Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
File: J582UuRFj6ABxnOKQUJbB-cMkaE.mft (raw, json)
Hash identifier: JQPeG6FaTLB2EmNQZpXroF4AIEfEmI2PJyDxneF29dE=
Subject key identifier: BC:C0:3B:E9:83:6C:69:66:85:1C:A8:3C:23:12:AC:C3:56:2C:EF:92
Authority key identifier: 27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
Certificate issuer: /CN=279f3652e4458fa001c6738a41425b07e70c91a1
Certificate serial: 019D9B506CF19F7893E5A69AFEBCB1ECA782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
Manifest number: 153B
Signing time: Fri 17 Apr 2026 12:00:32 +0000
Manifest this update: Fri 17 Apr 2026 12:00:32 +0000
Manifest next update: Sat 18 Apr 2026 12:00:32 +0000
Files and hashes: 1: J582UuRFj6ABxnOKQUJbB-cMkaE.crl (hash: mCIGk2mg0vNErVeERmHngpzKZJ4RJX0+Hu3wCCf0nYY=)
2: h53oA3SujEDr4ELckr6UN9W2NOk.roa (hash: EVBN35qoptKAigPRFwoWW6G0+97b+KvRqgyf+bRb3+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:6c:f1:9f:78:93:e5:a6:9a:fe:bc:b1:ec:a7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279f3652e4458fa001c6738a41425b07e70c91a1
Validity
Not Before: Apr 17 12:00:32 2026 GMT
Not After : Apr 18 12:00:32 2026 GMT
Subject: CN=bcc03be9836c6966851ca83c2312acc3562cef92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:af:aa:b9:a8:06:ff:f2:d7:c4:b8:47:2c:
27:88:ce:ab:63:b6:dc:b5:d3:80:d2:5a:59:ab:0c:
ef:c2:2b:21:fe:07:6e:fd:7c:27:0b:d4:00:43:44:
67:00:be:02:b6:af:a1:dc:0e:55:8c:de:3b:41:c0:
f8:35:e4:e3:55:cf:92:c1:b1:c9:29:49:bf:b9:97:
5a:fc:1f:e0:ea:42:8f:e6:67:09:11:93:3b:b9:66:
30:11:12:9b:92:72:23:a1:1b:8c:ae:bf:f4:a9:ff:
20:1b:63:48:65:55:cb:18:b0:24:70:b1:08:7c:68:
c0:1d:c5:40:79:58:1e:a4:6a:65:82:06:4e:33:f3:
b9:ec:e9:e8:36:16:bd:dc:fb:39:d1:80:16:81:6a:
b0:69:24:b9:01:56:35:b7:6d:4c:f1:55:6e:a5:6d:
29:cf:e2:a6:4e:f2:b3:5c:52:8d:55:b4:41:67:b1:
78:89:4e:fd:97:f0:59:22:61:bf:cc:a0:8a:7b:13:
10:ad:3e:e7:a0:6b:65:9e:cd:38:bd:04:a5:06:bd:
39:a7:93:85:ea:93:1e:a5:02:89:27:b3:c7:2d:f8:
57:20:13:59:b3:ab:cc:af:1b:1c:4f:15:a6:68:82:
b3:b7:61:46:68:3d:d9:e0:8b:3d:bf:9d:31:ed:ae:
76:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C0:3B:E9:83:6C:69:66:85:1C:A8:3C:23:12:AC:C3:56:2C:EF:92
X509v3 Authority Key Identifier:
keyid:27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ca:0f:2d:c8:f2:68:31:d0:87:57:05:9e:c6:4e:9d:02:0b:
c7:5d:ae:36:45:eb:97:9a:ec:a1:1b:26:4e:99:d8:f5:a9:16:
