Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
File: J_whhWzY4Denu4xjkqYZghOotPY.mft (raw, json)
Hash identifier: wFnchiNEu6uBHBJQfRA+pOuM9kM3Wnl5ZFtIlpsN/bo=
Subject key identifier: D7:6F:B7:23:03:3C:5F:42:EA:B3:33:47:9B:0F:6A:1A:1F:CA:3D:B1
Authority key identifier: 27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
Certificate issuer: /CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Certificate serial: 019CAB346D3EB553ACACCCF59B5F2311FA1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
Manifest number: 0F27
Signing time: Sun 01 Mar 2026 21:01:05 +0000
Manifest this update: Sun 01 Mar 2026 21:01:05 +0000
Manifest next update: Mon 02 Mar 2026 21:01:05 +0000
Files and hashes: 1: J_whhWzY4Denu4xjkqYZghOotPY.crl (hash: rZOloJi76nfiGq8M/tACH6tWZD1EhHgWK3zEmDn1yV0=)
2: Zl9UixuUH0GLR4R_JPyHH_dGJ1Y.roa (hash: bKOmByPp72MyiwK2dxQMPNiiDG6ujdM2vWNSfqTcD8I=)
3: evUKjjQ-64urf3ID9QQeEJmSrho.roa (hash: jHjvWcJHTbQkaqv1cxn7W2VQ1dY8D8A2yCIoe6SeCXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:6d:3e:b5:53:ac:ac:cc:f5:9b:5f:23:11:fa:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Validity
Not Before: Mar 1 21:01:05 2026 GMT
Not After : Mar 2 21:01:05 2026 GMT
Subject: CN=d76fb723033c5f42eab333479b0f6a1a1fca3db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3b:d2:cc:53:d1:dc:73:8a:c8:8a:4f:61:6d:
bf:12:d7:3f:c3:6c:ab:ff:e1:a8:3f:c1:4b:71:f3:
47:62:ce:33:fd:6e:d1:79:d6:7d:e9:86:76:92:e1:
58:6f:ec:02:1c:67:14:a0:77:90:b6:af:c0:dd:61:
e6:0c:f2:56:e0:a6:94:10:17:c0:0d:09:f0:f6:44:
58:1f:fc:01:33:d0:99:f5:f5:19:e2:6b:c5:90:33:
a5:3e:c9:7b:84:ff:b4:d6:22:a4:30:bb:57:f4:b1:
60:44:9a:fc:ee:38:58:a2:ab:7a:30:5d:14:6e:ae:
48:7d:42:81:85:2e:cf:da:56:ae:1f:10:63:6b:a7:
08:d9:c9:22:bd:34:6b:48:0f:2b:0d:f0:32:b6:b8:
9b:6c:d1:d7:22:29:26:62:3c:76:63:6c:19:46:1e:
e9:4e:0f:cc:6a:a7:60:16:7b:63:4c:1e:ef:ea:41:
e4:10:b3:6a:72:66:89:14:25:27:95:55:2b:5d:ad:
cc:0a:86:83:0f:e0:fc:4e:3a:a7:b6:e9:54:f2:6b:
e8:62:43:c2:72:08:96:c7:38:17:7d:4e:be:8a:93:
af:74:38:31:f7:30:0c:89:c9:7b:60:43:c9:c7:ae:
f3:48:f3:08:0c:9b:42:d6:95:f8:f5:c4:2b:35:55:
38:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6F:B7:23:03:3C:5F:42:EA:B3:33:47:9B:0F:6A:1A:1F:CA:3D:B1
X509v3 Authority Key Identifier:
keyid:27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b8:53:af:83:a2:73:9d:cf:f2:62:91:f5:36:05:19:18:86:
7d:0c:07:6b:5e:4e:f5:ba:c9:c5:20:c3:9d:dc:81:bd:ff:13:
29:4e:04:9d:b7:b9:bf:9b:77:9d:a5:bd:6b:d6:cc:43:3b:8f:
54:88:e4:66:3d:61:e0:1b:14:2c:5f:47:a5:c0:90:fc:cf:68:
24:d3:0f:ed:a3:70:f8:a3:08:c8:ce:78:d3:21:76:f7:0c:82:
8e:a1:b7:11:ec:fd:2f:bd:5a:e4:ea:b1:b3:cf:3b:3a:76:4e:
a4:43:13:43:4c:ea:3a:4a:b8:ad:1e:04:35:79:cc:e2:6c:df:
21:ca:80:1c:cd:7d:73:dd:e1:00:10:00:76:46:08:ac:b4:9d:
04:f7:f0:67:f7:53:f8:85:80:88:de:af:8a:26:7e:83:4b:0b:
1e:a2:04:18:a5:35:7a:99:9f:20:10:01:aa:45:8c:dc:7b:8f:
3f:e2:f7:c2:23:1c:60:56:14:4e:c2:4d:8b:a6:47:ad:e6:76:
7c:35:3e:72:65:77:51:07:f9:55:36:d4:f2:88:3e:13:b8:7e:
09:4e:4c:64:21:ed:68:be:3e:76:1b:87:18:b3:b9:9e:a7:38:
14:64:d9:e4:20:d4:bb:c8:d3:3a:79:70:87:67:e8:e6:16:0a:
1a:77:e6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:53 2026 by rpki-client