
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
File: J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft (raw, json)
Hash identifier: llsTFzeHfgCusna9oMf6H1UcvzP2sW7w0cRCL8DD7J8=
Subject key identifier: 47:1D:B9:B3:F6:E4:48:32:94:47:C4:EF:76:BA:E8:12:74:A0:06:B1
Authority key identifier: 27:B5:6E:B2:5B:05:A0:88:26:C2:64:8F:FF:1A:CF:36:B4:94:D8:14
Certificate issuer: /CN=27b56eb25b05a08826c2648fff1acf36b494d814
Certificate serial: 019CAE350A610B26D5FD65E91D8EF93C6FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
Manifest number: 0503
Signing time: Mon 02 Mar 2026 11:00:37 +0000
Manifest this update: Mon 02 Mar 2026 11:00:37 +0000
Manifest next update: Tue 03 Mar 2026 11:00:37 +0000
Files and hashes: 1: J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl (hash: IhEq3mHOg7cJE2px6AqVo/cZOAycUX2TJh20IbSrn8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:0a:61:0b:26:d5:fd:65:e9:1d:8e:f9:3c:6f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b56eb25b05a08826c2648fff1acf36b494d814
Validity
Not Before: Mar 2 11:00:37 2026 GMT
Not After : Mar 3 11:00:37 2026 GMT
Subject: CN=471db9b3f6e448329447c4ef76bae81274a006b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:95:ea:a1:49:88:1c:87:69:6e:a3:2e:4b:
f0:56:6d:d8:86:b3:c6:4b:80:64:5f:70:f1:99:3a:
46:e4:ec:f4:d4:9a:f6:7a:f1:d5:c4:6e:1b:af:cc:
8d:3b:9e:47:a6:d7:25:54:42:9f:d3:d8:c1:c6:c3:
e7:26:6a:bc:ec:d7:0e:f4:35:df:bb:15:97:c8:dd:
4d:f5:2f:bf:69:1c:5c:76:3a:ec:12:23:d0:f7:4b:
23:dd:20:22:4a:f9:74:17:16:3e:71:35:34:b2:05:
37:cb:4b:16:ff:78:b7:2a:14:b2:86:ef:11:66:12:
25:c9:4a:c6:d3:a0:9c:ab:79:95:e0:61:f0:e7:56:
93:c6:bb:d8:c1:e0:02:0e:33:40:95:26:68:55:04:
c8:59:05:0f:b5:9b:ac:37:3a:00:d5:fc:93:9a:32:
4b:94:5e:2a:1e:74:87:56:b4:f7:1c:fe:ca:21:ba:
c4:4e:60:b9:45:fd:10:c0:82:9c:32:2f:8a:8d:c6:
95:04:da:3d:aa:f1:74:fa:b9:8f:d2:c8:03:d6:97:
68:6c:55:fe:3b:08:8c:e3:11:52:0a:d5:0d:37:78:
01:d4:f1:59:30:6f:4c:8a:e7:7d:e3:f1:64:9e:af:
bb:48:6a:ee:8a:85:7d:76:61:ef:6d:b9:9b:4f:7e:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1D:B9:B3:F6:E4:48:32:94:47:C4:EF:76:BA:E8:12:74:A0:06:B1
X509v3 Authority Key Identifier:
keyid:27:B5:6E:B2:5B:05:A0:88:26:C2:64:8F:FF:1A:CF:36:B4:94:D8:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e5:8f:11:ab:18:3d:1a:3d:41:ce:aa:a9:ac:d9:5a:11:3b:
05:c7:dd:01:5f:b5:5a:56:41:20:f6:8c:54:56:81:22:1c:fa:
