
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
File: J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft (raw, json)
Hash identifier: uUJ3jAoaztOg/moMcvYHxMLymB2/c2sbHIn864R9q0Y=
Subject key identifier: B1:08:88:E7:FD:68:9E:3A:B2:5B:AC:FF:58:34:4F:82:18:A2:6D:58
Authority key identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
Certificate issuer: /CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Certificate serial: 019CAB6AD7207E87EEBC259742862E3BEFF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
Manifest number: 185C
Signing time: Sun 01 Mar 2026 22:00:31 +0000
Manifest this update: Sun 01 Mar 2026 22:00:31 +0000
Manifest next update: Mon 02 Mar 2026 22:00:31 +0000
Files and hashes: 1: 0T_OaQCbJNCqGeMPQhOWXxsxGm4.roa (hash: Ft44EkrKyKsAFbkVxuqQXqMtrjyV/ZdKGwAAf8PGKYI=)
2: J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl (hash: CVrtK3SBw1v7J08Ieftsb6MRnvX6w2cfqaqLuzDZ8p0=)
3: j54P9E7HJNxXnzx0c4ZlhgLNrmk.roa (hash: 9KgP+vcQVnAWqyQznz1mnI6dtjZmqs2SRf03m1FIUiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:d7:20:7e:87:ee:bc:25:97:42:86:2e:3b:ef:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Validity
Not Before: Mar 1 22:00:31 2026 GMT
Not After : Mar 2 22:00:31 2026 GMT
Subject: CN=b10888e7fd689e3ab25bacff58344f8218a26d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:19:f5:d9:9f:b4:cc:2a:fb:d7:25:73:d0:78:
e7:18:e9:87:91:2a:28:8a:03:75:3e:93:9b:b4:3b:
73:ab:54:f1:be:df:94:fb:7d:99:37:e8:86:2b:4c:
08:34:70:8e:c2:fd:7d:3f:52:e2:8f:97:07:2f:35:
77:65:6e:19:15:eb:cf:e6:ae:5c:5c:9b:bf:c8:c4:
f6:32:5d:75:fe:93:aa:3b:e0:18:d1:89:7f:dc:ab:
27:cb:17:46:40:4e:5e:4f:65:d4:ff:93:5f:16:9c:
1e:ac:3e:fe:e6:06:58:b4:5f:ab:d2:1a:05:0b:6d:
45:69:38:b9:c3:48:c8:fc:f6:aa:4b:8f:35:05:e0:
57:ae:25:4f:94:8a:14:4b:dd:96:69:90:63:dc:9d:
47:fc:45:6d:fe:91:15:5c:63:ef:0f:9c:07:29:df:
06:62:a9:01:56:2f:0d:0a:f2:0b:fe:86:d7:26:e5:
73:90:aa:9e:59:cc:7d:3c:0e:4a:41:a1:8f:1d:88:
ad:ce:64:52:c2:af:05:47:9f:be:ed:5d:c7:d7:e2:
e1:78:62:71:32:00:1b:5c:d6:f6:db:80:d5:5d:70:
34:32:0d:01:63:5a:ff:6d:3b:3c:c0:2f:d3:70:93:
e1:26:87:6b:3b:59:95:e4:33:76:b3:56:7e:81:a0:
30:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:08:88:E7:FD:68:9E:3A:B2:5B:AC:FF:58:34:4F:82:18:A2:6D:58
X509v3 Authority Key Identifier:
keyid:27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:3a:30:e2:f8:3a:40:80:00:54:bb:bf:74:68:86:d7:d8:83:
cf:92:18:09:70:b7:bf:81:5d:7d:19:a2:ea:21:fe:bd:eb:c3:
40:39:b6:02:c8:c8:ec:71:4c:8b:d4:73:aa:dc:19:46:3f:65:
a7:6f:a3:74:3e:0c:62:f3:72:ef:b3:a1:93:9b:a2:af:21:0a:
19:6e:0a:c5:94:ba:d4:b9:fa:76:3e:93:ca:73:af:2a:6c:24:
eb:cd:1c:3f:02:0e:ba:ab:6e:94:89:0e:57:7f:19:5f:41:5b:
41:1e:69:ca:c6:09:53:2e:65:f2:5a:e1:56:fb:4c:0c:e1:ef:
9d:78:ce:6a:96:2a:e6:17:c9:d8:93:ec:fd:1f:8c:3b:b2:4c:
20:b7:2b:2e:d6:6a:34:4e:fe:11:0a:78:92:37:b6:be:a7:0f:
f1:f7:cc:c5:0f:3a:70:bd:67:fe:b4:5d:dc:51:01:5f:db:33:
18:d4:a0:44:cd:c0:cb:57:14:d1:0c:d8:ed:1a:19:68:c4:a9:
b8:2a:95:4d:80:09:95:91:09:cc:44:0a:60:82:c0:0f:82:e5:
b4:87:e2:00:3e:fc:1a:c3:d0:d3:1b:13:bd:a1:d5:c3:87:2f:
68:dd:44:67:6b:d1:48:a6:7c:cc:d9:e7:b6:28:fa:05:e5:02:
56:43:55:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:47 2026 by rpki-client