
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
File: J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft (raw, json)
Hash identifier: dYc96HdMRI+31CziTtsMMB8wifQSllopHvFAdb+nZuU=
Subject key identifier: 03:F0:5B:8C:24:6A:8F:6D:3C:C7:1A:0A:C4:AF:40:07:0D:43:7A:8F
Authority key identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
Certificate issuer: /CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Certificate serial: 019D98F446CF651813A53F42BC8D93C49986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
Manifest number: 18D7
Signing time: Fri 17 Apr 2026 01:00:38 +0000
Manifest this update: Fri 17 Apr 2026 01:00:38 +0000
Manifest next update: Sat 18 Apr 2026 01:00:38 +0000
Files and hashes: 1: 0T_OaQCbJNCqGeMPQhOWXxsxGm4.roa (hash: Ft44EkrKyKsAFbkVxuqQXqMtrjyV/ZdKGwAAf8PGKYI=)
2: J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl (hash: plEeoKxqIR3zdmw0d+tGTATszZ7niX4YMZ17IkcNxgU=)
3: j54P9E7HJNxXnzx0c4ZlhgLNrmk.roa (hash: 9KgP+vcQVnAWqyQznz1mnI6dtjZmqs2SRf03m1FIUiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:46:cf:65:18:13:a5:3f:42:bc:8d:93:c4:99:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Validity
Not Before: Apr 17 01:00:38 2026 GMT
Not After : Apr 18 01:00:38 2026 GMT
Subject: CN=03f05b8c246a8f6d3cc71a0ac4af40070d437a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fc:50:82:e2:4d:1b:fa:70:28:12:72:e6:73:
c4:f6:64:06:a3:bf:1a:09:eb:d2:f7:83:5e:c6:fb:
cf:3c:9f:db:83:02:46:a6:e2:3d:91:03:e0:99:92:
a1:08:27:be:5d:c2:71:6f:3c:e4:03:04:c3:60:41:
73:a8:04:ab:94:16:a1:68:06:d9:ec:a3:65:e7:bc:
12:46:9f:60:93:88:84:7c:15:ae:44:78:a4:31:15:
4d:d8:ed:d8:99:4a:83:7c:1b:5e:22:65:13:19:48:
ff:25:f7:e5:0c:0a:23:f1:6e:0a:37:aa:00:7e:cf:
e3:2d:59:e0:38:ac:2f:d2:50:99:17:95:c0:27:59:
90:c9:b9:8a:6b:f3:ea:78:9b:d9:f5:b4:70:93:88:
32:ca:5e:53:74:e6:bb:28:19:ae:24:cc:36:3e:e8:
66:87:55:ef:84:00:80:c4:a3:b4:68:53:23:fa:7a:
ea:66:d1:af:f2:2d:5c:18:f0:32:24:34:b5:73:23:
55:3a:b9:ad:9b:6d:3f:af:29:48:53:86:f2:c1:3e:
49:fe:c0:82:0b:1b:c7:61:1d:9f:52:e6:27:ad:5b:
b4:60:91:a4:a7:7f:c9:d8:fa:7e:4a:a1:56:dd:21:
76:a2:ff:e7:f0:19:a8:23:6a:8a:15:34:15:aa:43:
ae:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F0:5B:8C:24:6A:8F:6D:3C:C7:1A:0A:C4:AF:40:07:0D:43:7A:8F
X509v3 Authority Key Identifier:
keyid:27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c1:d8:68:8f:3a:de:22:06:65:db:46:f0:42:78:5e:b7:51:
fe:d1:cc:d5:2a:b1:c8:59:8a:5e:47:b6:ba:94:4d:24:53:94:
4c:b4:01:51:e8:24:19:bd:05:84:17:6c:15:58:0a:12:b0:f0:
30:37:7c:67:a8:1e:85:f1:b7:43:f0:9e:43:2a:a6:e1:a1:eb:
08:f7:23:96:36:46:55:1b:32:a0:da:ba:b5:01:c2:d7:9a:11:
fc:9d:58:7a:a1:bb:81:00:db:e3:1e:58:3a:8a:f8:dc:ea:e8:
fd:8b:b8:3d:2e:d5:eb:61:b7:a0:a9:64:ae:8a:b5:1f:56:b3:
e1:f3:91:4a:c5:2f:93:c0:72:4d:d7:97:3f:f1:b8:14:9b:38:
f1:08:ef:f6:a4:67:14:fe:2f:29:c3:02:87:39:f7:9a:49:40:
56:0f:21:6e:ef:41:71:bf:21:81:a9:63:36:57:f5:d5:d3:80:
3e:0e:3f:69:c0:ec:5d:06:e3:33:60:33:37:25:15:4a:f2:b3:
07:fc:19:b7:d4:81:88:a9:2e:55:70:9a:79:f4:40:9d:1f:8e:
73:5c:ba:f3:6f:7c:96:af:e6:1e:6b:16:36:33:6d:42:c9:4b:
44:d8:00:dc:0d:a5:bb:86:7d:e8:a2:51:49:09:59:74:cd:be:
4f:37:eb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:36 2026 by rpki-client