Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
File: J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft (raw, json)
Hash identifier: gqYuHzmVyOO0UZua/y9mjZizt2IS8E2cuWMZdTkyfBw=
Subject key identifier: 13:7A:44:55:07:0B:CD:5D:85:B5:EE:54:DE:39:9D:0D:CD:EA:E2:9F
Authority key identifier: 27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
Certificate issuer: /CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Certificate serial: 019D99624E45FF9BB8E1B1E0CCBEA6CE84E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 03:00:49 +0000
Manifest this update: Fri 17 Apr 2026 03:00:49 +0000
Manifest next update: Sat 18 Apr 2026 03:00:49 +0000
Files and hashes: 1: J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl (hash: IPj+2reyNCvSwBIGviH4m4i7LlzgeZG6lGWg+5mPMLI=)
2: q2cMBXCMV2TKXbIKxSlGdHYqSnQ.roa (hash: 8gAaZY+bZ3BGIX0aq+TEUyX+bxVegXyhlIPRaI0W4hI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:4e:45:ff:9b:b8:e1:b1:e0:cc:be:a6:ce:84:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Validity
Not Before: Apr 17 03:00:49 2026 GMT
Not After : Apr 18 03:00:49 2026 GMT
Subject: CN=137a4455070bcd5d85b5ee54de399d0dcdeae29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:98:19:32:9a:00:15:2f:0b:0c:67:76:f8:35:
89:f1:e3:6e:32:73:d1:e6:5c:c1:47:5a:b2:7d:ae:
05:67:32:7e:b8:d7:bc:f7:c7:69:61:31:f8:39:f9:
ec:ec:66:7e:f9:1d:76:d6:b1:15:d5:4a:34:18:77:
76:3a:ec:55:c3:b2:fc:a7:d5:48:1b:4a:18:6e:4c:
93:d1:7e:1b:60:16:76:c0:af:4c:9c:ae:aa:eb:22:
dd:48:26:df:f9:e5:ee:bf:b9:09:85:f4:74:e3:c9:
ec:8d:12:e4:46:48:0c:a4:09:36:07:13:f9:3a:f4:
49:4c:23:d2:c2:48:31:dc:34:af:16:d1:0c:6d:e7:
69:67:94:08:b6:71:86:e3:e5:f5:3d:67:3f:c0:99:
a9:db:8d:b6:01:70:c2:8d:5a:d9:d5:e7:45:dd:87:
41:64:c8:65:a0:54:6a:43:ac:ba:c3:85:cc:bc:6d:
bc:8e:3e:91:b3:2d:a2:e9:97:a8:a9:18:d0:a9:c8:
42:99:1d:ad:cf:41:92:e0:b5:07:7b:23:a1:69:18:
6b:46:00:87:62:73:18:28:26:15:0b:52:8c:e0:ab:
b6:ff:f7:05:16:b4:bf:3e:e3:a5:d9:05:f7:7d:b6:
00:b1:47:4a:02:d0:6a:30:6e:6c:ac:c0:90:4b:37:
57:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7A:44:55:07:0B:CD:5D:85:B5:EE:54:DE:39:9D:0D:CD:EA:E2:9F
X509v3 Authority Key Identifier:
keyid:27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f3:fd:94:3b:c3:2b:c0:2f:67:1f:dd:b8:3b:f3:63:a0:30:
d1:88:87:50:40:ff:ce:db:e7:22:64:90:bf:65:32:10:85:d4:
5f:3f:13:13:b7:58:16:85:66:19:0a:41:ea:66:33:87:77:c0:
7b:49:08:c2:2f:75:88:c1:f9:69:3a:85:9f:16:0f:38:31:24:
cb:37:5d:7c:1c:de:37:60:ee:76:de:1c:4d:61:9e:20:8f:51:
9b:52:fe:93:3d:37:78:70:35:21:5e:2b:8b:26:2d:44:f8:88:
18:69:3e:48:50:64:04:c4:b9:e5:2f:f5:e6:9b:59:ad:b6:29:
94:9c:ea:35:4b:e0:90:37:9b:9e:9b:8a:a8:3a:02:49:f2:19:
e6:28:2d:74:24:98:d4:ff:5c:79:87:d0:64:94:5d:ae:36:d7:
58:22:5a:2c:0c:3f:b4:8d:19:4e:7a:46:c0:a4:38:4d:7f:5b:
47:dc:2c:7d:17:50:4c:b0:11:c2:55:bf:7d:2e:49:18:30:cd:
cd:a1:8d:1f:9f:24:42:c7:97:f3:9b:dd:58:7f:dd:95:df:3a:
51:b0:db:8e:36:63:55:14:fc:8a:e9:47:ac:7b:14:c7:16:e2:
bf:80:e9:ec:e3:97:a0:32:c5:12:51:8b:2e:54:4f:2e:5d:3a:
0a:0c:9e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:33:40 2026 by rpki-client