Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
File: J7irrCClmMyksS9ddV2OiTIfTsk.mft (raw, json)
Hash identifier: G58xq9r5UkL/XAM6FI+0GYL/zEBqS+g7QcVmE2tpLLA=
Subject key identifier: 78:80:4D:3A:12:72:B2:FD:3B:0D:6B:7F:8A:53:C4:E2:D8:50:E3:3E
Authority key identifier: 27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9
Certificate issuer: /CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
Certificate serial: 019CAC46EDBECA36EA12503EE2934551FE34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
Manifest number: 11BC
Signing time: Mon 02 Mar 2026 02:00:55 +0000
Manifest this update: Mon 02 Mar 2026 02:00:55 +0000
Manifest next update: Tue 03 Mar 2026 02:00:55 +0000
Files and hashes: 1: EXA4SpEwX1vQWpFirH7mk4IJU8M.roa (hash: Lyc+y0k9pCkViy1JNMhW8hiC3bm7cXEkAowTAltTXTA=)
2: J7irrCClmMyksS9ddV2OiTIfTsk.crl (hash: lan8IHpkgFoe3AMYIfrRfMq4Sw+wQzRYKIhf+1urAYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ed:be:ca:36:ea:12:50:3e:e2:93:45:51:fe:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
Validity
Not Before: Mar 2 02:00:55 2026 GMT
Not After : Mar 3 02:00:55 2026 GMT
Subject: CN=78804d3a1272b2fd3b0d6b7f8a53c4e2d850e33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:10:06:ec:29:fb:2b:91:06:63:ae:1e:d9:
3b:96:14:cf:65:29:cd:03:cc:25:d3:3c:35:2b:4f:
1a:2b:31:2f:e7:4d:0f:34:e2:64:90:6c:54:2a:c8:
c5:22:42:7b:15:30:c6:a7:e2:89:e1:69:cc:a3:60:
71:47:b8:ea:36:d1:ec:64:70:e4:5a:2d:45:1e:32:
96:d6:0a:66:a1:b7:89:4f:93:28:02:8f:b5:49:96:
73:96:04:2b:10:fe:35:a1:f2:b4:20:67:56:5d:14:
12:a2:e7:f5:05:0a:7c:1d:74:70:8e:d1:8e:d2:c3:
84:9b:46:9e:99:92:d9:79:ef:0d:c6:82:30:be:88:
26:8c:8b:4a:9d:e5:66:be:f6:89:4f:bf:6c:52:26:
f5:14:ed:22:70:c5:c8:bb:5d:ae:95:de:fb:8d:28:
5a:54:da:92:a5:48:b2:02:3e:a4:62:78:c3:80:e3:
14:f0:5c:c2:14:f9:00:d7:66:0c:2c:3d:0b:1b:63:
f9:2c:63:ca:be:c6:e5:be:28:e8:e3:da:4f:dd:d0:
00:72:35:56:aa:e1:87:b5:c9:a9:01:d6:93:59:7d:
83:ec:a7:9a:a2:2c:b4:ff:b7:77:db:10:5f:29:b3:
f8:f9:08:a5:be:cf:f8:c3:19:0d:09:3c:37:77:e5:
2f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:80:4D:3A:12:72:B2:FD:3B:0D:6B:7F:8A:53:C4:E2:D8:50:E3:3E
X509v3 Authority Key Identifier:
keyid:27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f0:86:0f:88:49:94:bc:f4:6b:d0:b9:73:cd:70:63:8c:e6:
42:3f:2a:8e:9a:06:39:89:15:50:b0:a3:db:86:ad:22:4e:53:
fe:8b:de:69:5d:bf:83:e6:a9:da:22:7c:ad:35:b2:fe:56:73:
21:c9:a8:88:52:36:8a:a4:2d:69:d3:76:b6:67:68:49:93:b6:
7b:f6:d5:30:65:4c:3d:2b:7c:88:a0:d0:4c:c4:5b:cb:42:92:
3c:32:46:ea:88:b0:7e:c4:4c:fa:ec:7e:93:d1:2d:d2:94:3a:
29:67:f7:87:d4:83:92:d7:53:66:9b:d2:78:1f:24:8f:2d:7c:
98:55:3c:e5:c8:67:c6:ff:45:0c:2f:d8:a5:c2:d7:92:c2:0d:
d5:d6:85:ff:df:76:17:46:06:69:db:29:19:2d:2e:fd:f2:bf:
ad:86:81:5e:72:61:08:ae:85:15:10:ee:5e:43:17:8b:09:91:
4a:c5:e5:e2:db:b5:3f:e8:cc:e5:8d:dd:b8:28:bd:08:72:d9:
0e:22:ec:29:f6:0f:5b:fb:85:cc:5e:7e:38:c4:42:94:9c:2e:
cb:6b:dc:4d:ba:77:e6:b4:cc:10:73:33:95:4f:a1:98:b4:6f:
cb:ce:47:99:19:eb:56:09:9e:1c:6f:7f:c0:1b:db:a6:7a:2d:
c5:ed:8f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:00 2026 by rpki-client