Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
File: J582UuRFj6ABxnOKQUJbB-cMkaE.mft (raw, json)
Hash identifier: 1jSD8TlcFSKOX4YJPvsxGE41MjowHOZJyieXuTAYusY=
Subject key identifier: BE:4A:36:16:30:2E:0D:D7:9C:02:7D:C7:87:64:97:A2:0A:64:F8:41
Authority key identifier: 27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
Certificate issuer: /CN=279f3652e4458fa001c6738a41425b07e70c91a1
Certificate serial: 019CA9EB93FBFBD679A4CA07E3AA80B1BD04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
Manifest number: 14BE
Signing time: Sun 01 Mar 2026 15:01:54 +0000
Manifest this update: Sun 01 Mar 2026 15:01:54 +0000
Manifest next update: Mon 02 Mar 2026 15:01:54 +0000
Files and hashes: 1: J582UuRFj6ABxnOKQUJbB-cMkaE.crl (hash: lM2zUYW/Oue4zJq5mEZ+VgnF3ZGWcT75lvL7wtrZL1M=)
2: h53oA3SujEDr4ELckr6UN9W2NOk.roa (hash: EVBN35qoptKAigPRFwoWW6G0+97b+KvRqgyf+bRb3+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:93:fb:fb:d6:79:a4:ca:07:e3:aa:80:b1:bd:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279f3652e4458fa001c6738a41425b07e70c91a1
Validity
Not Before: Mar 1 15:01:54 2026 GMT
Not After : Mar 2 15:01:54 2026 GMT
Subject: CN=be4a3616302e0dd79c027dc7876497a20a64f841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:86:70:07:58:7e:71:cf:89:26:11:58:c1:0f:
54:96:f6:35:0f:45:b0:bb:04:1a:8e:50:db:ed:00:
c8:92:9b:7b:fe:74:53:4a:95:70:9b:2d:1a:3c:9a:
34:59:8a:87:20:98:6e:c2:20:6d:d5:70:12:20:d1:
eb:a9:fa:96:49:63:75:61:49:2d:4c:00:99:36:7c:
90:a7:46:a7:09:bc:0a:6a:a5:15:94:27:49:c0:29:
53:17:54:49:cf:2c:af:4f:d4:d8:ca:1c:bf:d1:3a:
5e:56:a4:f7:7f:a7:5e:15:48:b8:22:53:20:94:43:
0d:ab:77:46:e9:d4:e8:c3:7b:5f:e2:6d:0d:b6:ec:
0f:5e:c2:ea:8f:8a:4c:36:98:b5:d0:75:26:4d:b5:
73:73:e0:3d:1c:61:21:9a:64:d3:03:93:11:16:79:
b9:b8:07:b5:a9:51:dd:df:90:29:d7:9a:45:af:c0:
cc:ca:09:d6:e6:ae:cd:39:48:fa:d7:d5:66:37:5a:
74:af:dd:78:36:df:00:39:59:2d:32:e7:a0:9d:ab:
63:ba:bf:c1:bc:cf:54:2d:b9:52:94:a9:7e:55:bb:
d7:7e:9d:07:0e:37:1c:72:9c:9b:b0:4a:8b:87:11:
a6:0c:5c:cb:f3:b4:dc:cb:58:c4:fd:76:19:6d:3b:
74:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4A:36:16:30:2E:0D:D7:9C:02:7D:C7:87:64:97:A2:0A:64:F8:41
X509v3 Authority Key Identifier:
keyid:27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d7:53:9f:7e:f5:1d:89:d6:7f:0c:ce:02:cd:38:8a:26:d8:
29:3c:e0:0b:d0:41:e6:ed:9c:3c:53:a2:b9:5e:e2:0d:08:90:
1e:89:87:b4:59:0f:23:0e:0e:3e:0f:4d:68:6b:db:05:36:e6:
5c:3f:61:ae:ac:38:93:17:6e:40:3f:cc:94:d4:c6:b1:92:b9:
94:47:af:86:f0:ae:f2:93:c3:8b:dd:a9:89:e3:29:4d:b7:fc:
0e:99:a0:5c:7b:1c:c2:b8:3a:50:c6:58:ae:30:fd:39:ad:9f:
11:15:a7:1c:32:5a:92:56:b5:73:3f:cd:d9:0d:90:f6:3d:d3:
c3:f5:78:2e:15:34:09:ec:0d:90:29:d5:24:fc:1a:3d:7f:29:
0b:6b:8d:56:db:99:53:0f:ba:79:c3:d6:48:30:ee:47:ba:27:
b8:6e:2f:d9:01:7e:ed:21:a0:df:b7:c7:8d:c6:8e:24:37:93:
32:29:6d:c1:75:05:3e:15:a3:c5:de:f1:b9:10:7e:c4:86:0a:
86:5c:ab:cf:4f:11:c6:9a:0f:78:04:05:06:16:fa:b2:f4:8a:
81:05:83:1a:aa:69:6b:7b:91:ca:c5:f2:65:45:dd:f5:7c:61:
4b:ad:8a:17:38:e4:25:08:50:ba:dc:8c:9b:2c:45:0f:cd:55:
0a:27:8a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:26 2026 by rpki-client