Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
File: J5M1a3LBBBztecoRRZUreMtGb8A.mft (raw, json)
Hash identifier: d1rk1wbIQMlABbL+y1pZwUmlAnPpAb2/+Gg5tj0Rgpg=
Subject key identifier: F8:BD:F8:98:AB:B3:6B:7A:86:40:EC:6D:F3:1A:1B:D0:D8:7E:69:4B
Authority key identifier: 27:93:35:6B:72:C1:04:1C:ED:79:CA:11:45:95:2B:78:CB:46:6F:C0
Certificate issuer: /CN=2793356b72c1041ced79ca1145952b78cb466fc0
Certificate serial: 019DA59CF72FD0A594E0E5CDD670F0D0F112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
Manifest number: 0D
Signing time: Sun 19 Apr 2026 12:00:20 +0000
Manifest this update: Sun 19 Apr 2026 12:00:20 +0000
Manifest next update: Mon 20 Apr 2026 12:00:20 +0000
Files and hashes: 1: J5M1a3LBBBztecoRRZUreMtGb8A.crl (hash: 0fiA4Mr9P7TFnbyZmRNKu0xN1JcnWlbp/WXJAXPxoSY=)
2: iXFt1KY0aqsyx-9Vdc9e4RKOA5Y.asa (hash: UPxLBpOmrMbXDNQ7hogNRA77L99FxDK6/MOEI7JjMOY=)
3: k3PO0XiLFwevKSf5kgFB8CckAoo.roa (hash: 3ZT0fPbZiRqzWH4bsacy5YP5K85Xrhz1kRXfC2g2D9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9c:f7:2f:d0:a5:94:e0:e5:cd:d6:70:f0:d0:f1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2793356b72c1041ced79ca1145952b78cb466fc0
Validity
Not Before: Apr 19 12:00:20 2026 GMT
Not After : Apr 20 12:00:20 2026 GMT
Subject: CN=f8bdf898abb36b7a8640ec6df31a1bd0d87e694b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:9f:51:64:7a:03:b8:29:c6:c5:22:64:62:
5e:76:6e:f8:55:54:e9:9a:a9:bb:a6:db:26:7c:42:
fa:33:bb:49:ea:36:f1:b9:b9:58:ba:6b:57:9c:57:
de:2a:3e:87:d5:87:bb:bd:70:bc:1f:37:70:98:8c:
0c:d6:9e:b4:5f:52:bd:d0:dc:b4:6b:1e:b1:a1:c8:
3f:62:68:d3:e6:35:40:64:90:3c:19:09:c5:8f:fe:
c1:59:96:f8:43:93:b2:75:d0:a6:f2:b2:c7:f4:92:
82:f7:38:7f:c2:c8:b3:a5:26:80:14:3d:3c:44:b3:
bf:a1:3e:2d:22:5e:12:78:ba:d1:69:01:46:7d:29:
3d:24:b6:db:03:b8:b1:a9:0d:43:28:e2:38:68:49:
8b:84:e3:36:96:4f:0b:cc:01:a8:2f:4b:37:ef:0e:
65:e5:40:be:9d:c6:40:ef:31:c0:58:16:34:4d:d7:
62:04:0b:e8:fe:80:21:42:4a:16:45:0e:5c:43:47:
58:05:bd:d8:53:36:f9:c8:12:bc:08:86:e6:2d:3c:
12:d9:80:3d:56:8a:99:66:2e:64:a5:e1:5a:a2:af:
d9:3a:b0:96:88:f1:38:37:25:28:ca:91:ec:8c:f3:
78:df:a6:88:cf:11:3a:db:59:c5:11:51:48:00:77:
27:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BD:F8:98:AB:B3:6B:7A:86:40:EC:6D:F3:1A:1B:D0:D8:7E:69:4B
X509v3 Authority Key Identifier:
keyid:27:93:35:6B:72:C1:04:1C:ED:79:CA:11:45:95:2B:78:CB:46:6F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ac:c6:c8:ae:ce:13:8b:81:84:24:fb:16:4d:cd:f9:d7:f0:
f2:6c:d3:52:b1:f6:60:4a:ac:79:32:fa:d8:e2:5f:f6:02:62:
87:d6:09:28:4c:9c:07:04:31:97:c2:f0:fc:88:9a:f1:bc:37:
b5:a8:3e:86:5a:6c:18:8e:a5:64:55:e8:8b:a3:ce:dc:b7:eb:
62:94:e6:22:02:7c:b5:90:eb:b3:40:fe:00:bd:10:5a:45:6a:
f5:7d:57:39:28:37:a5:25:1f:38:42:f7:f7:64:1d:0a:21:a4:
65:5a:b5:44:94:fb:ef:d5:ef:07:4a:e1:c9:28:94:30:15:ce:
de:db:63:e6:e0:b7:2c:3c:35:b8:49:4e:fe:01:80:1b:81:b7:
d7:bc:9d:32:d9:b8:47:71:9d:a1:ad:82:64:5b:e8:1e:60:76:
8b:60:92:a2:76:90:22:d1:b7:09:c4:7c:f0:69:9e:fb:b0:21:
55:fc:58:b6:87:6e:a6:70:33:a4:80:43:5e:0a:cc:5f:be:07:
0a:56:72:4a:58:21:ba:0f:4f:6d:ab:ff:20:b4:6b:8f:87:40:
d9:dd:20:cc:99:01:de:a5:eb:84:5d:df:13:f6:b5:34:d3:d2:
f4:84:80:eb:0b:35:99:b4:b8:57:fc:33:42:be:e7:bf:02:f5:
ae:2c:21:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:41:03 2026 by rpki-client