Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
File: J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft (raw, json)
Hash identifier: tjxxQGZmuMc5xSHLL3mU3liwPQ0UFDVPNNw07ZwHmNs=
Subject key identifier: 32:7D:60:5E:62:5C:0F:0C:BC:F8:C1:F2:B5:8E:9C:BA:E5:69:B6:D7
Authority key identifier: 27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
Certificate issuer: /CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Certificate serial: 019CABD9749280369653C8CDCABCB5D34832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 00:01:20 +0000
Manifest this update: Mon 02 Mar 2026 00:01:20 +0000
Manifest next update: Tue 03 Mar 2026 00:01:20 +0000
Files and hashes: 1: J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl (hash: PPNVkluKOfTomAKlFPpHD8V+TphkBfELclqSQ93FICk=)
2: q2cMBXCMV2TKXbIKxSlGdHYqSnQ.roa (hash: 8gAaZY+bZ3BGIX0aq+TEUyX+bxVegXyhlIPRaI0W4hI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:74:92:80:36:96:53:c8:cd:ca:bc:b5:d3:48:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Validity
Not Before: Mar 2 00:01:20 2026 GMT
Not After : Mar 3 00:01:20 2026 GMT
Subject: CN=327d605e625c0f0cbcf8c1f2b58e9cbae569b6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ad:b3:46:0e:b4:a0:62:3b:71:ab:a9:dc:c3:
a0:49:aa:98:06:1f:a6:fb:2d:31:c3:64:38:c6:e7:
91:89:a3:33:6f:cd:3a:85:20:f3:d4:11:bd:b1:d0:
4e:3e:16:3b:a3:49:20:94:0f:f5:6f:e7:95:f6:07:
11:0d:79:01:76:c6:ef:c1:16:aa:da:e7:23:db:ff:
a7:8a:4b:70:e7:04:d4:8b:66:42:43:03:5a:f4:bd:
7d:4f:8c:ec:2c:24:05:b3:db:9d:48:c0:c0:00:6d:
42:5e:53:0e:cf:41:73:b6:2e:0a:cf:7e:f8:b3:83:
d7:8f:0c:3f:f2:79:e3:c9:1e:6b:c9:52:d7:d3:78:
96:bf:ad:f7:88:94:52:f9:d2:5d:08:73:34:65:09:
5f:bc:99:18:db:4e:7c:19:43:df:75:97:18:58:a1:
2c:f2:e8:e1:04:27:62:b2:69:b2:c9:c5:93:b2:61:
f8:ba:5b:aa:11:b7:62:16:fd:bf:14:ca:ef:93:5e:
e4:4b:3f:bb:53:40:6a:86:54:63:4c:9d:40:31:8e:
15:e5:46:07:16:2a:ae:26:66:c4:13:6c:f6:79:06:
e7:52:13:66:4f:f3:ac:7f:c2:26:61:d4:8c:0e:7c:
2d:24:d1:4a:26:95:20:90:b1:31:a2:9b:ed:1c:fb:
fd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7D:60:5E:62:5C:0F:0C:BC:F8:C1:F2:B5:8E:9C:BA:E5:69:B6:D7
X509v3 Authority Key Identifier:
keyid:27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d2:08:90:6d:a5:09:bb:79:27:f4:e3:a9:6a:58:87:e7:c5:
0a:98:e2:66:d4:d3:a9:80:2d:9d:22:c5:1b:d6:cb:59:43:ca:
