Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
File: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft (raw, json)
Hash identifier: dhJF4FhDbFTwj4ZnVcAQm3EoMJvGUzoMtE9VIrzHigY=
Subject key identifier: 1A:E7:E8:D6:20:41:59:C2:56:FD:B5:2C:3E:3F:40:9A:AC:EE:C7:B8
Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
Certificate issuer: /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Certificate serial: 019CAD229DF90ECD4BFB6DE635CB86C44AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
Manifest number: 12AC
Signing time: Mon 02 Mar 2026 06:00:52 +0000
Manifest this update: Mon 02 Mar 2026 06:00:52 +0000
Manifest next update: Tue 03 Mar 2026 06:00:52 +0000
Files and hashes: 1: BgYFyQZlOVoVNE_xGRhrUlUnKkE.roa (hash: iTNaRaBxLjNxBBzzpY+C9jdK8pNm57Hs3Z5CDJ3xboY=)
2: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl (hash: REzMBkgoftUX2OwvJ7R9Pb4Z+i5xtV3b0I1YoqwZuu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:9d:f9:0e:cd:4b:fb:6d:e6:35:cb:86:c4:4a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Validity
Not Before: Mar 2 06:00:52 2026 GMT
Not After : Mar 3 06:00:52 2026 GMT
Subject: CN=1ae7e8d6204159c256fdb52c3e3f409aaceec7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1e:f4:60:b0:57:da:00:b3:c5:1f:4c:57:d0:
b7:5c:79:96:1e:66:c4:7b:e4:38:1f:16:8a:19:1e:
00:73:c3:ca:14:6c:bb:90:d2:24:e7:fa:0c:ef:45:
5c:71:fa:38:20:ab:70:7b:dc:95:0b:e2:c4:2d:05:
7a:28:10:b0:5c:a1:24:b2:e5:e2:a2:e6:e3:16:f0:
a7:a1:1d:7f:19:ed:31:0e:e9:34:4c:fe:ce:f1:e9:
18:d5:2e:0f:00:c1:9a:8c:fe:81:bc:03:d8:af:5b:
51:d8:52:41:ba:74:65:84:70:37:f4:a1:71:04:af:
d0:e3:4a:64:ce:a3:d1:57:42:71:90:d2:a8:66:99:
42:44:d1:13:12:8f:00:45:7d:7e:63:71:21:81:0f:
72:38:df:a1:bc:29:77:4e:8c:34:08:8f:cd:44:29:
57:aa:49:19:c6:14:7b:56:db:4c:e2:ee:85:7a:76:
93:d3:b7:0c:eb:ea:96:6b:47:31:85:22:f8:89:52:
a1:c1:15:0e:85:59:22:20:c6:5f:f1:2e:4e:39:31:
45:bf:13:81:8d:97:df:29:15:cc:63:2f:11:f9:28:
14:15:7a:2d:a1:d6:b1:56:17:12:79:62:d9:63:55:
12:0f:37:c3:b4:e5:d2:d8:1d:68:77:62:59:01:e5:
fe:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E7:E8:D6:20:41:59:C2:56:FD:B5:2C:3E:3F:40:9A:AC:EE:C7:B8
X509v3 Authority Key Identifier:
keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3e:8e:a6:34:4f:28:15:97:99:84:d3:6d:1e:0d:1f:6e:4c:
87:2a:67:c4:f7:bd:fc:48:d7:05:ca:0b:fb:a4:49:6c:5e:58:
57:d2:29:b5:84:8e:3a:b7:d8:43:05:22:04:33:98:2f:d7:bd:
51:90:db:ce:35:bb:98:0d:56:f5:1f:28:fe:41:db:94:58:d7:
b6:44:6b:62:b5:be:ab:a7:bc:29:ff:06:d2:5c:13:9e:5d:d4:
59:f9:63:d2:dd:ae:c6:0f:07:1e:d1:13:2a:91:1a:03:09:3a:
e5:71:59:66:ba:85:36:0a:b0:af:70:07:c9:8d:0c:ed:fa:a0:
ec:73:1d:0f:eb:5e:b1:7f:dd:bd:5c:16:ba:e1:df:16:d1:b9:
19:58:98:1c:34:2a:db:b6:4e:50:15:6e:f5:96:6a:db:c3:38:
84:80:af:10:d7:6c:38:77:1d:bc:7e:5d:31:03:a6:7b:b4:23:
56:da:3c:d5:90:6c:28:ea:6f:d3:3f:e1:9f:e4:5d:2b:e6:3f:
24:3c:67:bf:e3:17:d0:bb:53:92:69:ed:b1:56:fc:ee:e1:b3:
99:4e:f0:e0:68:25:2d:35:6b:90:d2:11:38:4f:99:e5:7b:67:
ce:10:38:ea:53:96:1e:b2:17:8c:75:23:8c:3b:ed:e1:7f:f7:
2d:4c:a2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:05 2026 by rpki-client