Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft
File: J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft (raw, json)
Hash identifier: /6O41f8gxYCrto9351XA8epE8LlNYfpEj5E/FA0fezE=
Subject key identifier: DF:97:CA:C9:56:CD:31:7F:A3:FF:6F:D2:4C:49:1E:E6:2C:D2:6A:5B
Authority key identifier: 27:FC:A5:B7:A7:7D:88:76:49:F6:8A:45:C9:0D:66:7C:76:50:01:64
Certificate issuer: /CN=27fca5b7a77d887649f68a45c90d667c76500164
Certificate serial: 01A0E32B9153B5645112FC0BBD23A085745A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft
Manifest number: 03D4
Signing time: Sun 27 Sep 2026 14:01:18 +0000
Manifest this update: Sun 27 Sep 2026 14:01:18 +0000
Manifest next update: Mon 28 Sep 2026 14:01:18 +0000
Files and hashes: 1: J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.crl (hash: Ve+cAKd/NtTFEJOSWE9sLclSvDjZAr8Hrda4EmxyF5k=)
2: Pw54cR_7mXTkLCTeaH82cHb0imE.roa (hash: kgaWLO8vhTm+FZNrLVuG24dAqylNjIiRO5sGejr42ro=)
3: tdhlzfacO8WrsoVHSei0cAaQkIY.roa (hash: rQkZvbNaqYP3J0TMZHz+SZ9Zlj8EyrQh6pS9XIjNqgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:91:53:b5:64:51:12:fc:0b:bd:23:a0:85:74:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27fca5b7a77d887649f68a45c90d667c76500164
Validity
Not Before: Sep 27 14:01:18 2026 GMT
Not After : Sep 28 14:01:18 2026 GMT
Subject: CN=df97cac956cd317fa3ff6fd24c491ee62cd26a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:93:9b:7d:36:6d:45:83:e4:56:d8:ee:48:73:
9c:6c:c4:c5:f4:b8:70:3f:16:5c:b6:43:14:f0:72:
9a:b2:a8:f0:f5:9a:b0:3c:f1:03:95:60:11:ac:9e:
8d:60:8d:fe:63:1a:0c:86:d5:0b:ef:65:4f:cf:2e:
16:4a:0e:a7:64:20:79:8e:c2:28:70:87:a2:95:5f:
4d:a5:ab:05:fa:dd:72:b8:6f:ba:d9:0e:fa:0a:5e:
25:bc:91:84:ca:50:0a:10:83:0d:55:4e:88:49:44:
04:c0:e6:25:ef:97:30:d7:28:61:bf:ad:a8:05:20:
81:4c:34:0e:31:75:2c:b7:e5:b2:fc:52:a1:64:fc:
11:37:0a:a6:d8:5e:f9:bd:dc:ef:ff:4a:b9:e4:6f:
5f:dd:39:36:8d:aa:36:cc:e7:b7:88:7f:bd:aa:a7:
c0:b8:1c:36:0d:61:f0:c2:2f:32:fe:2d:c7:a6:90:
db:85:54:88:c0:5a:49:fa:ef:71:0f:58:4b:c0:b1:
43:39:e9:d1:69:aa:b6:72:03:45:73:5a:d5:c5:29:
07:b7:a5:bb:0e:9f:bc:d6:a1:27:41:81:85:ae:34:
ef:0f:b9:ca:5c:4c:5a:04:4a:fd:56:da:fc:6b:cd:
10:3c:93:fb:6d:4c:19:77:84:55:11:1a:2f:6e:f3:
08:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:97:CA:C9:56:CD:31:7F:A3:FF:6F:D2:4C:49:1E:E6:2C:D2:6A:5B
X509v3 Authority Key Identifier:
keyid:27:FC:A5:B7:A7:7D:88:76:49:F6:8A:45:C9:0D:66:7C:76:50:01:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:87:e1:50:03:fa:27:c3:c8:0f:de:12:86:9e:91:cd:54:5e:
2d:3d:b5:e7:f5:cc:89:3e:d2:fb:89:ea:d0:3d:e3:a3:eb:05:
7a:05:c5:b5:ca:5b:1f:67:cc:d7:5f:54:b5:d9:fd:34:9c:45:
2d:00:80:7d:af:7b:49:6b:a6:d7:01:70:44:16:e5:93:15:28:
98:0d:14:16:b8:60:73:15:b0:9c:53:18:c1:7d:2c:2e:0e:97:
84:d3:00:fe:6b:da:54:d7:8d:63:1b:24:64:9c:bb:1d:d2:3e:
b0:2a:c9:a9:c5:bc:f2:22:0a:04:13:55:7e:c4:f7:1a:e3:dd:
70:56:6e:e4:a1:b7:eb:6a:77:78:02:eb:50:42:72:8e:92:70:
11:9d:4f:93:27:d0:cf:b9:ba:92:27:e3:79:71:9e:57:95:10:
f1:13:f8:5a:e0:54:5b:7f:8b:2b:16:47:99:f6:c0:e5:e8:f0:
f3:13:5c:48:31:5a:d6:6c:db:d0:eb:66:6c:72:af:19:fe:ce:
81:9f:58:78:27:55:dc:ba:ea:c8:8b:91:77:fc:31:de:b8:06:
27:b9:c7:76:63:17:ac:ab:c6:d5:fb:38:57:df:12:39:c0:ff:
79:cc:82:46:05:cb:49:b0:1b:e6:20:98:2f:f4:3b:82:d1:06:
fd:cd:12:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:26:39 2026 by rpki-client