Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
File: J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft (raw, json)
Hash identifier: tOYAmlYJFUIQ99pDUVuJ8WUvZhOo+g2JcPRcYSZ0zPM=
Subject key identifier: C2:D7:DC:78:86:5D:B2:D2:FD:92:7D:A8:AF:9F:30:26:03:85:53:3C
Authority key identifier: 27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
Certificate issuer: /CN=27802685da734b157a2db9ccff76dd4e48911928
Certificate serial: 019CAAC70F23E8DCA3B560764624B0F2CE29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
Manifest number: 155F
Signing time: Sun 01 Mar 2026 19:01:38 +0000
Manifest this update: Sun 01 Mar 2026 19:01:38 +0000
Manifest next update: Mon 02 Mar 2026 19:01:38 +0000
Files and hashes: 1: J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl (hash: B4BGx8JWsmCNZOg1kp7UyrSMs0+ZNuclc3Zz62kXONU=)
2: ax6eIjHYuyl0QBv51Atz3wWcyoE.roa (hash: VeATSBlllh5K01G1TOhorfGAawwB+xV+zgL6EEsH3z0=)
3: ky99BlOPlH5O6f7O36UwCkNpB5c.roa (hash: tyITeyFzQukDFtq+qQfcsC7Kui3xVMsWGSDU3eA4x4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:0f:23:e8:dc:a3:b5:60:76:46:24:b0:f2:ce:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27802685da734b157a2db9ccff76dd4e48911928
Validity
Not Before: Mar 1 19:01:38 2026 GMT
Not After : Mar 2 19:01:38 2026 GMT
Subject: CN=c2d7dc78865db2d2fd927da8af9f30260385533c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d2:81:23:78:cf:18:20:71:7a:37:5a:18:d8:
97:cc:f3:bc:37:3b:63:66:1d:15:3c:d5:1d:08:79:
cd:91:4f:ce:3f:c6:b1:2c:5a:e4:ab:9b:a2:bd:86:
cc:a6:0d:66:18:54:3e:59:b1:60:60:3e:4f:47:b4:
42:7f:07:5f:5f:46:58:8d:44:94:78:cf:e4:49:71:
15:a7:40:4e:d5:c0:8f:89:be:8f:d8:dc:d6:6b:66:
e1:49:46:84:79:7e:92:36:f5:31:6d:ca:34:98:d2:
2a:7e:7e:be:f2:88:3c:c7:4c:99:52:49:0f:8f:66:
69:b5:43:46:85:b2:80:b6:2c:4a:08:28:65:98:64:
8a:2f:84:4b:ce:5c:17:c2:64:17:5a:19:b4:43:8c:
a8:c0:d6:d1:51:47:1f:32:bd:54:8b:d0:17:e3:5d:
f4:7c:d3:69:12:26:9e:dc:e2:15:ad:19:f8:c1:62:
08:30:0c:41:cb:63:c3:6d:35:54:a2:6c:51:86:41:
a5:50:1e:a4:65:38:87:fe:e6:2e:43:87:8f:bd:e1:
1b:1b:35:2c:1f:01:20:a3:43:fa:54:04:62:9a:94:
26:a5:95:a0:de:0d:ca:89:27:40:d3:cc:64:f3:4a:
b3:84:7e:d8:6a:7e:68:f8:8e:73:17:f7:02:df:10:
31:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D7:DC:78:86:5D:B2:D2:FD:92:7D:A8:AF:9F:30:26:03:85:53:3C
X509v3 Authority Key Identifier:
keyid:27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:df:5f:60:04:db:5b:e5:33:4b:cc:4e:9c:c5:47:6d:91:c8:
8e:4e:ff:d3:40:01:3c:37:2b:b0:73:56:a4:bb:71:10:aa:f9:
d9:a9:be:5f:b5:ff:51:c0:de:93:f5:b5:ab:10:8a:e1:51:0f:
ce:29:11:78:7c:23:1f:d2:ac:9e:8f:fe:71:5d:07:ba:47:eb:
9e:cb:5f:5b:da:05:f9:e7:e2:46:c7:8f:0f:e3:56:fd:db:6e:
0b:ee:5e:62:60:54:14:ea:c3:29:62:2f:0e:6f:97:a6:d9:63:
7e:a7:26:7e:8b:b2:d7:b1:41:57:f6:a0:58:39:92:8f:6a:2b:
41:30:4b:ad:97:d6:84:89:d8:6a:2b:af:5e:d2:51:d0:23:54:
2f:3c:b0:6b:d9:cf:3d:cf:aa:25:37:23:63:b6:fa:ca:61:a9:
87:da:0b:97:ab:a2:a3:ef:f6:d9:32:8a:43:41:4f:11:ed:68:
44:28:4e:e4:e6:78:de:ac:3b:fa:05:1f:78:96:a3:99:fe:11:
91:c2:52:6a:20:00:1b:d7:d6:2a:d7:3d:20:1c:2e:93:bb:98:
a1:16:c9:ec:c5:fc:d2:95:35:c7:bb:43:c1:dc:32:22:00:85:
91:98:ee:90:08:4b:66:18:70:33:a9:f1:6b:fb:09:01:0c:38:
3a:09:35:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:20 2026 by rpki-client