Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
File: J2q7GtVn5bseR1pyoKaEU-P7oc0.mft (raw, json)
Hash identifier: KMx5ATt9w9dgwfXoch9jXemDvZUk1ng2RmYnRsC1IB0=
Subject key identifier: 09:B8:78:B2:55:EB:F4:DE:06:A6:F4:0E:E5:E7:65:18:0F:58:BD:A2
Authority key identifier: 27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
Certificate issuer: /CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Certificate serial: 01A12767D9437FE59405B73E863C6EEBA8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
Manifest number: 10BA
Signing time: Sat 10 Oct 2026 20:01:19 +0000
Manifest this update: Sat 10 Oct 2026 20:01:19 +0000
Manifest next update: Sun 11 Oct 2026 20:01:19 +0000
Files and hashes: 1: J2q7GtVn5bseR1pyoKaEU-P7oc0.crl (hash: eFgusNp0KG3n4K0dlOS7WlUiKINYjtuaoOcyLhXN/Yg=)
2: iE4PQgRjpLQVuICAA3DM5HMD4dA.asa (hash: 7+oS6U+AgY0TPyB7aEzZVmVleVk45DEZaf8PoCW8nYU=)
3: vemKapMmkStR7tolVhfdLCFIHqo.roa (hash: dA21yuRu1C5aB1w0/kkdpqei9cBkSg/W6yABWc5Hwig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 19:34:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:67:d9:43:7f:e5:94:05:b7:3e:86:3c:6e:eb:a8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Validity
Not Before: Oct 10 20:01:19 2026 GMT
Not After : Oct 11 20:01:19 2026 GMT
Subject: CN=09b878b255ebf4de06a6f40ee5e765180f58bda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:28:2e:0b:d5:c9:8b:05:c7:73:f4:a8:b8:2f:
69:9a:e2:7e:84:77:c9:46:f5:9b:06:d9:89:ad:81:
f9:01:5c:9e:0c:02:0a:be:41:8c:b4:a9:69:56:0c:
f5:74:56:c4:0c:f5:55:fd:7b:d3:1e:78:6d:ca:91:
4f:b0:39:83:13:e8:24:41:a0:f6:df:7e:33:f0:a5:
5c:6f:d0:2e:2f:73:bc:62:81:fc:ed:f7:9b:d0:7e:
22:6d:3e:1d:fe:08:63:0f:5a:ec:22:ea:1b:c8:1d:
91:34:ad:77:28:af:20:fe:39:63:65:7f:59:f8:27:
db:2c:08:4b:31:92:81:6c:e9:2c:96:88:2f:6c:a5:
a1:b5:2d:2a:34:41:72:4f:9c:18:2a:88:47:1f:e0:
5f:d2:e5:04:39:4f:5e:f2:42:07:91:06:3c:a5:99:
90:2f:3c:cf:e2:cb:71:43:c0:03:84:8c:33:a8:e3:
d2:b8:4d:81:dd:5f:9b:8e:e4:77:e5:ec:09:ce:55:
af:d2:9e:36:27:58:6a:c0:35:ec:fc:32:ed:f9:03:
15:3f:5d:55:75:25:03:b3:43:3a:ed:87:d8:aa:c1:
f1:4d:95:0a:40:66:34:9e:37:5b:3f:8f:3f:e6:f1:
90:da:c3:05:2a:d9:91:2e:15:bf:0c:54:46:e2:03:
ed:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B8:78:B2:55:EB:F4:DE:06:A6:F4:0E:E5:E7:65:18:0F:58:BD:A2
X509v3 Authority Key Identifier:
keyid:27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:50:bf:10:2e:59:b9:0a:9f:9b:3f:a7:6c:3d:84:c1:a3:7f:
ba:dd:34:49:c2:02:02:6a:2e:1e:ef:f7:ab:3f:60:42:6f:7b:
c6:7a:35:07:70:aa:03:6b:39:76:90:c5:5f:39:3c:40:eb:a9:
45:77:8a:ad:6d:1d:dd:08:f2:c9:15:bf:70:82:de:5d:57:1b:
ff:cb:82:d5:a4:3e:18:dc:c0:a9:fd:c7:46:27:09:9c:c9:1a:
52:cc:43:a1:df:52:78:0d:bb:3b:e8:94:0f:ca:53:b2:37:53:
fd:bd:e4:1c:84:60:2e:7e:5f:24:70:0f:71:09:49:96:ba:74:
d5:d4:8d:32:66:6c:e8:fb:f7:44:dd:c4:b6:48:54:db:72:b0:
63:c0:d2:0e:8f:35:b0:bc:d4:31:01:1f:8b:0c:b6:20:80:59:
0b:32:b7:d0:3b:66:ad:39:d7:b6:54:c0:60:68:83:fb:ab:53:
67:87:e6:54:38:24:72:f3:77:dd:a4:66:f3:75:1f:40:fe:b4:
76:d9:8f:79:b4:57:f0:44:19:25:73:fd:c9:d9:e5:ac:8d:8f:
e9:55:9d:1d:db:82:c3:b4:37:da:01:df:51:0e:50:42:d0:25:
e4:d3:ef:85:70:98:c2:57:a0:8e:4d:79:35:04:a5:f1:6a:f9:
94:b4:9a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:08:01 2026 by rpki-client