Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
File: J83PK9CaINK63Tq2yMft-h_Vwsw.mft (raw, json)
Hash identifier: 3BEI21Lug8jqP39GLnErVyypm9gt4EoB+ZquliXamUQ=
Subject key identifier: 04:FA:F0:AA:61:7D:3B:3C:B5:3B:D2:FA:13:9E:AC:7E:23:50:3A:80
Authority key identifier: 27:CD:CF:2B:D0:9A:20:D2:BA:DD:3A:B6:C8:C7:ED:FA:1F:D5:C2:CC
Certificate issuer: /CN=27cdcf2bd09a20d2badd3ab6c8c7edfa1fd5c2cc
Certificate serial: 019CAC4764190ED19CF4DD85D7F76EC533FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J83PK9CaINK63Tq2yMft-h_Vwsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
Manifest number: 0560
Signing time: Mon 02 Mar 2026 02:01:25 +0000
Manifest this update: Mon 02 Mar 2026 02:01:25 +0000
Manifest next update: Tue 03 Mar 2026 02:01:25 +0000
Files and hashes: 1: J83PK9CaINK63Tq2yMft-h_Vwsw.crl (hash: XPkYhK15AuXKsoNu/r1ddcsrI2vi6MAQn1I6vM3+kH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J83PK9CaINK63Tq2yMft-h_Vwsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:64:19:0e:d1:9c:f4:dd:85:d7:f7:6e:c5:33:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27cdcf2bd09a20d2badd3ab6c8c7edfa1fd5c2cc
Validity
Not Before: Mar 2 02:01:25 2026 GMT
Not After : Mar 3 02:01:25 2026 GMT
Subject: CN=04faf0aa617d3b3cb53bd2fa139eac7e23503a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5c:a0:af:d7:64:e2:43:0d:f4:16:4b:8b:2c:
1f:a6:96:1e:f8:20:cb:4c:b4:4a:c4:e2:4d:b2:99:
05:89:93:d4:27:73:1e:19:9b:84:89:39:bf:8d:d9:
2d:e3:7f:2c:5d:35:2b:70:19:f3:db:fc:ed:f8:18:
f3:04:ce:43:bf:ae:35:2b:1a:3f:56:0a:14:7b:03:
09:62:1c:48:ce:ef:54:f8:11:02:58:e8:44:ee:45:
78:c3:55:29:66:3b:82:79:a0:b5:fd:04:d2:42:02:
ae:a9:4c:b3:f9:61:09:44:b3:80:3c:65:44:45:cf:
4a:9a:57:a3:97:ce:af:59:6f:fc:4e:f7:45:04:e0:
41:81:4c:7c:00:0b:a4:3d:f5:19:8e:52:1c:37:da:
3b:a0:9b:8f:13:35:ed:ea:cf:34:39:43:af:59:10:
32:10:e6:76:48:c5:fd:bb:0d:ed:7d:4c:9a:c9:1d:
d3:6f:b8:b8:57:d7:55:cd:3a:dd:e2:32:35:5e:8b:
6d:eb:f5:18:fa:85:76:66:7a:f5:2c:77:7c:ae:67:
86:91:38:90:8c:2f:16:f7:4c:ef:4d:3a:de:51:1f:
ac:71:78:f6:a1:79:0a:65:a0:ae:ad:8f:43:fc:08:
43:28:af:3f:29:cf:bb:79:f4:f6:9e:ed:b3:23:56:
9d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FA:F0:AA:61:7D:3B:3C:B5:3B:D2:FA:13:9E:AC:7E:23:50:3A:80
X509v3 Authority Key Identifier:
keyid:27:CD:CF:2B:D0:9A:20:D2:BA:DD:3A:B6:C8:C7:ED:FA:1F:D5:C2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J83PK9CaINK63Tq2yMft-h_Vwsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c6:ed:9f:78:e7:f5:70:5e:ac:6a:f2:ea:bd:98:c0:b1:85:
91:5e:60:48:20:f6:91:18:7d:d2:a2:12:69:4b:90:57:dc:84:
91:42:4f:cd:6a:9f:1d:59:1c:41:44:5b:07:86:a5:35:3e:07:
2a:c5:60:89:94:10:6a:6f:1e:15:5c:6e:d2:ce:bb:c4:8d:3c:
e4:30:75:b8:20:01:04:48:b5:11:ed:64:51:b2:7a:02:02:ce:
93:3b:c1:d7:b2:ff:c8:57:40:6f:a1:49:4d:fb:f6:90:8d:b0:
d1:ca:c2:5f:ee:cc:3d:29:a9:29:89:42:c0:ad:a3:d6:0b:ca:
0a:6b:37:12:b7:6f:fe:cf:3f:3e:92:61:c0:e2:76:f3:6a:eb:
01:07:ec:50:7e:69:80:a5:6f:b1:e6:b7:e9:41:d6:f2:44:41:
c3:07:c4:28:e6:d7:7a:4b:dd:6a:a1:6f:a0:f5:5e:50:4f:ae:
23:bc:a8:e6:f0:54:d6:24:06:de:4b:77:fa:1a:af:3d:e5:6b:
85:7f:68:5c:b6:b3:a0:c0:32:26:ea:1f:8d:01:02:c8:93:fd:
1d:04:ce:97:06:a0:13:5d:3d:da:d3:3c:4b:e3:91:6e:6b:0a:
d0:0b:73:2a:24:ca:62:0a:f2:0b:48:4d:29:49:2d:e8:f5:65:
05:34:30:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:12 2026 by rpki-client