Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
File: J_lYw7dZsseJb17WY-gHeB8_9aI.mft (raw, json)
Hash identifier: BASSKL03BXGG0m8WRViL1B16MLLypRBa6PL5GE4GYsk=
Subject key identifier: 0C:A5:C2:13:A1:6B:79:D4:03:43:F0:C2:C9:D0:2D:6D:84:1B:54:77
Authority key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
Certificate issuer: /CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Certificate serial: 019CACEB8734DDFD2FEF00E95267141CA7C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
Manifest number: 1075
Signing time: Mon 02 Mar 2026 05:00:42 +0000
Manifest this update: Mon 02 Mar 2026 05:00:42 +0000
Manifest next update: Tue 03 Mar 2026 05:00:42 +0000
Files and hashes: 1: ElTViivmjGxEdxaxj11VFkP14YI.roa (hash: YUVaRGC2xsx0b6XubgQiQ6H3U/a4QTrhpMWWRuXADx4=)
2: J_lYw7dZsseJb17WY-gHeB8_9aI.crl (hash: ps7vvdfwBN/wCdzQJZevHTZ+PpUNXvHw8JzBYSGJFEE=)
3: MH507cRFXNNeqadxQdKywhHkylA.roa (hash: SJpj63kNuERbqmJKNAG4loDyhiVzSuV9bopPuk1oXO0=)
4: yXUQWiWAuj52X2blMDF0ySpC9kY.roa (hash: 2dpSoguExI4LCzpUhvwGpd2mxrAlFFlJZgWzZagSNCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:87:34:dd:fd:2f:ef:00:e9:52:67:14:1c:a7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Validity
Not Before: Mar 2 05:00:42 2026 GMT
Not After : Mar 3 05:00:42 2026 GMT
Subject: CN=0ca5c213a16b79d40343f0c2c9d02d6d841b5477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:10:51:5a:27:3c:25:6d:9b:14:10:ff:0d:25:
c7:ac:01:1a:de:31:af:60:9a:8b:a6:4d:b3:00:1b:
c4:08:f7:45:9e:ef:e3:ca:1b:7f:78:c6:be:65:27:
39:2f:2a:aa:2b:17:b3:b4:68:b6:bd:ef:e6:04:5a:
99:78:b6:a4:81:cd:68:97:a3:63:1a:2f:3a:43:bd:
7d:bb:4f:95:14:57:99:9f:80:9c:cb:44:6b:6e:7c:
e4:ea:04:58:cb:57:b0:6b:46:b0:e2:89:36:f9:d2:
64:f3:0a:f4:14:8e:bd:92:81:1e:c2:17:f7:47:96:
fa:84:18:1e:63:b3:d7:c6:72:df:52:4b:d7:bf:38:
94:7c:21:80:76:e8:be:f9:2f:84:7d:6f:3b:50:a2:
bb:b2:fd:49:33:09:f5:af:89:20:a0:f6:db:7a:78:
8e:48:89:3a:14:1d:23:00:32:ae:3f:85:d7:69:d1:
cb:50:30:a3:87:e3:39:f2:6a:60:26:2d:52:96:d5:
3a:e7:8e:a9:4e:d5:d3:59:e9:e2:f9:d3:29:e7:fc:
ca:86:0e:d4:1c:c6:65:32:af:2c:94:26:f7:69:b8:
68:24:26:95:1d:5a:c9:b7:d1:cc:75:ac:bb:aa:de:
1b:34:ed:18:85:ca:41:ae:5f:ea:4f:bb:04:73:cc:
a0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A5:C2:13:A1:6B:79:D4:03:43:F0:C2:C9:D0:2D:6D:84:1B:54:77
X509v3 Authority Key Identifier:
keyid:27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:cd:c5:79:50:09:b4:d4:e5:08:bd:e9:ee:51:55:25:a0:85:
a6:0b:ef:ef:6c:26:74:16:b1:cc:cd:bd:51:59:fd:63:ba:9b:
d2:df:ea:d0:c3:39:7b:82:ed:52:99:ba:9b:e2:df:cf:76:b7:
ca:c3:6b:fc:ba:d0:ad:d3:69:83:ef:f8:b4:36:ba:42:14:53:
c3:7a:bf:15:96:c8:8c:32:89:7d:2a:39:4f:dc:4b:a8:82:49:
2c:52:89:30:b3:32:2b:fd:e7:1c:b9:35:dd:1c:48:b7:2e:62:
c2:34:8d:f8:39:23:7b:2c:e9:9f:7a:40:8f:c9:2f:43:d8:97:
4a:ea:3a:a9:79:a5:d3:20:cd:fb:8f:0a:6e:df:60:6d:b9:75:
3a:f8:98:3d:18:d5:1b:35:ba:84:9c:a4:a0:3c:12:cd:ec:be:
66:d6:99:a0:5a:10:03:9b:ef:af:26:22:c1:3c:10:03:a5:3d:
d3:7a:5a:bb:1d:8c:2f:02:17:2b:79:c5:3b:15:ff:cc:0a:ee:
f9:e9:60:dc:52:30:30:cc:7e:ee:c9:ff:8e:cf:81:c8:0d:3c:
e5:b6:ff:b3:fd:fc:cd:d6:8a:e4:5f:11:01:47:c1:22:56:57:
32:32:13:8a:60:d9:a3:84:b6:07:f6:2b:8f:be:37:6f:2c:80:
af:40:00:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:24 2026 by rpki-client