Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft
File: J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft (raw, json)
Hash identifier: wH1K06GAfLtbiA0OAij87ClEJb7Jrh1FzvJLiMSmlo8=
Subject key identifier: D1:7E:2C:5B:5D:66:03:F2:67:71:27:63:D1:3B:B6:66:0D:32:D9:DE
Authority key identifier: 27:FC:A5:B7:A7:7D:88:76:49:F6:8A:45:C9:0D:66:7C:76:50:01:64
Certificate issuer: /CN=27fca5b7a77d887649f68a45c90d667c76500164
Certificate serial: 019D9E88E53A70B8FA795E11891FCA762BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft
Manifest number: 0221
Signing time: Sat 18 Apr 2026 03:01:04 +0000
Manifest this update: Sat 18 Apr 2026 03:01:04 +0000
Manifest next update: Sun 19 Apr 2026 03:01:04 +0000
Files and hashes: 1: J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.crl (hash: QBMARqhQymeUoi54s1+1vLecd926mUqo0p3GcyDRvmY=)
2: MjJql6N1k7NzCgb9-0-RouDw4k8.roa (hash: fpENb/LPkDXvYm6to8o4nXJyGfsle0bOqeriZZmpCDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:88:e5:3a:70:b8:fa:79:5e:11:89:1f:ca:76:2b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27fca5b7a77d887649f68a45c90d667c76500164
Validity
Not Before: Apr 18 03:01:04 2026 GMT
Not After : Apr 19 03:01:04 2026 GMT
Subject: CN=d17e2c5b5d6603f267712763d13bb6660d32d9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9d:eb:3b:12:df:8a:02:ea:a8:6e:b9:d7:e8:
65:89:0a:8b:09:2c:c1:de:a1:30:cc:d4:36:ca:f0:
8c:5e:61:b9:ea:b1:88:81:2f:6c:e2:b5:4e:f2:6b:
b8:69:e9:8b:93:ed:5f:85:a5:c1:20:d3:a4:36:62:
a9:78:a8:fb:2b:2f:f3:6b:ca:c8:fc:ab:57:81:fa:
20:41:f2:0d:6d:c1:0e:ca:4f:d3:d0:7f:69:fa:c8:
86:82:63:45:15:b6:59:40:0d:e9:31:ee:59:e0:dc:
69:86:2b:28:3b:02:ef:a6:bc:72:55:46:1a:f8:3e:
2d:52:ba:11:57:38:c2:7a:c5:c6:e0:53:20:a3:1d:
34:dd:58:d8:3b:8c:4b:07:1a:1c:24:f9:f1:56:80:
d7:f4:af:0f:d7:a0:a5:2c:67:10:16:05:55:0f:9c:
74:ec:22:8a:6c:00:1f:6a:25:79:4c:70:86:2e:a2:
f5:09:41:f1:8c:88:4b:86:d2:9c:a8:3f:67:19:39:
c8:95:e7:f2:2d:f9:81:d1:4d:5f:d5:a2:c7:ed:7a:
d7:41:9d:b6:30:c6:b1:cd:f9:95:94:ab:10:49:ef:
1f:a0:f7:2c:3f:b0:a7:41:85:c1:e5:06:42:89:db:
03:5b:ab:36:ca:19:89:cb:d9:19:49:2e:eb:8a:20:
cd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7E:2C:5B:5D:66:03:F2:67:71:27:63:D1:3B:B6:66:0D:32:D9:DE
X509v3 Authority Key Identifier:
keyid:27:FC:A5:B7:A7:7D:88:76:49:F6:8A:45:C9:0D:66:7C:76:50:01:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d8:51:68:06:95:f6:ed:a3:67:e0:dc:8b:b0:98:d5:98:db:
