Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
File: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json)
Hash identifier: l0t0rmhA4FC+vIEw8/qWHy/7Za5/dQm3zCmbeXJsRY8=
Subject key identifier: 36:5C:36:B1:FA:74:6D:E6:07:2B:B7:55:9A:ED:19:86:B8:33:B1:68
Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249
Certificate serial: 019D99D0589F0B45C5243CA162BA1B946C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
Manifest number: 171C
Signing time: Fri 17 Apr 2026 05:01:01 +0000
Manifest this update: Fri 17 Apr 2026 05:01:01 +0000
Manifest next update: Sat 18 Apr 2026 05:01:01 +0000
Files and hashes: 1: 6H-9AoNqSrBI_cHU_8jwycSpvuQ.roa (hash: KiQDrwuKHeqxHDHuFUTDtaD1ZiwMGGrMOy/IRx+eThE=)
2: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: rGX4UerT6KYm2tVka2XX2Qeh5lhwT21xnRvqD7ZCrtQ=)
3: _zWse9VeR2Ks8Tmud0pKUxt54Rs.roa (hash: nVGx0eRXA+P6cmYQPgwiiD4iTa2vIfOtyuiTU3+mtfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:58:9f:0b:45:c5:24:3c:a1:62:ba:1b:94:6c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249
Validity
Not Before: Apr 17 05:01:01 2026 GMT
Not After : Apr 18 05:01:01 2026 GMT
Subject: CN=365c36b1fa746de6072bb7559aed1986b833b168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0e:34:e3:91:13:6d:62:b5:60:f9:07:47:b7:
ad:eb:3c:4a:6b:51:9b:0e:85:d4:d5:e9:b9:6b:d4:
5b:75:86:41:6a:27:2f:69:6b:33:ef:17:94:d3:6d:
0b:61:fa:e3:f7:65:05:b4:24:14:69:41:62:2a:51:
ad:6e:49:2e:ce:bc:e1:73:ef:d7:4e:67:b5:b4:86:
92:e6:66:91:07:ee:43:df:a7:4f:00:a7:29:89:5d:
46:70:9a:86:b2:71:b3:5f:cb:ae:08:f9:85:de:9f:
74:35:1a:5d:4d:b1:5a:c7:e8:b6:d6:1d:ca:24:6d:
a9:0a:55:dd:94:90:b0:9f:de:0c:5d:88:64:ba:9d:
7d:98:89:6a:99:de:ba:5d:9f:b9:b1:da:0e:fb:0b:
88:87:30:2a:df:eb:3c:d5:c2:d4:db:0c:e0:23:d5:
84:8f:50:59:94:26:e2:c0:95:78:f2:1a:2a:2e:1f:
19:52:49:6d:d4:5c:dd:ed:e5:8a:b5:5c:23:8e:0d:
27:5f:c6:06:b4:70:85:f1:cb:0e:61:89:22:50:a4:
5f:72:1f:bb:6a:1e:ee:8d:ac:b1:e5:b2:9c:1e:d7:
ea:e2:07:64:61:21:04:a7:85:01:66:06:92:f7:b0:
51:82:20:6c:dc:9a:f1:30:d5:04:a9:7e:ca:a7:e7:
82:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5C:36:B1:FA:74:6D:E6:07:2B:B7:55:9A:ED:19:86:B8:33:B1:68
X509v3 Authority Key Identifier:
keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8c:d8:d4:2f:3c:b5:a6:16:69:72:9c:42:99:5c:a2:fc:b1:
49:f1:47:24:f5:d9:99:ae:8e:1f:9e:09:de:e6:4e:7c:01:e9:
36:b7:c2:df:0c:a4:88:e2:29:fd:1a:5b:92:09:3d:99:74:ae:
1e:ec:15:9b:99:36:ee:da:b8:62:5d:ab:22:4a:e9:fd:d0:0e:
24:78:d1:f3:c8:b6:bc:c3:ff:7b:bb:f0:51:1a:30:27:d1:fa:
bf:f3:1a:e2:a8:c3:3e:5a:7b:dc:95:ab:8b:ef:9e:1c:78:b9:
b8:2e:8a:ca:bd:2e:d2:b9:a3:4f:1b:6c:95:8b:d1:1c:ab:a5:
50:97:3d:6e:dd:94:0a:7f:7f:3f:d0:84:c3:12:a8:ed:2c:3e:
ee:a9:bd:04:dc:5f:d7:75:82:9d:5d:80:db:30:56:03:9f:39:
b5:a2:36:ad:c5:56:ff:ec:c9:60:25:19:c3:76:07:99:76:45:
81:db:4a:6e:f9:88:f2:ed:c4:bc:96:70:4a:eb:eb:47:e3:2a:
1e:3a:f1:86:4f:49:0c:5e:7b:87:51:f5:12:a7:d2:18:94:56:
ef:42:f2:f3:22:24:77:56:c5:75:6d:3f:0c:cc:22:6b:9d:35:
83:59:ca:9b:e3:8a:bc:1f:1b:bc:23:39:4d:b3:c5:3a:a6:34:
6a:80:3c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:28:13 2026 by rpki-client