fe:d6:0a:93:a4:a9:34:99:b1:3f:84:46:c5:00:1a:74:7c:fd:
bf:3d:e1:da:b3:1b:33:76:35:ea:7b:2b:1a:4e:c3:c7:f5:7c:
17:79:91:22:0f:bf:f8:5e:5c:5f:78:dc:ca:0b:fe:0a:5e:ef:
41:70:8b:4e:55:4f:1c:e5:ec:b1:a5:68:31:31:56:f6:aa:8d:
b2:af:1a:2f:b5:bd:07:0f:4c:ea:62:cf:ad:e2:cf:69:17:e6:
aa:b6:21:e0:44:a2:31:01:85:d4:29:67:2d:63:40:e9:5c:32:
f3:14:ff:a8:88:c2:a9:48:d2:a2:8b:1d:af:a1:38:88:84:ef:
7b:4c:ae:2e:95:35:be:b2:f9:57:a5:3d:a9:a4:aa:41:e0:7b:
0d:6b:73:72:6c:f7:7f:fb:12:3c:f8:f4:ff:22:6f:75:48:5c:
2d:a7:03:3a:4f:81:6c:96:c8:a3:68:6b:d8:8f:70:70:45:a9:
48:80:3c:7b:b0:eb:02:16:4d:5d:b3:b9:20:f6:b5:d7:db:7a:
b0:87:ff:6f:7b:5a:a6:02:47:04:c2:b1:2a:44:69:80:e4:5a:
b3:31:b9:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2XSSgDaWU8jNyry100gyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDA0ODQzYzRmM2E0ZTc2Njk0ZGIzY2ZiZjliZTNhOWI2
N2M2OTkwHhcNMjYwMzAyMDAwMTIwWhcNMjYwMzAzMDAwMTIwWjAzMTEwLwYDVQQD
EygzMjdkNjA1ZTYyNWMwZjBjYmNmOGMxZjJiNThlOWNiYWU1NjliNmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq2zRg60oGI7caup3MOgSaqYBh+m
+y0xw2Q4xueRiaMzb806hSDz1BG9sdBOPhY7o0kglA/1b+eV9gcRDXkBdsbvwRaq
2ucj2/+niktw5wTUi2ZCQwNa9L19T4zsLCQFs9udSMDAAG1CXlMOz0Fzti4Kz374
s4PXjww/8nnjyR5ryVLX03iWv633iJRS+dJdCHM0ZQlfvJkY2058GUPfdZcYWKEs
8ujhBCdismmyycWTsmH4uluqEbdiFv2/FMrvk17kSz+7U0BqhlRjTJ1AMY4V5UYH
FiquJmbEE2z2eQbnUhNmT/Osf8ImYdSMDnwtJNFKJpUgkLExopvtHPv9EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJ9YF5iXA8MvPjB8rWOnLrlabbXMB8GA1UdIwQY
MBaAFCfQSEPE86TnZpTbPPv5vjqbZ8aZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjlCSVE4VHpwT2RtbE5zOC1fbS1PcHRueHBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8wYjY0N2YtYTZlNS00NmYzLWI5OWMt
YjA5YjkzODVkNzI3LzEvSjlCSVE4VHpwT2RtbE5zOC1fbS1PcHRueHBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8wYjY0N2YtYTZlNS00NmYzLWI5OWMtYjA5YjkzODVkNzI3
LzEvSjlCSVE4VHpwT2RtbE5zOC1fbS1PcHRueHBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAptIIkG2l
Cbt5J/TjqWpYh+fFCpjiZtTTqYAtnSLFG9bLWUPK/tYKk6SpNJmxP4RGxQAadHz9
vz3h2rMbM3Y16nsrGk7Dx/V8F3mRIg+/+F5cX3jcygv+Cl7vQXCLTlVPHOXssaVo
MTFW9qqNsq8aL7W9Bw9M6mLPreLPaRfmqrYh4ESiMQGF1ClnLWNA6Vwy8xT/qIjC
qUjSoosdr6E4iITve0yuLpU1vrL5V6U9qaSqQeB7DWtzcmz3f/sSPPj0/yJvdUhc
LacDOk+BbJbIo2hr2I9wcEWpSIA8e7DrAhZNXbO5IPa119t6sIf/b3tapgJHBMKx
KkRpgORaszG5ww==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:32 2026 by rpki-client