Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
File: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft (raw, json)
Hash identifier: OVnMTZ+KjJPKagnDfkLneek6yj2ZnHS2j0h9/H6y4Cw=
Subject key identifier: 0D:81:A1:27:F0:1E:EC:1B:4A:72:EE:48:C6:DC:68:51:7F:8C:1F:F1
Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
Certificate issuer: /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Certificate serial: 01A0C39FA0FB1EFBB1531B458D23E94E6689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
Manifest number: 14CB
Signing time: Mon 21 Sep 2026 11:00:13 +0000
Manifest this update: Mon 21 Sep 2026 11:00:13 +0000
Manifest next update: Tue 22 Sep 2026 11:00:13 +0000
Files and hashes: 1: BgYFyQZlOVoVNE_xGRhrUlUnKkE.roa (hash: iTNaRaBxLjNxBBzzpY+C9jdK8pNm57Hs3Z5CDJ3xboY=)
2: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl (hash: Zg/QVcm27+Rp6czUX8EWCNvhffxDIP2c1IWlN8JfoeU=)
3: olxc0wwaCx3ZS0IyubnBirv7nJc.asa (hash: gFjGd2p/+A4+aazMMxaIfHxnVYFhIuYNkCD+v7nOd/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:a0:fb:1e:fb:b1:53:1b:45:8d:23:e9:4e:66:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Validity
Not Before: Sep 21 11:00:13 2026 GMT
Not After : Sep 22 11:00:13 2026 GMT
Subject: CN=0d81a127f01eec1b4a72ee48c6dc68517f8c1ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8d:04:36:f7:2f:b2:a7:b1:1d:a9:e1:64:a2:
d8:80:55:c3:c6:7e:77:73:01:9c:08:20:7a:ce:51:
4f:ba:c2:c9:b2:3d:a6:a3:88:be:bf:af:80:4a:74:
bc:8b:ea:c8:23:05:ce:7b:87:cf:92:29:01:1e:1c:
aa:c4:fb:75:8d:a2:26:8c:e4:88:bc:50:ea:89:57:
e5:3a:be:49:0e:a3:e4:c9:eb:4c:6a:15:70:3c:97:
bc:7b:95:09:c6:67:00:19:14:62:5f:c8:36:0a:cb:
72:47:6a:f8:66:29:56:1a:aa:26:8f:92:36:6e:57:
ec:e3:d0:94:75:41:4c:32:df:33:b5:c3:60:2b:0b:
fd:2f:93:98:1b:84:59:19:1c:4d:44:d5:75:ec:42:
6a:0e:b5:b0:98:91:b8:3f:b4:1f:7f:f4:9f:f9:53:
8e:be:6f:6a:a6:42:1b:a8:86:b4:90:a8:f4:94:06:
67:00:7e:89:39:ec:00:43:f0:70:3f:46:00:ea:64:
a5:04:6d:04:81:f1:c4:72:0a:e1:cc:62:fa:49:25:
d5:4e:89:06:9b:bb:b8:e8:9f:a2:62:1d:a2:bd:ad:
25:91:ef:6e:cc:e6:be:29:35:d8:3c:21:9e:21:86:
95:6b:93:cb:17:9f:a4:45:b2:3f:5f:cd:8f:34:49:
83:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:81:A1:27:F0:1E:EC:1B:4A:72:EE:48:C6:DC:68:51:7F:8C:1F:F1
X509v3 Authority Key Identifier:
keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7a:60:17:25:b1:53:dc:55:d2:e7:60:6a:91:7a:f0:50:39:
3b:03:5b:c3:60:9f:28:8d:f4:8c:b8:03:d7:f1:94:89:02:f5:
82:ea:10:02:91:0f:c8:07:00:1a:4e:d1:21:a7:44:1b:73:b7:
8d:f2:d9:41:a9:4d:51:aa:81:0b:4a:4f:dc:7d:14:73:dc:33:
a7:25:9f:b0:e3:5d:26:d4:39:6d:c7:60:0a:50:04:74:9b:fc:
7d:b9:c8:b1:70:59:90:66:23:77:6c:a3:88:4f:1c:92:3e:1f:
c8:d9:94:5e:19:3d:60:8a:c9:b3:f7:6b:9e:be:59:b6:f6:b6:
f2:f6:90:53:af:ef:35:41:c6:dc:0d:3f:5b:b5:47:39:0a:0d:
3d:10:ae:81:b9:e7:c7:67:d4:44:23:ff:b5:85:28:26:4b:62:
3c:28:08:9c:7c:d5:e3:3d:a8:7b:18:1d:ed:66:2f:09:69:82:
60:ad:33:7c:e2:53:e7:b9:e5:9f:07:1c:f7:26:99:98:c2:84:
d6:b7:a0:0f:d4:e0:1f:c4:d6:be:a4:0b:b1:ad:5a:54:33:ae:
55:d4:4b:94:64:a5:5c:50:2b:f5:a7:03:44:c8:37:33:e3:92:
ff:72:44:0a:24:e6:e2:8b:c9:8d:e2:43:70:2d:35:cc:42:58:
1b:19:2e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:43:32 2026 by rpki-client