Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
File: J7irrCClmMyksS9ddV2OiTIfTsk.mft (raw, json)
Hash identifier: uAZDul+EEqarejxlPyz47NPQZ8EK3Nm4wWjU8xHLAeM=
Subject key identifier: 45:1E:C4:9B:2F:A9:B8:04:C3:2D:C0:23:42:11:56:24:EE:D1:25:32
Authority key identifier: 27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9
Certificate issuer: /CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
Certificate serial: 01A0DE05B496ED1CCB783BD2047B897D4F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
Manifest number: 13E8
Signing time: Sat 26 Sep 2026 14:01:50 +0000
Manifest this update: Sat 26 Sep 2026 14:01:50 +0000
Manifest next update: Sun 27 Sep 2026 14:01:50 +0000
Files and hashes: 1: EXA4SpEwX1vQWpFirH7mk4IJU8M.roa (hash: Lyc+y0k9pCkViy1JNMhW8hiC3bm7cXEkAowTAltTXTA=)
2: J7irrCClmMyksS9ddV2OiTIfTsk.crl (hash: fAhk5+K7YLG4aL8XnJLTwokEWrAZviQ1SkAx6wzEKIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:b4:96:ed:1c:cb:78:3b:d2:04:7b:89:7d:4f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
Validity
Not Before: Sep 26 14:01:50 2026 GMT
Not After : Sep 27 14:01:50 2026 GMT
Subject: CN=451ec49b2fa9b804c32dc02342115624eed12532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ad:b6:d7:47:ec:cb:3a:59:5a:dd:a3:9f:3f:
02:b6:31:c3:45:86:41:52:1e:15:84:c7:28:f7:22:
4c:29:3b:d1:02:2e:20:6a:c4:c2:40:b6:dc:04:33:
fa:45:0b:e7:6b:27:a8:5e:82:3b:6d:f4:de:7b:95:
1e:6a:d1:98:8d:66:3b:6c:4f:e6:cf:de:e6:d6:51:
29:da:ad:7e:91:2d:19:02:26:2f:64:69:10:95:40:
ba:3d:3f:0d:1e:ef:41:67:f7:3f:33:26:5f:b1:11:
a6:58:e2:d8:60:c2:87:df:a8:d8:62:b5:41:40:7a:
2c:3f:2b:af:38:95:11:af:5e:34:69:aa:58:64:fe:
3a:e8:26:1e:a8:fc:42:27:98:31:c5:c6:d2:d3:0f:
0d:a1:f0:7f:f9:44:7d:4a:00:46:8f:ee:31:79:0b:
13:32:63:8a:0d:96:6c:2a:34:5c:f3:9e:d2:d1:33:
d8:1f:f5:b3:4e:78:ad:c3:94:68:aa:9f:c7:2c:e5:
67:3d:70:15:8e:a8:d3:cc:66:b5:80:ec:4e:d4:dc:
5b:a4:34:c8:2c:53:a2:4f:c2:be:02:64:43:8c:64:
61:71:7e:65:75:9d:c7:72:fb:f3:2c:79:e8:11:86:
4a:74:19:bd:2f:64:86:f5:5d:b2:02:f3:23:bf:93:
6d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1E:C4:9B:2F:A9:B8:04:C3:2D:C0:23:42:11:56:24:EE:D1:25:32
X509v3 Authority Key Identifier:
keyid:27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:97:b3:92:dd:ac:1f:24:a7:dc:aa:c7:b2:c8:82:d9:96:60:
5e:0f:3b:63:47:28:73:63:e0:88:be:a1:a9:5f:8c:44:a7:96:
a9:d6:55:86:1f:56:e3:ef:d5:93:0c:90:e2:b6:bd:c8:ea:9a:
3f:33:cc:d6:0a:b1:75:f0:48:ed:96:a4:0e:0b:31:c8:2f:c3:
58:cc:8d:3f:1c:24:d3:d9:db:b7:32:65:6d:ea:b6:18:0e:d8:
51:08:8a:2f:e6:a7:90:52:db:6d:fd:4a:4a:26:23:51:5f:20:
a8:8e:18:19:10:0c:64:3f:0d:f5:6b:df:32:6b:4b:18:5b:19:
ee:85:55:4d:23:b3:06:43:d6:35:8d:f2:c7:e0:f2:3b:c9:db:
cc:4d:0c:c4:63:75:4b:86:4c:70:b7:f7:dc:08:01:16:e3:64:
d8:9c:e4:33:d6:94:0e:a3:0e:8e:46:50:89:d5:e1:b3:0f:8b:
df:ac:d6:cf:ca:61:d1:30:28:93:16:35:1c:61:b9:f4:14:4d:
5f:03:75:51:0b:98:45:89:84:35:a3:9a:5b:b0:c7:85:c4:7e:
84:cd:de:be:e1:a3:20:04:32:42:94:eb:a0:f8:5d:95:1e:c2:
5f:cd:33:e1:9f:3c:a5:d7:db:cf:0e:3f:75:ed:b3:7a:30:11:
d5:da:05:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:39:57 2026 by rpki-client