Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
File: J98EKCQnP8_z8JPQ-bHexpYLrmo.mft (raw, json)
Hash identifier: ygNzH2vkHt/BQOgKM99/VD492we0lMMV0Dtk2EjOHgI=
Subject key identifier: B3:E2:D2:17:CD:A8:99:75:AA:6F:01:8F:BC:CA:F7:F7:FD:E2:7B:6E
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Certificate issuer: /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial: 01A1C51EA948C5D233F35A4FF245E4F88399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
Manifest number: 1AF3
Signing time: Tue 10 Nov 2026 11:01:23 +0000
Manifest this update: Tue 10 Nov 2026 11:01:23 +0000
Manifest next update: Wed 11 Nov 2026 11:01:23 +0000
Files and hashes: 1: 1-eXk56W1WcQXJBaon4jYvPO5XKk.asa (hash: 4kMcrktNRWgxl6BULeDgtu/gbF/92oPuNyR3Tirvwvs=)
2: 1KQsz8EMeMqO7bc9e9NUCyualHA.asa (hash: K+ABwTOia6am6qcpzwES7lTBokcCgw4GgL9iAZqzKrs=)
3: EaAMsvwoHBe4yq1jbHkVSMOCcms.roa (hash: tCewwDnNFA4yqzd0eb5IKas5uAfl5Rr1tmwDJ4VUURI=)
4: J98EKCQnP8_z8JPQ-bHexpYLrmo.crl (hash: ZQoU2zJiyimbVxsAHjk0OGJRv/uE6C26qHeFMDedGVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:1e:a9:48:c5:d2:33:f3:5a:4f:f2:45:e4:f8:83:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Validity
Not Before: Nov 10 11:01:23 2026 GMT
Not After : Nov 11 11:01:23 2026 GMT
Subject: CN=b3e2d217cda89975aa6f018fbccaf7f7fde27b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:43:45:58:1d:c8:d6:fd:6d:62:39:06:27:
6f:5c:f3:4a:c7:f1:85:58:35:cc:08:4e:e1:fe:ae:
6a:7c:61:81:05:6a:87:bc:4a:0a:76:f9:6c:8f:9d:
4e:36:49:c1:bb:b3:fb:2e:71:06:4b:b6:16:55:15:
f7:51:71:79:bf:43:40:36:6d:dc:dd:e4:c9:58:7a:
83:0d:8e:f9:e6:12:ba:c2:75:12:a8:c6:d6:68:d4:
d4:23:56:d0:6c:98:22:6d:cf:d7:e0:9d:e0:58:f4:
9e:1e:0c:94:98:03:ea:4f:76:11:7f:8b:a1:13:e5:
78:cf:0a:de:2e:bf:d8:1f:37:22:23:f1:39:52:27:
7b:d7:23:6f:a6:21:57:55:7a:b4:2b:2e:de:b8:dc:
98:4e:7a:ee:aa:3f:fa:db:9e:86:b6:17:da:83:23:
34:1f:e4:e1:e0:12:db:8b:b3:32:37:9c:72:1b:d3:
79:b8:02:8b:9e:50:19:f9:e4:c2:ff:ed:25:00:94:
b5:e3:68:2a:98:e0:37:23:ec:63:42:dd:a9:10:96:
b6:ae:46:01:dc:cb:34:90:9e:5f:66:cf:79:fc:95:
f3:7b:f5:c9:25:56:3c:70:36:38:d7:b8:d5:d0:b0:
87:58:6f:21:35:b5:c1:a1:45:7d:5b:2c:be:53:5d:
ff:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E2:D2:17:CD:A8:99:75:AA:6F:01:8F:BC:CA:F7:F7:FD:E2:7B:6E
X509v3 Authority Key Identifier:
keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:67:c4:43:ca:9c:9c:de:4f:7a:d9:17:a7:5c:0e:52:80:ca:
ad:28:7d:b6:ba:56:92:a8:68:7d:41:59:51:e1:cc:27:5d:6a:
75:0d:f6:f1:57:d1:a7:56:86:2c:a5:de:5a:75:0e:f4:6c:d9:
2e:84:d7:89:63:0f:f1:b3:b4:da:4e:5f:01:64:63:a4:39:bb:
d4:3b:0e:da:c7:37:ef:cd:34:b0:50:b3:4d:ab:f6:44:ae:4b:
2e:a9:7a:ff:4b:43:a8:54:61:d1:32:71:1b:25:aa:32:89:42:
5d:e4:4f:e5:49:fb:1d:3c:93:da:f6:ca:33:81:b1:26:28:2c:
1c:b8:a4:9a:d3:0b:1e:99:72:f5:ce:a5:95:2a:f9:ce:22:96:
00:7a:3c:6e:e2:cf:67:cd:6e:8d:37:67:ff:35:87:b6:27:ea:
e6:92:d4:27:b8:51:92:6a:ee:5d:bd:9d:f6:3c:84:78:bd:cc:
dd:0a:10:14:74:83:68:b8:09:06:e5:88:8f:ce:ad:a2:ee:3b:
6d:97:0f:16:5b:27:00:27:f7:de:ff:c8:72:cd:26:62:0e:88:
c4:aa:b1:55:b2:e6:da:67:9c:c3:54:1d:40:70:d7:72:85:28:
c7:36:a2:23:7e:bc:9a:59:f6:00:25:84:f8:0e:af:25:1b:24:
f7:4a:8b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 17:14:46 2026 by rpki-client