Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
File: J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft (raw, json)
Hash identifier: SXIHsJ4n25tCVaem1VI1JftUtP0PeKvXRDjXrUR3ujk=
Subject key identifier: B4:4D:B0:45:53:74:9C:64:D7:66:7C:9C:11:64:F5:84:DC:C4:47:7C
Authority key identifier: 27:D0:28:47:06:04:33:6F:DB:93:08:E5:1B:A5:3E:95:1A:E2:E0:98
Certificate issuer: /CN=27d028470604336fdb9308e51ba53e951ae2e098
Certificate serial: 019CABD91A374530787D56233FDDC83B1734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
Manifest number: 0BDC
Signing time: Mon 02 Mar 2026 00:00:57 +0000
Manifest this update: Mon 02 Mar 2026 00:00:57 +0000
Manifest next update: Tue 03 Mar 2026 00:00:57 +0000
Files and hashes: 1: 4rLPq_TgJ9EI_tLb1VhHk45l3x0.roa (hash: hFOozb3KB1jUFC9gVkqUzG9rbgAjo7X66KzDUthY3po=)
2: J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl (hash: kHpDrMulaqzmnnx9I6biCGRCEk3m0aYrb2O+RdDkhtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:1a:37:45:30:78:7d:56:23:3f:dd:c8:3b:17:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d028470604336fdb9308e51ba53e951ae2e098
Validity
Not Before: Mar 2 00:00:57 2026 GMT
Not After : Mar 3 00:00:57 2026 GMT
Subject: CN=b44db04553749c64d7667c9c1164f584dcc4477c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:e5:5d:43:c1:8a:87:de:03:be:33:8f:88:
07:49:d8:76:92:2b:86:71:4b:04:34:c5:62:f1:a8:
b9:76:f6:66:d3:c4:84:94:b5:51:3c:40:f9:64:a7:
fb:ed:e6:a9:7b:35:e5:1d:5a:b5:5f:9e:9a:3e:9f:
cc:c3:e2:f1:27:80:31:fd:1b:2b:a8:8a:fb:5c:49:
7a:91:47:f6:0f:b4:bc:bf:81:22:ca:87:5a:0d:0f:
cc:01:64:02:7c:1d:6c:a8:d3:c9:b4:bf:f4:45:fd:
ea:cb:31:a5:71:4f:4c:c7:44:c0:2f:b2:8c:c9:71:
c9:e1:d2:93:4c:ef:ae:e5:ac:38:12:22:03:60:46:
e1:33:10:3e:87:4c:6e:a8:62:39:08:c6:04:a4:16:
2a:8e:93:7c:8a:fb:0c:49:80:3a:05:b0:e0:24:de:
e8:8f:37:8f:ba:78:a6:5d:4a:3b:ab:33:19:36:10:
69:78:79:b1:3e:c6:b8:2a:55:39:e5:43:53:72:6f:
1a:02:7c:1b:a9:8c:0e:dc:d5:e9:e1:d9:6a:59:7c:
53:7c:c2:5a:a3:e3:e6:d1:34:f9:78:96:fc:fb:da:
b6:45:df:ed:e7:fd:e8:9b:e2:48:d2:e1:17:f8:28:
2b:78:01:07:e7:d7:02:63:5f:a0:df:f2:11:4a:76:
29:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4D:B0:45:53:74:9C:64:D7:66:7C:9C:11:64:F5:84:DC:C4:47:7C
X509v3 Authority Key Identifier:
keyid:27:D0:28:47:06:04:33:6F:DB:93:08:E5:1B:A5:3E:95:1A:E2:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8a:06:fc:bd:03:91:46:05:75:20:c3:47:44:b7:e6:c1:5a:
5a:bf:19:f5:4d:74:cd:10:7c:c3:65:50:76:6c:f5:97:d9:da:
ae:bc:07:e7:c7:06:b6:ba:e7:e4:b5:b5:c0:37:95:a2:92:12:
76:1b:29:43:b3:11:67:1b:02:30:7f:b5:e5:72:a7:8b:b3:94:
00:9c:84:f4:d6:a9:88:9f:39:11:2d:19:d9:58:ce:75:2e:cb:
97:c0:70:1f:18:59:fa:5c:2a:53:56:1e:21:73:b6:6a:c6:bd:
46:a9:56:a2:0a:75:df:1c:2d:14:ef:4c:49:78:ce:51:35:0e:
96:24:ce:95:93:85:6c:1f:9e:81:da:80:dd:98:08:73:7e:ef:
a6:0a:bc:c4:87:81:87:36:6d:35:3c:a3:42:75:80:d1:7b:15:
79:9b:01:92:91:80:2c:ad:68:a9:d0:84:1d:d1:09:68:0f:02:
4e:32:91:4f:8d:8d:f1:47:91:2e:66:8d:04:72:d9:a1:5c:95:
ee:2b:20:97:03:f4:49:df:f2:2a:49:ea:80:db:39:39:84:b3:
5a:6b:d3:57:bf:f1:7f:37:dd:0f:a4:4f:e2:81:90:5b:e0:ea:
80:c4:9b:a6:48:6d:e0:90:20:67:66:f8:4a:fb:ba:4e:c4:e5:
32:ff:ad:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:51 2026 by rpki-client