Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
File: J90kebrctAokpDax7cw2HD-mKvs.mft (raw, json)
Hash identifier: lKVjeXvfJtZyrNWaG8XhDgs0nRVvVqljekAFCNU71tY=
Subject key identifier: 0C:62:E5:70:B5:D8:23:A2:CA:5F:6B:BA:56:94:8D:60:6F:CE:2C:0A
Authority key identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
Certificate issuer: /CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Certificate serial: 01A0D124BCD5FD3940D16AC59FED0B703D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 02:00:40 +0000
Manifest this update: Thu 24 Sep 2026 02:00:40 +0000
Manifest next update: Fri 25 Sep 2026 02:00:40 +0000
Files and hashes: 1: J90kebrctAokpDax7cw2HD-mKvs.crl (hash: tu5XZr7IXvaYTAwMQ49epjxPV03G+7Krhfq3Mkof5bM=)
2: gZ_db6GfXmBOp4kcCy-i3uexrlk.roa (hash: ThO+Sk/jrlZwpr+FgeFErC3/Gl+3M/mev1BE/Xmuy2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:bc:d5:fd:39:40:d1:6a:c5:9f:ed:0b:70:3d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Validity
Not Before: Sep 24 02:00:40 2026 GMT
Not After : Sep 25 02:00:40 2026 GMT
Subject: CN=0c62e570b5d823a2ca5f6bba56948d606fce2c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:5d:07:7c:f5:8c:b7:6b:c7:08:12:94:43:
d4:f3:46:b7:26:fb:86:b3:47:6d:3e:e7:6b:37:4e:
92:cc:d2:94:b0:04:7e:06:e0:60:b3:d5:34:36:32:
41:5c:bf:7c:ab:66:87:22:b9:e6:5c:3e:9f:10:dd:
c9:4a:19:92:f4:6f:91:56:ab:3e:ce:2a:c1:a1:73:
c4:34:34:7f:2b:fc:7d:2a:9f:64:22:3e:48:92:3d:
cd:e2:34:a2:a2:4d:c5:1b:f3:69:4b:ea:a9:3f:1b:
81:fe:0f:06:6e:60:47:e1:b6:77:99:bc:30:f0:bc:
6f:a2:68:94:db:21:d8:9c:04:b9:29:ed:41:b6:d4:
30:49:c8:02:bd:ca:af:5b:17:96:1e:b7:0e:e2:9b:
69:ee:2e:f3:4e:6c:47:ab:42:42:cd:81:87:1b:a7:
4a:26:d1:76:4d:91:b7:ae:06:d3:e8:c7:87:f0:6c:
28:69:cb:cb:aa:3b:4a:85:7a:c1:a5:27:b5:4d:5a:
df:c4:b5:ce:51:72:0c:0e:9e:17:0b:dc:91:e9:f0:
bd:80:b9:c9:b4:8b:ee:ce:71:1c:d1:f0:eb:d1:c5:
38:3a:b1:8c:44:f4:5f:95:1e:b1:5d:a7:d8:41:c4:
9f:63:d2:df:3d:70:9c:c9:18:b3:f6:fe:9a:2d:48:
97:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:62:E5:70:B5:D8:23:A2:CA:5F:6B:BA:56:94:8D:60:6F:CE:2C:0A
X509v3 Authority Key Identifier:
keyid:27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:06:5b:81:f0:b3:b8:11:f6:77:d0:66:5c:4d:e8:2f:77:df:
b0:e6:59:8b:76:46:b8:8f:90:a8:bd:49:95:03:ca:e6:bf:49:
e3:06:a1:e6:12:c0:23:cb:53:4d:c5:91:76:99:4a:a1:f6:a6:
80:0f:ed:c9:ea:7a:fd:d9:30:21:c1:34:f3:26:39:66:a5:e2:
31:a5:92:55:08:c1:32:f7:0e:1a:09:0d:ac:1b:a4:9c:34:40:
34:03:77:d4:cb:54:e7:e0:56:c6:7b:17:14:b9:ac:33:db:e4:
b1:97:1a:cc:1e:9e:0d:49:b1:85:ae:7c:03:02:c4:a3:fa:92:
f4:cf:28:cb:ab:e9:08:43:1e:bf:16:36:cb:eb:81:77:08:51:
0b:a7:d8:06:32:1e:a2:8f:a1:31:a9:68:bb:d5:a0:7a:40:5f:
ce:5c:35:3f:e5:9d:97:7f:cc:d2:f1:93:4a:e5:ae:c1:0b:de:
32:d5:dc:55:d5:f9:5f:5c:8b:c1:c1:ee:68:ce:8f:e8:a3:ea:
f5:e3:02:f0:b1:54:3d:1a:5d:81:39:f5:f2:79:ae:b4:bb:94:
f7:7d:ce:84:fd:67:df:f7:7a:e6:0c:9a:85:37:87:e3:8c:aa:
d7:8a:59:6b:65:23:81:a3:68:79:ad:3e:09:e7:c0:64:f5:1d:
a6:de:0c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:26:15 2026 by rpki-client