9:3f:8e:91:a4:ca:
9a:f2:35:b3:80:47:ed:eb:9e:eb:96:dc:42:bc:ad:92:40:97:
6c:3c:f8:07:7b:9f:b0:cb:8f:4b:13:81:4c:d3:16:90:14:b2:
76:e0:e6:32:db:b4:b9:7a:ad:73:3a:c6:9a:ee:e9:35:62:e6:
62:77:2b:a4:f9:76:06:7a:09:32:bf:e8:b6:26:57:64:45:8b:
69:bc:07:21:9b:60:6f:56:a7:14:fd:f6:3b:85:8a:d8:5e:e1:
dc:07:36:b1:3c:c7:dc:06:29:1f:82:15:ab:14:b5:19:6e:33:
74:d9:fa:fc:d8:a6:eb:1e:12:fe:01:24:5d:25:6b:58:d3:73:
fd:b2:88:c2:8b:a6:e7:1f:d8:9d:24:28:53:4d:f2:90:39:45:
3e:c5:0b:89:ba:32:2d:6c:db:00:66:df:b5:e2:e0:bd:f1:e9:
65:6f:8b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:19:49 2026 by rpki-client