Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
File: J97R2QxNUraHECO8cSltCKmMTNs.mft (raw, json)
Hash identifier: 7SrczfGMGeCOTStxQs1mPDt6cIpwhBcwCDLukhBYH7k=
Subject key identifier: 8A:3A:1D:95:FD:93:4B:3F:D6:E7:AC:70:09:FB:32:DA:9C:F6:EB:50
Authority key identifier: 27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
Certificate issuer: /CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Certificate serial: 019CABDA0F26A2FEE3FAC0D47D9A8FC0EAD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
Manifest number: 0E08
Signing time: Mon 02 Mar 2026 00:02:00 +0000
Manifest this update: Mon 02 Mar 2026 00:02:00 +0000
Manifest next update: Tue 03 Mar 2026 00:02:00 +0000
Files and hashes: 1: 9eN7qSejmD6NfaFbsmt0-Q4AgoA.roa (hash: EthJtYsvDPJskDLNQI0HAM0yvVrJhOQozB0uYpm7BsE=)
2: J97R2QxNUraHECO8cSltCKmMTNs.crl (hash: BZeZzfebsHdUwuH/O2PXFXbY17+sxcIUf6zpAXosUos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:0f:26:a2:fe:e3:fa:c0:d4:7d:9a:8f:c0:ea:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Validity
Not Before: Mar 2 00:02:00 2026 GMT
Not After : Mar 3 00:02:00 2026 GMT
Subject: CN=8a3a1d95fd934b3fd6e7ac7009fb32da9cf6eb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:af:b2:a5:ab:5b:d7:c9:1b:5f:4a:66:6b:0e:
d2:33:7b:ea:3d:9c:5a:a2:d4:d1:1d:c6:71:d5:fb:
66:b9:2d:70:fe:dd:26:03:6a:2d:94:ee:e8:0c:f8:
f2:e4:aa:a4:2c:f2:84:8e:44:e3:bc:92:65:72:05:
0e:ee:03:28:98:1b:a7:0e:ed:07:4f:a1:1f:ec:c3:
1c:1c:e2:38:e4:da:ed:f6:28:7a:48:05:71:cb:13:
31:dc:be:67:cc:59:6c:84:e6:e3:79:58:37:17:8f:
a3:71:14:10:30:03:2f:3c:b2:5c:2b:57:25:a7:1b:
ae:c9:b4:e3:3c:7a:81:e5:5b:31:aa:9b:a8:59:6b:
3b:e0:60:23:97:2e:a2:75:74:18:ca:08:d2:cf:4c:
01:90:39:50:85:e0:63:fa:05:f0:9f:67:0c:4d:89:
b3:80:08:8a:31:79:2e:2b:81:73:87:97:6a:37:ec:
20:79:7e:15:b2:15:d2:6c:2a:fc:25:ce:2b:45:ec:
e6:24:91:dc:65:45:64:66:bd:38:34:e5:83:6f:67:
78:61:0c:bb:81:bd:29:aa:e1:33:22:67:26:6b:3c:
7f:05:1b:d8:a9:7b:a5:07:7b:bb:83:d6:40:93:fe:
37:58:59:a3:cb:50:58:77:86:1f:2d:59:a3:9c:8f:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3A:1D:95:FD:93:4B:3F:D6:E7:AC:70:09:FB:32:DA:9C:F6:EB:50
X509v3 Authority Key Identifier:
keyid:27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:20:c1:b1:df:b6:08:9e:f4:1b:5e:0f:47:e6:96:7c:be:f5:
08:e1:64:73:a8:cf:72:2d:8f:f2:cf:1f:99:b2:50:3a:82:13:
06:98:a1:be:d9:a1:21:d6:3b:15:d8:57:6b:37:78:28:9c:1e:
04:85:1c:3f:df:9a:c7:15:d0:fe:ce:c4:bc:0a:d9:cb:38:93:
99:9f:02:47:7a:dd:67:f9:49:a3:7f:02:bf:b5:62:98:1b:04:
40:b5:16:74:4c:a8:67:a4:01:8d:d4:35:2c:56:36:3e:99:55:
39:d1:89:b2:95:84:28:b3:5c:61:17:78:fb:07:1c:c2:47:34:
bb:06:bf:f9:2c:11:3a:40:d1:0e:7c:60:cb:8c:74:fc:56:f3:
80:5b:1b:76:9f:e5:aa:e8:25:ab:46:a8:d7:4c:1a:bd:41:9b:
a9:96:5e:0c:f9:b1:4c:65:63:f6:64:b3:0b:ba:3b:cb:12:e9:
6d:85:cd:c9:37:32:cc:e3:08:48:e6:e5:1a:1d:0f:68:ec:ad:
00:d1:59:6f:d7:62:12:46:8b:2f:0c:8d:cb:1a:ef:05:38:35:
87:0f:52:b1:a2:36:05:bb:1b:47:1a:c9:58:99:bd:f7:7d:3c:
24:c1:9f:b0:86:c2:c1:81:31:05:4e:15:c2:25:89:4a:93:67:
42:e3:cd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:09 2026 by rpki-client