Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
File: J2q7GtVn5bseR1pyoKaEU-P7oc0.mft (raw, json)
Hash identifier: OaA9cSsBjuu4SD/PMNJkwrzjNXB2r/Os1vTbtpNgvNo=
Subject key identifier: 45:B2:3F:F5:28:78:58:1B:75:41:42:3D:39:80:68:DF:07:55:34:EF
Authority key identifier: 27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
Certificate issuer: /CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Certificate serial: 019D9A3F032BC00EE3F2580382B0B7C4F5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
Manifest number: 0EE2
Signing time: Fri 17 Apr 2026 07:01:53 +0000
Manifest this update: Fri 17 Apr 2026 07:01:53 +0000
Manifest next update: Sat 18 Apr 2026 07:01:53 +0000
Files and hashes: 1: J2q7GtVn5bseR1pyoKaEU-P7oc0.crl (hash: bxocGJ6TvC2oelm+oy1eveaTJ/vqBoHlm+UEEoZH45Y=)
2: OXWr1FYLi9PgXMi4UP0vp3p1d3o.roa (hash: miQSIT7p7E2EU0jg2TvL7PxHL5mubsweNJtdEmmfr8s=)
3: vemKapMmkStR7tolVhfdLCFIHqo.roa (hash: dA21yuRu1C5aB1w0/kkdpqei9cBkSg/W6yABWc5Hwig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:03:2b:c0:0e:e3:f2:58:03:82:b0:b7:c4:f5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Validity
Not Before: Apr 17 07:01:53 2026 GMT
Not After : Apr 18 07:01:53 2026 GMT
Subject: CN=45b23ff52878581b7541423d398068df075534ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0f:fe:bb:44:eb:9d:1c:e0:47:80:20:92:7f:
88:68:3f:66:f6:05:e2:e5:04:10:93:42:ce:7d:6d:
1e:39:97:94:8e:10:8c:86:38:21:89:17:a5:df:7b:
5a:f7:a5:1e:ab:ee:e0:74:f7:df:e8:cd:a0:29:83:
9d:4c:d9:e2:14:d8:2e:96:b2:04:aa:b8:c3:ab:f4:
98:0a:40:69:b5:06:25:ba:e0:8c:23:8b:e5:37:95:
0a:0c:df:c7:47:92:9b:58:de:2c:93:ca:d5:57:ee:
02:fd:26:9c:a1:2a:ee:03:73:4f:4b:ef:f5:2b:47:
68:eb:a1:f4:eb:b1:33:d8:7d:9e:b6:f3:4a:d3:55:
ed:df:83:69:8a:eb:b0:c4:9f:ca:eb:3b:33:41:8c:
9c:fd:be:90:79:7a:17:6e:75:90:ce:c6:65:a9:04:
5d:55:18:c8:79:77:ec:df:9a:9b:f0:2d:d1:bc:ca:
ba:ff:7a:f7:d4:fc:0c:5f:26:32:4d:13:05:90:d4:
be:45:28:eb:55:f1:54:15:29:d6:9f:d0:7b:a6:dc:
b5:bd:82:44:79:09:7f:83:75:67:70:15:3d:0a:10:
19:5f:b9:ec:f1:99:49:5b:43:23:1e:c3:00:64:da:
e4:3b:3d:51:6f:98:a9:e1:5e:a7:51:e1:12:f3:c4:
b1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B2:3F:F5:28:78:58:1B:75:41:42:3D:39:80:68:DF:07:55:34:EF
X509v3 Authority Key Identifier:
keyid:27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:97:46:1c:92:57:3b:05:f6:59:22:f4:64:ea:5b:97:d2:98:
19:8b:60:39:7e:5f:93:ca:78:1c:2c:e9:41:ac:e6:24:77:dd:
1d:cc:6c:a3:d8:48:5d:67:06:a4:46:10:c5:e9:f3:08:1a:db:
b3:bc:0b:85:68:d5:36:3b:6d:37:bf:f0:d5:4b:65:05:ae:d9:
b3:3a:bf:04:c8:56:7b:b5:52:34:86:be:5a:66:12:68:6b:53:
4a:9c:87:22:40:a5:9c:b8:8f:bd:99:bb:47:e6:62:fa:b9:80:
13:01:a7:2c:9e:79:34:8f:1c:55:ba:53:c4:26:e2:6d:bd:c3:
81:f3:bc:a6:ff:de:8a:5a:0f:ef:10:2a:d4:07:b7:c9:29:08:
9e:7c:86:89:bc:ca:62:b5:57:96:79:c2:89:22:b9:07:cb:20:
5c:74:16:c2:6d:a0:4c:18:b6:fe:ef:9b:31:b9:77:83:5b:1b:
d0:64:9a:c8:55:e1:2a:5c:bd:42:46:b5:ec:cb:f1:7e:a5:7e:
2c:18:e6:ea:b0:7c:3a:cd:23:9c:fc:16:5c:d2:29:8f:57:cd:
15:88:26:30:84:8a:b1:32:f4:04:3f:e5:08:bf:78:af:e7:19:
52:06:39:7d:33:d7:2c:11:21:bf:d0:21:9e:7d:ff:05:8a:6f:
08:16:2d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:48:58 2026 by rpki-client