Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
File: J_lYw7dZsseJb17WY-gHeB8_9aI.mft (raw, json)
Hash identifier: PqDuEA7O5GmgFrryEXM2G+Vhz5pvPiYOserd2tCWOoE=
Subject key identifier: 98:7C:6A:3B:77:A5:0A:6F:74:22:30:0A:98:95:F2:8F:2C:A7:30:05
Authority key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
Certificate issuer: /CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Certificate serial: 019D98867314BE11253559E12B09764C8FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
Manifest number: 10EF
Signing time: Thu 16 Apr 2026 23:00:41 +0000
Manifest this update: Thu 16 Apr 2026 23:00:41 +0000
Manifest next update: Fri 17 Apr 2026 23:00:41 +0000
Files and hashes: 1: ElTViivmjGxEdxaxj11VFkP14YI.roa (hash: YUVaRGC2xsx0b6XubgQiQ6H3U/a4QTrhpMWWRuXADx4=)
2: J_lYw7dZsseJb17WY-gHeB8_9aI.crl (hash: 2tyxl2oCj4iq/7RiGTZ/f7RH+3CdkpDyskG1h7BdsAU=)
3: MH507cRFXNNeqadxQdKywhHkylA.roa (hash: SJpj63kNuERbqmJKNAG4loDyhiVzSuV9bopPuk1oXO0=)
4: yXUQWiWAuj52X2blMDF0ySpC9kY.roa (hash: 2dpSoguExI4LCzpUhvwGpd2mxrAlFFlJZgWzZagSNCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:73:14:be:11:25:35:59:e1:2b:09:76:4c:8f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Validity
Not Before: Apr 16 23:00:41 2026 GMT
Not After : Apr 17 23:00:41 2026 GMT
Subject: CN=987c6a3b77a50a6f7422300a9895f28f2ca73005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:36:a0:65:2e:0e:11:6f:25:fb:40:28:83:4b:
9d:9d:af:6d:10:b8:b6:77:6c:6b:bf:d3:bb:07:4e:
2c:d1:aa:08:93:d6:e1:73:56:4e:b5:1b:cf:20:34:
80:5f:94:2a:09:bd:39:ba:0a:9a:7c:bc:c2:a1:e7:
8f:f7:cf:eb:a5:36:e1:c9:cb:1f:e3:05:ac:8c:3c:
15:49:03:bd:5b:92:9e:d7:9d:61:74:bd:78:f4:84:
bd:a7:76:df:29:5d:ad:70:18:eb:85:e5:61:8b:fa:
cf:d7:3e:81:a7:3d:6e:12:00:44:38:f0:39:d5:b9:
77:d7:e8:90:d6:83:8c:0b:dc:f3:58:d1:e3:2a:25:
51:0e:c2:2e:39:dc:34:d9:0f:43:e5:11:73:df:9e:
c4:eb:2f:79:7e:b9:21:bb:be:af:18:fd:06:32:d5:
40:43:36:51:e8:74:ac:7e:c6:ab:22:3a:00:36:1a:
ae:09:ae:2f:a7:37:9b:c7:3a:f6:08:6f:ec:33:0e:
9b:b2:5e:97:e5:25:a9:85:36:bf:9a:4b:ee:e0:42:
79:de:cd:26:33:d6:58:96:11:94:56:ae:0a:fe:8b:
91:b2:aa:da:61:ed:46:94:b3:e0:f0:e6:12:ed:56:
02:28:65:48:3a:84:69:f7:6e:2d:bf:29:28:be:14:
5b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7C:6A:3B:77:A5:0A:6F:74:22:30:0A:98:95:F2:8F:2C:A7:30:05
X509v3 Authority Key Identifier:
keyid:27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e8:0c:14:f2:ba:81:e5:35:47:10:f9:2f:29:d4:19:3a:a3:
51:65:34:b6:17:86:a0:7f:20:d6:2a:a5:5a:d1:28:76:61:09:
2c:6d:63:ab:fd:ba:f2:dd:86:9c:a3:0d:8a:45:10:18:a9:d1:
d0:53:c1:cc:28:3c:2e:66:e4:13:fb:a6:68:b5:24:a2:a2:0b:
3f:c4:fd:4a:42:5b:02:2a:58:5c:0b:82:cd:83:ce:c7:45:be:
4d:ba:4d:39:c1:cf:96:20:b6:83:7c:f8:a2:68:0b:4a:3e:0e:
af:4f:95:70:01:87:dc:2f:08:46:e5:1c:ab:ba:6c:46:ec:20:
ab:da:47:9e:12:c1:ac:2f:a2:1e:43:58:54:3b:0e:9e:23:76:
02:17:d1:89:25:8f:28:9d:fe:c2:2b:0e:fb:d4:ff:19:a5:4a:
a6:ad:8f:5a:e5:f5:8f:d5:91:b1:16:a7:e8:eb:c7:dd:a5:a8:
14:02:ab:f0:e4:ed:05:14:1b:84:91:2a:2f:0c:0d:7e:23:83:
7c:7f:18:ce:d9:07:56:61:f9:de:5d:a0:0b:a4:4f:9e:fd:4c:
68:2e:21:da:50:bf:a0:a0:31:e9:d5:68:97:c9:56:a7:f4:e8:
4b:07:14:b3:82:27:43:5d:b9:b3:12:51:88:ad:0e:8c:8f:cd:
37:cc:7f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:08 2026 by rpki-client