a5:92:73:8c:d8:a3:02:03:8a:2e:9c:ba:71:07:9c:bb:6a:3b:
6b:c9:89:3d:cf:83:6a:ca:fe:38:27:10:4b:12:f5:2b:46:a1:
31:d6:23:c7:8e:2d:25:d8:ba:c9:7e:79:16:57:9d:27:5a:86:
03:bc:85:b0:27:77:32:61:f3:99:3e:0f:b9:b3:14:88:ef:cd:
53:8f:a6:98:e5:c3:65:a7:7e:ee:9c:a4:46:27:ab:e3:54:49:
1b:d3:8b:fc:42:94:ee:39:9c:f9:49:5d:ae:31:c1:50:59:19:
c5:64:4d:6c:47:a3:81:76:09:8e:68:6c:3a:cc:79:f8:81:9a:
b1:06:14:87:9d:fb:e4:38:2b:7b:35:7d:9a:13:e3:8c:7d:ce:
a3:46:b3:5c:ad:bb:a2:45:5e:aa:a2:c5:bc:35:40:c1:ac:09:
39:19:63:cf:34:43:32:2a:81:d4:e3:b8:18:c3:85:a3:47:36:
45:1d:eb:2c:7f:a8:cd:58:34:5c:94:9a:1c:ac:fa:4e:90:aa:
8c:f6:95:3a:d4:94:69:50:4f:16:ac:0c:6c:aa:6e:00:05:6c:
6f:27:44:6a:e9:08:8d:77:6c:22:50:bd:52:6d:d1:5a:32:60:
3a:a6:a0:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2eiOU6cLj6eV4RiR/Kdiu3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZmNhNWI3YTc3ZDg4NzY0OWY2OGE0NWM5MGQ2NjdjNzY1
MDAxNjQwHhcNMjYwNDE4MDMwMTA0WhcNMjYwNDE5MDMwMTA0WjAzMTEwLwYDVQQD
EyhkMTdlMmM1YjVkNjYwM2YyNjc3MTI3NjNkMTNiYjY2NjBkMzJkOWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ3rOxLfigLqqG651+hliQqLCSzB
3qEwzNQ2yvCMXmG56rGIgS9s4rVO8mu4aemLk+1fhaXBINOkNmKpeKj7Ky/za8rI
/KtXgfogQfINbcEOyk/T0H9p+siGgmNFFbZZQA3pMe5Z4NxphisoOwLvprxyVUYa
+D4tUroRVzjCesXG4FMgox003VjYO4xLBxocJPnxVoDX9K8P16ClLGcQFgVVD5x0
7CKKbAAfaiV5THCGLqL1CUHxjIhLhtKcqD9nGTnIlefyLfmB0U1f1aLH7XrXQZ22
MMaxzfmVlKsQSe8foPcsP7CnQYXB5QZCidsDW6s2yhmJy9kZSS7riiDNvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNF+LFtdZgPyZ3EnY9E7tmYNMtneMB8GA1UdIwQY
MBaAFCf8pbenfYh2SfaKRckNZnx2UAFkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl95bHQ2ZDlpSFpKOW9wRnlRMW1mSFpRQVdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8zNTM4NWItNjY4NC00NTllLTgzMjct
YzFmYWUwMDg4OWRiLzEvSl95bHQ2ZDlpSFpKOW9wRnlRMW1mSFpRQVdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8zNTM4NWItNjY4NC00NTllLTgzMjctYzFmYWUwMDg4OWRi
LzEvSl95bHQ2ZDlpSFpKOW9wRnlRMW1mSFpRQVdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASthRaAaV
9u2jZ+Dci7CY1ZjbpZJzjNijAgOKLpy6cQecu2o7a8mJPc+Dasr+OCcQSxL1K0ah
MdYjx44tJdi6yX55FledJ1qGA7yFsCd3MmHzmT4PubMUiO/NU4+mmOXDZad+7pyk
Rier41RJG9OL/EKU7jmc+UldrjHBUFkZxWRNbEejgXYJjmhsOsx5+IGasQYUh537
5DgrezV9mhPjjH3Oo0azXK27okVeqqLFvDVAwawJORljzzRDMiqB1OO4GMOFo0c2
RR3rLH+ozVg0XJSaHKz6TpCqjPaVOtSUaVBPFqwMbKpuAAVsbydEaukIjXdsIlC9
Um3RWjJgOqaguw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 07:16:04 2026 by rpki-client