Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
File: J0PbfuNKwtTtV49JXgCWy5iv9xw.mft (raw, json)
Hash identifier: FFTeJt442A8UZIPwLrjT/AC749S3O5v7+4BXxof7euI=
Subject key identifier: 17:84:A5:05:18:A6:2F:47:EE:EF:D4:84:DB:07:D4:83:E6:04:49:0B
Authority key identifier: 27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C
Certificate issuer: /CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
Certificate serial: 019D9E5178A431637E64ACA4DD05893F9540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
Manifest number: 040F
Signing time: Sat 18 Apr 2026 02:00:32 +0000
Manifest this update: Sat 18 Apr 2026 02:00:32 +0000
Manifest next update: Sun 19 Apr 2026 02:00:32 +0000
Files and hashes: 1: FSCr9rK0vEudDS9_bQ3O-hGkqrk.roa (hash: ddVmg0mXECaptmy2zncQhSGmVK6AKxm9h3sGTc6VHOM=)
2: J0PbfuNKwtTtV49JXgCWy5iv9xw.crl (hash: 1NeTIGRT3nN1vTHO+CShWyeR9BW1zcQtImLqT3swhS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:51:78:a4:31:63:7e:64:ac:a4:dd:05:89:3f:95:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
Validity
Not Before: Apr 18 02:00:32 2026 GMT
Not After : Apr 19 02:00:32 2026 GMT
Subject: CN=1784a50518a62f47eeefd484db07d483e604490b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:28:20:79:ba:cf:d4:23:9e:07:eb:7d:18:
3d:4b:e8:bd:dd:66:d0:c6:26:74:18:82:55:18:7e:
d5:3a:0e:8f:d7:f4:b3:48:1a:4d:4b:f7:16:12:fb:
f5:d6:4b:98:3e:3e:6a:c1:78:38:57:cf:3d:85:0a:
90:75:36:64:29:38:3d:9c:c3:3e:db:7a:18:07:ec:
f2:fa:24:12:68:8f:85:ed:ed:36:ea:4d:d4:dc:1f:
1b:ac:4b:cc:8b:33:d8:44:41:42:72:85:e1:cf:b1:
49:af:f8:6f:2a:db:46:f9:0c:c2:b0:c8:fd:cb:2b:
ab:2d:9e:fd:21:c7:cd:83:be:f3:90:d2:21:bf:19:
bc:07:7e:9d:d4:06:e8:4a:64:89:26:4e:2e:3b:04:
d1:77:6f:82:7c:ad:d1:98:4f:5b:77:dd:75:f1:e6:
aa:09:3c:5b:1b:4b:d8:91:61:48:cb:62:a3:22:74:
0c:7e:7b:34:aa:c6:c3:a1:27:b9:1d:53:0b:ec:8a:
5b:fd:b8:15:0f:82:92:67:88:39:d1:11:ba:24:7c:
9e:a4:dd:d0:ad:03:c6:62:e6:9d:de:1b:f9:f0:56:
7e:1c:83:8f:17:53:25:ff:83:86:23:4b:c2:f0:92:
ed:52:17:4d:ff:34:41:4f:ea:c8:39:02:ab:2d:2a:
ef:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:84:A5:05:18:A6:2F:47:EE:EF:D4:84:DB:07:D4:83:E6:04:49:0B
X509v3 Authority Key Identifier:
keyid:27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b7:69:aa:1c:2c:bc:ef:2d:a9:a1:aa:37:f8:77:4b:09:84:
b9:18:6f:36:96:a4:e7:65:b7:1e:13:3c:dc:5f:27:8b:be:14:
79:9f:21:20:ea:d9:ff:07:8f:f8:18:eb:75:1b:c1:54:a9:f2:
16:41:cd:8d:0b:42:42:7c:3e:aa:c1:01:51:f3:b1:c3:9a:fe:
4c:cd:33:f9:e1:3e:55:4e:bf:05:c4:84:70:a3:4b:f9:65:7e:
0f:4f:9b:25:9a:22:01:6d:ac:88:6a:2a:65:6a:0b:f9:3c:fe:
8d:16:8a:a0:e7:26:f1:4e:b3:79:a6:65:50:60:4b:f0:fd:f4:
c6:de:51:5c:45:1e:90:b2:9a:d6:81:a0:6e:e7:8e:f8:8d:2b:
b8:87:7c:c1:ce:b5:9e:b6:4c:90:56:01:81:21:a7:7f:0d:14:
6f:21:c5:59:97:d3:8e:56:12:6f:79:45:12:72:4e:d2:49:e7:
34:60:76:9b:67:6d:bd:99:e7:75:e6:34:53:e4:52:fb:0d:88:
05:39:30:a5:e9:b5:9d:06:ba:f5:a0:f4:37:48:42:7d:a5:1c:
16:e3:f4:58:44:d1:5f:66:f3:1a:b7:b6:fa:00:45:6b:e1:97:
65:af:e9:74:7d:63:bf:f3:c4:7d:e8:69:43:8b:1c:53:2f:80:
6e:92:13:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:15:37 2026 by rpki-client