36:cc:07:78:c0:7e:cc:5d:57:fa:7f:32:e0:c7:7e:11:96:03:
be:5c:a2:18:17:21:a0:f2:fc:28:af:0c:b7:a3:c5:26:6e:e3:
c5:46:a2:d0:05:85:26:12:c0:0e:aa:c6:af:cb:6e:ae:79:6f:
0a:7a:3d:b9:98:14:7a:19:c9:31:57:c6:a8:7b:ef:b8:db:46:
5f:d8:c3:c7:c4:78:dd:bc:b1:9e:20:4a:18:04:36:3a:0f:d8:
f2:8c:11:13:e9:ea:53:78:36:a0:09:9f:2f:eb:4a:0b:d0:66:
24:0c:c7:43:11:58:43:13:73:4c:19:1f:f4:56:b6:07:8c:d8:
65:28:4a:58:ba:09:d0:00:1c:62:01:90:d3:11:7a:6f:f5:a4:
4d:92:d5:d9:18:aa:e1:0c:5a:7c:c5:7d:d7:83:41:47:b5:2e:
51:7a:2d:ac:db:73:1e:db:bc:5e:f2:76:d6:6b:30:6e:84:3e:
c8:7e:61:0a:34:8a:db:90:5b:d1:e5:00:bf:6d:6e:2f:88:11:
fd:0f:9f:23:19:3a:dc:16:f6:eb:dd:32:79:4f:4a:23:c1:bb:
97:e3:2a:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUGzxn3iT5aaa/ryx7KeCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWYzNjUyZTQ0NThmYTAwMWM2NzM4YTQxNDI1YjA3ZTcw
YzkxYTEwHhcNMjYwNDE3MTIwMDMyWhcNMjYwNDE4MTIwMDMyWjAzMTEwLwYDVQQD
EyhiY2MwM2JlOTgzNmM2OTY2ODUxY2E4M2MyMzEyYWNjMzU2MmNlZjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKOvqrmoBv/y18S4RywniM6rY7bc
tdOA0lpZqwzvwish/gdu/XwnC9QAQ0RnAL4Ctq+h3A5VjN47QcD4NeTjVc+SwbHJ
KUm/uZda/B/g6kKP5mcJEZM7uWYwERKbknIjoRuMrr/0qf8gG2NIZVXLGLAkcLEI
fGjAHcVAeVgepGplggZOM/O57OnoNha93Ps50YAWgWqwaSS5AVY1t21M8VVupW0p
z+KmTvKzXFKNVbRBZ7F4iU79l/BZImG/zKCKexMQrT7noGtlns04vQSlBr05p5OF
6pMepQKJJ7PHLfhXIBNZs6vMrxscTxWmaIKzt2FGaD3Z4Is9v50x7a52vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzAO+mDbGlmhRyoPCMSrMNWLO+SMB8GA1UdIwQY
MBaAFCefNlLkRY+gAcZzikFCWwfnDJGhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjU4MlV1UkZqNkFCeG5PS1FVSmJCLWNNa2FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iOWMyZTItMzdiNi00MmM2LWFjZGEt
ZjhlNmJmZTFhZGZiLzEvSjU4MlV1UkZqNkFCeG5PS1FVSmJCLWNNa2FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9iOWMyZTItMzdiNi00MmM2LWFjZGEtZjhlNmJmZTFhZGZi
LzEvSjU4MlV1UkZqNkFCeG5PS1FVSmJCLWNNa2FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcoPLcjy
aDHQh1cFnsZOnQILx12uNkXrl5rsoRsmTpnY9akWNswHeMB+zF1X+n8y4Md+EZYD
vlyiGBchoPL8KK8Mt6PFJm7jxUai0AWFJhLADqrGr8turnlvCno9uZgUehnJMVfG
qHvvuNtGX9jDx8R43byxniBKGAQ2Og/Y8owRE+nqU3g2oAmfL+tKC9BmJAzHQxFY
QxNzTBkf9Fa2B4zYZShKWLoJ0AAcYgGQ0xF6b/WkTZLV2Riq4QxafMV914NBR7Uu
UXotrNtzHtu8XvJ21mswboQ+yH5hCjSK25Bb0eUAv21uL4gR/Q+fIxk63Bb2690y
eU9KI8G7l+Mq/w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:36:59 2026 by rpki-client