Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
File: J0PbfuNKwtTtV49JXgCWy5iv9xw.mft (raw, json)
Hash identifier: 0tc+Yt7HtUvPDKaWM7Kg8vwejLZdip+12l2Gr2tbuPs=
Subject key identifier: 27:5F:E6:92:0E:13:BB:8B:25:81:1F:95:64:7A:B8:5E:4C:85:DB:44
Authority key identifier: 27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C
Certificate issuer: /CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
Certificate serial: 019CB0C8A83D7967E3C6A45A149011890AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
Manifest number: 0394
Signing time: Mon 02 Mar 2026 23:01:06 +0000
Manifest this update: Mon 02 Mar 2026 23:01:06 +0000
Manifest next update: Tue 03 Mar 2026 23:01:06 +0000
Files and hashes: 1: FSCr9rK0vEudDS9_bQ3O-hGkqrk.roa (hash: ddVmg0mXECaptmy2zncQhSGmVK6AKxm9h3sGTc6VHOM=)
2: J0PbfuNKwtTtV49JXgCWy5iv9xw.crl (hash: bR+T9QDB657GOau8GKEGetgaaeTBtE8RJBMPn7z3sq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:c8:a8:3d:79:67:e3:c6:a4:5a:14:90:11:89:0a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
Validity
Not Before: Mar 2 23:01:06 2026 GMT
Not After : Mar 3 23:01:06 2026 GMT
Subject: CN=275fe6920e13bb8b25811f95647ab85e4c85db44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:37:13:28:02:9c:e0:29:d7:c1:87:40:30:8a:
ba:fb:a3:08:b4:c8:3f:88:8c:bf:11:49:2c:61:ac:
db:27:9c:d5:f1:a9:bb:0b:ed:c2:39:81:00:17:d3:
62:7c:2e:61:2b:69:d3:20:bc:4d:4a:91:6c:0c:df:
46:f9:1e:4f:4b:c0:d3:14:fa:88:94:d2:cb:a2:de:
d6:20:ad:7f:56:85:9b:b4:b8:2a:64:ec:33:30:d8:
6d:84:69:0c:73:0f:f4:38:8a:a3:5c:59:c0:b4:d7:
74:ab:f1:cf:be:b7:bf:a9:f9:1a:f9:ea:eb:ce:97:
7a:38:0f:f2:92:2a:ca:32:47:12:9b:fa:ac:0c:5f:
6a:ab:3f:1c:b9:dc:9c:56:4f:f8:8a:ab:3c:b4:3f:
22:a6:0a:30:4d:c9:c1:60:37:ad:dc:83:64:d0:40:
f4:b7:81:49:5b:dd:1c:9d:c3:3f:4f:ce:8a:d2:bb:
3c:ff:24:68:59:e7:73:f1:a9:e2:c9:dc:10:17:ae:
82:8c:cd:ea:a6:54:16:2b:52:3e:eb:b2:7c:c8:72:
94:24:a3:99:26:cc:e2:4d:a8:68:71:d7:f3:f9:12:
45:01:2f:16:a0:7b:26:c0:60:c7:fc:83:35:b6:62:
3f:23:9e:21:80:d6:e5:23:df:38:09:6d:d2:26:28:
5b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5F:E6:92:0E:13:BB:8B:25:81:1F:95:64:7A:B8:5E:4C:85:DB:44
X509v3 Authority Key Identifier:
keyid:27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:cb:ff:00:8e:3e:f4:e5:26:c2:c4:29:9a:11:6f:5d:fe:ed:
62:24:b3:15:f1:f8:10:0b:db:46:fd:59:76:f2:f1:40:83:4f:
6d:6a:b6:0f:2d:74:5f:4e:aa:30:b8:da:b3:1f:3e:1c:8a:f2:
6e:ba:64:af:43:ab:eb:67:96:0b:b1:40:7a:43:a3:11:c4:5a:
31:0c:40:44:da:25:20:47:c7:01:a8:49:42:16:42:ee:ae:4e:
7f:31:68:9a:29:4d:d5:ce:cb:10:57:ab:e7:e2:0b:9e:c3:8b:
a3:ae:0e:90:c4:be:bb:a9:39:c6:42:42:fc:8f:93:05:02:0d:
dd:82:6d:cb:1b:17:ba:56:0b:96:bf:f7:38:96:32:b7:b6:93:
79:42:45:09:52:49:6a:f4:ac:d7:70:8f:a3:1b:8f:09:63:76:
9f:27:d3:43:0a:39:d9:4b:35:94:e4:f4:b4:f4:73:be:69:37:
8c:15:20:de:52:95:82:0c:27:f5:8e:28:5f:98:fc:d1:b6:a2:
e8:3d:af:37:46:eb:0f:7d:cb:a5:6f:86:c5:b7:58:6e:9c:bd:
93:4d:3f:cc:82:ea:d8:89:c4:8e:bf:fc:72:f2:f5:14:35:28:
bc:a4:c0:a4:d0:e2:ba:31:4c:25:b9:0f:a5:87:fa:e4:f7:6c:
38:ad:22:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 07:03:39 2026 by rpki-client