Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
File: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json)
Hash identifier: hzA2ptoNCdJYPNymS8g+fvoi8AUGq9AQ0erBCU40+vc=
Subject key identifier: 61:16:67:9B:7F:8E:49:A1:37:29:D9:F7:0B:33:C9:3E:CB:74:0F:9E
Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249
Certificate serial: 01A0D26E055EFF6F9E1209C26074697F03F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
Manifest number: 18C7
Signing time: Thu 24 Sep 2026 08:00:20 +0000
Manifest this update: Thu 24 Sep 2026 08:00:20 +0000
Manifest next update: Fri 25 Sep 2026 08:00:20 +0000
Files and hashes: 1: 6H-9AoNqSrBI_cHU_8jwycSpvuQ.roa (hash: KiQDrwuKHeqxHDHuFUTDtaD1ZiwMGGrMOy/IRx+eThE=)
2: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: G2wumrPUUAy/iX2K1QTHzQVrG7DyoIQycAUTFraImQA=)
3: _zWse9VeR2Ks8Tmud0pKUxt54Rs.roa (hash: nVGx0eRXA+P6cmYQPgwiiD4iTa2vIfOtyuiTU3+mtfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:05:5e:ff:6f:9e:12:09:c2:60:74:69:7f:03:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249
Validity
Not Before: Sep 24 08:00:20 2026 GMT
Not After : Sep 25 08:00:20 2026 GMT
Subject: CN=6116679b7f8e49a13729d9f70b33c93ecb740f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:5a:b9:a2:84:95:f0:27:39:c7:75:c1:8b:
2e:f5:81:1b:a7:97:8b:16:57:3e:4a:09:56:93:76:
00:37:f5:2a:e3:43:6b:a7:43:a3:5f:3d:58:93:ad:
d9:9a:1e:70:ff:91:1f:18:0d:d3:7e:b2:30:69:0e:
b6:56:cb:ed:83:e6:3d:25:02:d2:91:d6:b9:ff:d4:
cd:39:ef:a2:c7:ce:ab:e9:9b:91:01:58:98:ae:db:
6c:f6:da:1e:91:4b:81:4e:00:05:b6:5c:7b:d5:18:
ec:2a:98:95:a9:ac:55:c6:0e:92:55:86:d9:0a:43:
e4:29:e2:ce:c2:f3:35:a8:15:f0:61:3a:0b:b1:af:
f1:c2:e1:af:0f:25:4d:de:63:54:37:73:7c:ab:80:
0f:92:7b:63:71:78:f2:11:4d:82:88:f2:f2:ba:a3:
7b:45:2a:6a:cc:d0:0d:2b:0a:72:61:1c:80:ed:bf:
8e:ee:66:8c:d5:cd:7d:19:3e:9f:a5:02:31:a3:39:
36:61:b8:93:1a:a2:69:f8:2c:e9:19:de:f6:43:6b:
d3:2c:ad:05:50:df:06:09:72:a8:4c:d2:77:8c:07:
ba:58:04:92:94:fc:27:39:fc:90:1c:2e:9d:cf:ca:
0f:a2:c4:eb:46:d0:4a:e2:ea:b7:b8:e4:7b:db:ab:
ac:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:16:67:9B:7F:8E:49:A1:37:29:D9:F7:0B:33:C9:3E:CB:74:0F:9E
X509v3 Authority Key Identifier:
keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a5:9a:69:f5:d5:62:bc:d3:d8:0a:19:ae:d7:e6:6b:ff:6f:
d6:60:87:5a:3b:01:6a:67:e2:7d:5b:49:7c:f0:de:62:3d:d1:
5a:cd:65:91:e5:47:d0:f4:4f:d5:3e:88:69:cd:ad:ba:be:e6:
fb:20:a9:ca:34:76:3c:b9:91:da:3c:18:ce:0f:ff:10:f6:e2:
51:2c:75:1d:c0:d8:c6:7c:ea:13:da:78:ac:1a:94:10:0e:00:
26:93:1e:20:0f:e3:8f:e0:07:cc:e3:88:d5:4f:4d:ec:58:f1:
93:65:0a:bc:9b:f4:38:a2:66:63:e9:ed:71:ce:7d:53:c9:41:
e6:5c:7f:c3:75:34:25:3e:59:5e:3c:d2:c7:97:fb:6e:65:2b:
6d:0f:f3:7c:65:73:09:de:78:7f:cb:df:b3:55:4f:05:98:17:
67:51:44:9a:42:9b:40:d8:66:d4:48:d1:85:f2:da:05:69:b3:
dd:a2:dc:60:7b:d0:43:c5:cc:07:70:58:3d:08:84:b7:ab:8d:
db:19:71:e7:5a:c8:58:31:7f:45:b6:ab:be:89:df:10:ab:91:
05:5d:5b:0c:2e:05:6a:54:b4:8c:cc:ef:92:17:af:07:04:35:
0c:80:85:66:60:de:b0:0c:ee:f3:7b:30:fd:9b:d3:6a:e1:9b:
83:e3:c4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:16:59 2026 by rpki-client