Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
File: J_8gRAummKTcBDm8F5-zOj7hzJU.mft (raw, json)
Hash identifier: cGnjP5HovavzFhN43hkSGUTj1dJNLWTlb62pS9niDGE=
Subject key identifier: 7A:3A:70:07:E2:00:89:28:AE:B2:F4:FA:56:F7:45:C0:D9:5C:AB:15
Authority key identifier: 27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
Certificate issuer: /CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Certificate serial: 019D9AAB8795342BF74F9C6140D876F3AA09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
Manifest number: 0F99
Signing time: Fri 17 Apr 2026 09:00:25 +0000
Manifest this update: Fri 17 Apr 2026 09:00:25 +0000
Manifest next update: Sat 18 Apr 2026 09:00:25 +0000
Files and hashes: 1: Brthxz7priRlJYXJ_EOaKSwdKP4.roa (hash: E8F9SE2VrkKt66H0FbYQUbq5xRyURkLNcY48oGiYLYc=)
2: J_8gRAummKTcBDm8F5-zOj7hzJU.crl (hash: B3awuMxOU6MUwx22ffUC5HvLfYMwr8VIRqK7d+WivOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:87:95:34:2b:f7:4f:9c:61:40:d8:76:f3:aa:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Validity
Not Before: Apr 17 09:00:25 2026 GMT
Not After : Apr 18 09:00:25 2026 GMT
Subject: CN=7a3a7007e2008928aeb2f4fa56f745c0d95cab15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:86:88:06:ea:96:f5:17:80:aa:3f:d5:f1:
58:24:28:14:8d:ec:39:cb:ed:4e:bb:d9:9a:2d:7d:
1a:ee:06:81:0c:a0:c3:4a:d5:1b:5e:57:be:ef:db:
23:e9:52:ed:88:7e:d4:af:37:dd:f9:d4:b3:58:65:
34:a6:16:b3:a9:54:17:be:f6:a4:f5:ba:ac:52:7e:
30:d5:2c:3d:58:d7:bd:61:1e:d7:0b:33:6d:2d:f2:
31:e9:22:53:05:41:38:13:c0:cd:c6:1e:2b:5d:8c:
6f:fd:69:36:7e:11:fe:c1:34:76:16:b4:69:e9:67:
8a:33:db:97:cf:b5:3b:30:aa:8e:bc:ae:07:58:41:
86:a5:5b:c9:8b:ce:46:f1:c8:39:5e:e6:43:ca:17:
b9:a7:ab:2f:7c:3c:b0:a5:b1:b9:24:3b:28:cf:1c:
5f:83:4d:a8:1b:3a:34:70:cb:49:3c:ff:13:9e:84:
c6:83:d5:fe:5f:bb:d2:df:04:8f:a2:8b:5b:98:9b:
b1:47:70:f3:98:ca:55:dd:69:7f:85:90:c5:a3:14:
b0:dd:f2:6b:f6:e5:d2:61:1f:6d:1e:3f:6c:04:26:
79:ee:25:0a:f7:cc:f5:ff:ee:b9:25:13:d1:28:94:
d7:c3:23:64:28:3d:cf:6b:49:18:ba:6d:f1:34:9b:
7f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3A:70:07:E2:00:89:28:AE:B2:F4:FA:56:F7:45:C0:D9:5C:AB:15
X509v3 Authority Key Identifier:
keyid:27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8a:1b:54:c0:a0:02:ef:c8:77:eb:7f:96:c8:aa:c5:90:1a:
2b:4c:a9:22:17:b1:c3:09:89:eb:25:5a:f3:9d:be:6a:17:0f:
12:73:bb:8c:60:2e:eb:bd:8b:e0:72:9c:95:38:3c:61:b2:e7:
3b:7a:e1:01:d5:ef:7f:d6:cf:2c:12:f9:be:7a:13:85:5c:6b:
d7:58:3c:b9:a7:50:5b:e6:18:a5:23:21:89:42:9c:d0:46:19:
66:60:97:1d:72:f3:0c:ef:99:e3:89:e5:5b:51:03:af:3a:0a:
80:42:3d:59:55:8f:30:1a:7c:46:7a:97:c7:c9:76:1a:ec:fe:
2b:36:ca:0e:c5:e1:0c:4b:a5:cc:64:8b:6a:e3:88:fe:9e:fc:
d6:9b:b4:e4:d2:fb:d6:24:c1:2b:56:19:85:55:02:21:0d:a7:
34:40:4d:81:6f:f6:71:84:8c:cd:e1:8b:07:e6:c4:13:5e:a3:
29:17:74:ad:39:1c:da:2e:58:8d:74:81:27:cb:85:6b:4d:90:
29:68:a4:58:6c:a6:9e:64:7f:b9:e5:d7:43:2c:63:70:b4:da:
d9:8c:39:06:77:8e:de:b9:46:8a:50:56:50:62:b4:bd:df:5a:
31:6b:e8:af:95:28:f8:7d:9b:64:be:9c:ac:8c:9a:10:5f:e9:
52:18:ad:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:12:12 2026 by rpki-client