e6:fa:15:d1:72:0b:5a:d4:1c:47:2b:dd:13:2d:c6:91:cd:09:
00:0a:00:96:93:c5:0d:3f:fe:58:e7:b3:c8:66:2c:1c:b3:1f:
14:f6:56:0a:c8:c2:43:d9:c8:71:1b:32:59:32:70:a9:26:93:
58:bf:8f:e0:3a:fd:7f:cc:be:64:24:5c:d1:f7:20:4b:e8:42:
2a:67:23:80:b2:a0:35:3d:5f:cc:b3:28:5b:28:6f:d5:59:f7:
3f:00:de:ec:79:ba:3d:da:7f:9c:b7:a5:1b:1d:da:22:52:c4:
5a:c8:37:03:85:4e:56:cf:6f:d5:8d:f9:66:14:64:b8:f1:99:
03:1a:d1:fa:3e:02:20:62:98:3a:c0:22:3e:26:7b:4b:b1:b3:
42:a8:10:5d:f6:0c:66:e8:09:af:04:73:dc:c7:ae:12:a7:5d:
27:94:01:17:e8:9c:c4:41:64:8e:ef:0f:42:4f:42:84:75:95:
55:6d:3f:87:1d:1d:61:aa:bd:5b:58:df:a5:20:5b:a0:47:ac:
75:6d:f8:34:2b:e0:83:3e:d5:f1:b0:f4:a2:a9:24:aa:be:e9:
7b:46:71:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNQphCybV/WXpHY75PG/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YjU2ZWIyNWIwNWEwODgyNmMyNjQ4ZmZmMWFjZjM2YjQ5
NGQ4MTQwHhcNMjYwMzAyMTEwMDM3WhcNMjYwMzAzMTEwMDM3WjAzMTEwLwYDVQQD
Eyg0NzFkYjliM2Y2ZTQ0ODMyOTQ0N2M0ZWY3NmJhZTgxMjc0YTAwNmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2CV6qFJiByHaW6jLkvwVm3YhrPG
S4BkX3DxmTpG5Oz01Jr2evHVxG4br8yNO55HptclVEKf09jBxsPnJmq87NcO9DXf
uxWXyN1N9S+/aRxcdjrsEiPQ90sj3SAiSvl0FxY+cTU0sgU3y0sW/3i3KhSyhu8R
ZhIlyUrG06Ccq3mV4GHw51aTxrvYweACDjNAlSZoVQTIWQUPtZusNzoA1fyTmjJL
lF4qHnSHVrT3HP7KIbrETmC5Rf0QwIKcMi+KjcaVBNo9qvF0+rmP0sgD1pdobFX+
OwiM4xFSCtUNN3gB1PFZMG9Miud94/Fknq+7SGruioV9dmHvbbmbT35OVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcdubP25EgylEfE73a66BJ0oAaxMB8GA1UdIwQY
MBaAFCe1brJbBaCIJsJkj/8azza0lNgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjdWdXNsc0ZvSWdtd21TUF94clBOclNVMkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi81OTk1NTUtNDNmNy00MWZjLWFhNTct
MDM4ZjE1OTU2M2ZmLzEvSjdWdXNsc0ZvSWdtd21TUF94clBOclNVMkJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi81OTk1NTUtNDNmNy00MWZjLWFhNTctMDM4ZjE1OTU2M2Zm
LzEvSjdWdXNsc0ZvSWdtd21TUF94clBOclNVMkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGeWPEasY
PRo9Qc6qqazZWhE7BcfdAV+1WlZBIPaMVFaBIhz65voV0XILWtQcRyvdEy3Gkc0J
AAoAlpPFDT/+WOezyGYsHLMfFPZWCsjCQ9nIcRsyWTJwqSaTWL+P4Dr9f8y+ZCRc
0fcgS+hCKmcjgLKgNT1fzLMoWyhv1Vn3PwDe7Hm6Pdp/nLelGx3aIlLEWsg3A4VO
Vs9v1Y35ZhRkuPGZAxrR+j4CIGKYOsAiPiZ7S7GzQqgQXfYMZugJrwRz3MeuEqdd
J5QBF+icxEFkju8PQk9ChHWVVW0/hx0dYaq9W1jfpSBboEesdW34NCvggz7V8bD0
oqkkqr7pe0ZxZQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:39:26 2026 by rpki-client