Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
File: J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft (raw, json)
Hash identifier: GlsebgAMYyuYF+Yxaz8vdy7sgO+m9xWkX3WUci8wH9o=
Subject key identifier: 96:98:04:3D:63:8A:6C:67:ED:3A:28:31:B0:9A:77:A0:F4:A9:D4:F1
Authority key identifier: 27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F
Certificate issuer: /CN=2750f3d7ed825617e26be09aeccc62dda4ea314f
Certificate serial: 019D9BF565FF0076FF10DF422241C3942549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
Manifest number: 0328
Signing time: Fri 17 Apr 2026 15:00:43 +0000
Manifest this update: Fri 17 Apr 2026 15:00:43 +0000
Manifest next update: Sat 18 Apr 2026 15:00:43 +0000
Files and hashes: 1: J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl (hash: K2VlhVGPt3AJYwLUZQKDx/UH3Pv9jgRT6i8yWrAX36U=)
2: TKAcyjW-K2fMWFteP_AgVE5Sf58.roa (hash: EQ/0GqnYlDDezTnOJGpjIfUWvXw1RICNNg5+3Mf+uqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:65:ff:00:76:ff:10:df:42:22:41:c3:94:25:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2750f3d7ed825617e26be09aeccc62dda4ea314f
Validity
Not Before: Apr 17 15:00:43 2026 GMT
Not After : Apr 18 15:00:43 2026 GMT
Subject: CN=9698043d638a6c67ed3a2831b09a77a0f4a9d4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:1c:92:7b:85:7e:57:75:eb:7b:3f:f4:80:
b2:3a:21:bb:a5:13:cd:dd:eb:0d:30:5c:17:78:93:
27:b5:df:f7:c7:63:67:7e:f2:8a:b1:c1:4b:45:85:
bb:6d:b3:ed:c9:cf:f1:a3:c0:cc:04:0c:0d:a6:f9:
d0:1d:a5:cc:28:33:12:c2:bf:df:96:8f:bd:47:30:
59:0d:d4:44:0d:0a:2f:bd:5e:1e:48:1d:3e:94:e6:
a2:91:aa:30:13:c3:cc:8c:52:c7:31:1c:5e:b6:0b:
0e:a6:98:d5:b4:eb:f9:1b:c7:65:28:53:0f:23:ac:
c1:52:c8:e3:9f:f5:7f:14:b7:8d:5d:0e:ad:04:ae:
07:c1:ca:8e:8b:ab:7c:8b:a6:8b:47:6d:10:97:69:
5d:b4:39:f2:36:35:d6:65:61:87:e7:8c:9c:d7:cd:
73:40:47:a5:78:5c:b7:3e:4a:5e:bd:cc:7c:81:6f:
51:67:65:b2:53:3d:c2:db:5f:19:33:3b:22:6d:f6:
f6:0e:27:94:14:a9:a9:89:48:77:57:30:cc:2e:cd:
9b:0e:0c:0d:e9:15:b6:a6:61:04:67:17:70:a3:d3:
da:d6:71:02:47:10:dd:dc:62:6b:df:b3:82:c3:8f:
95:fe:f3:59:51:9c:a5:e9:c0:cc:10:61:30:80:26:
20:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:98:04:3D:63:8A:6C:67:ED:3A:28:31:B0:9A:77:A0:F4:A9:D4:F1
X509v3 Authority Key Identifier:
keyid:27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4a:ab:cf:09:f3:0b:f9:21:94:6d:3c:fb:53:f4:db:88:8f:
f6:d3:1f:08:9e:09:31:dd:43:9b:01:7c:74:2d:2b:ef:39:30:
4c:76:bf:bc:52:79:87:c1:83:00:6c:03:f2:aa:91:bc:ca:98:
16:c5:79:c5:4a:9d:20:2e:a8:a8:0b:e6:72:fb:80:cc:95:5b:
6a:8f:e6:7f:7d:0d:70:54:5a:78:64:67:27:cb:0a:5b:64:99:
ac:78:72:1e:33:3d:54:49:8b:67:5a:59:0f:f0:16:07:f7:5d:
22:4b:2e:85:bf:b0:e8:7d:d4:4a:58:cf:40:ff:c3:7e:35:b5:
95:52:59:b1:fd:36:1a:1f:53:d7:69:54:fc:f6:e0:1c:94:19:
ec:38:44:51:d1:3a:ec:0e:1c:ad:3e:32:4c:86:f0:40:36:b8:
2e:5a:5d:81:3c:17:49:eb:69:b7:59:91:33:81:a7:59:e0:cb:
e6:ef:b6:54:86:36:ac:90:13:10:5c:4c:73:d6:20:6d:54:c2:
fa:da:e7:6d:b2:b5:36:0e:18:81:5d:27:84:1d:12:3a:de:a7:
ed:4c:1b:6f:9e:68:5d:48:5e:78:65:52:98:c7:90:1b:a2:cf:
6c:f9:47:4c:f5:48:3b:58:f3:4b:d6:cd:0f:2f:c0:8b:62:f8:
b4:7f:04:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:24:41 2026 by rpki-client