Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
File: J2zuYEMhsPEryjZ7VMBzmqil8To.mft (raw, json)
Hash identifier: fO0CCJ2x8ettdtsKi2dvuwYSMNtfQkUDSGwJ8aHwYfo=
Subject key identifier: EC:17:90:88:E8:76:34:49:4C:D2:2B:C0:17:3F:DF:A8:7B:CB:45:A2
Authority key identifier: 27:6C:EE:60:43:21:B0:F1:2B:CA:36:7B:54:C0:73:9A:A8:A5:F1:3A
Certificate issuer: /CN=276cee604321b0f12bca367b54c0739aa8a5f13a
Certificate serial: 019D98F4C59C5D61BD2C0D941AC6EFC3E1A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
Manifest number: 1213
Signing time: Fri 17 Apr 2026 01:01:11 +0000
Manifest this update: Fri 17 Apr 2026 01:01:11 +0000
Manifest next update: Sat 18 Apr 2026 01:01:11 +0000
Files and hashes: 1: J2zuYEMhsPEryjZ7VMBzmqil8To.crl (hash: g4g9rALY0A4SW+EOdxBNN2dctD6IlTN4XfIYcBtkzmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:c5:9c:5d:61:bd:2c:0d:94:1a:c6:ef:c3:e1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276cee604321b0f12bca367b54c0739aa8a5f13a
Validity
Not Before: Apr 17 01:01:11 2026 GMT
Not After : Apr 18 01:01:11 2026 GMT
Subject: CN=ec179088e87634494cd22bc0173fdfa87bcb45a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1a:45:47:6a:31:a7:37:30:42:6b:ff:36:cb:
91:5e:3b:f6:c3:e0:5d:e2:1c:c5:f9:e2:7d:05:aa:
67:60:a5:a5:d7:07:20:4c:08:99:43:e5:0a:19:c5:
8f:c4:93:be:37:a4:8e:8f:8b:d0:ab:65:fc:e8:22:
78:76:4a:b0:54:d2:1d:69:21:21:3d:eb:2b:66:b4:
0a:ef:54:21:1c:8f:52:77:a9:af:26:d2:66:7b:e6:
76:28:f8:e4:ff:03:5c:25:49:46:fb:af:1e:79:dd:
c6:7c:1d:15:2c:14:4f:0a:e2:aa:18:63:18:5c:8e:
c8:01:18:02:3c:04:26:bd:d6:60:96:c3:6d:2c:c6:
f7:06:78:94:c9:ee:c1:9d:4c:7b:73:69:4f:7a:35:
16:60:63:da:ad:5e:af:e5:67:73:df:06:0d:47:b7:
5f:a0:b9:eb:81:61:ff:37:09:c1:92:55:0a:07:9b:
83:ce:ef:46:59:80:f8:2a:f3:29:86:6a:f4:7d:03:
13:fb:b0:f2:03:6c:77:16:b0:54:24:46:b7:98:35:
b8:40:25:44:73:fb:ef:02:d6:88:ff:84:48:d4:3f:
fd:23:6b:22:44:d6:6a:08:97:71:65:04:cb:59:22:
c2:6f:d1:b2:5b:ef:d6:92:42:a8:2c:52:92:d4:8f:
18:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:17:90:88:E8:76:34:49:4C:D2:2B:C0:17:3F:DF:A8:7B:CB:45:A2
X509v3 Authority Key Identifier:
keyid:27:6C:EE:60:43:21:B0:F1:2B:CA:36:7B:54:C0:73:9A:A8:A5:F1:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2d:0a:d5:a5:2d:2a:10:a7:48:4c:96:d9:39:23:09:86:e1:
4c:7a:3a:03:0b:17:d6:b6:93:8e:57:df:f7:f8:a4:f2:43:3a:
09:ab:53:d4:54:60:79:40:46:ea:59:68:e9:c2:2a:a2:f3:00:
2c:c4:24:13:39:dd:46:ee:96:b3:1a:8c:3a:3d:c2:81:99:66:
11:91:2d:92:5a:61:69:03:cf:a4:0b:61:9c:25:20:29:ed:bc:
a7:0d:0a:cb:4d:f7:b9:f1:45:0f:61:99:eb:20:bf:41:41:17:
fa:b7:a6:8e:a6:e4:93:bc:23:4c:36:85:be:17:93:a1:32:08:
f6:ab:85:40:f3:14:43:17:ad:d1:48:0c:de:5c:72:a3:fe:26:
15:77:dc:81:83:11:65:1b:45:20:00:dc:94:54:f2:b0:46:42:
54:b1:50:92:65:8e:14:dc:09:f5:37:43:fb:9b:20:fe:31:75:
c3:e0:08:0d:33:de:32:fb:a3:12:3a:96:cb:6d:32:01:d9:5e:
19:56:1f:66:e5:7c:c2:df:28:9e:65:52:ca:44:d9:9c:56:bf:
00:a4:0d:93:a8:ef:3f:0a:5a:18:19:b9:db:e7:65:dd:13:86:
ef:26:2e:5e:66:2b:c0:10:13:7c:37:59:71:96:40:64:0a:97:
e9:8a:c8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:03 2026 by rpki-client