Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
File: J_lYw7dZsseJb17WY-gHeB8_9aI.mft (raw, json)
Hash identifier: Zhm5uH4Xu8IVGvCaRvrNG33LIWMCZ4cJbW0fHdqfAdM=
Subject key identifier: 90:D2:E0:5C:D7:11:FA:97:D1:51:02:2A:5B:BA:E3:A7:06:CE:7C:50
Authority key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
Certificate issuer: /CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Certificate serial: 01A0D315AABAA4656E5509E2CDC4389F92ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
Manifest number: 129B
Signing time: Thu 24 Sep 2026 11:03:27 +0000
Manifest this update: Thu 24 Sep 2026 11:03:27 +0000
Manifest next update: Fri 25 Sep 2026 11:03:27 +0000
Files and hashes: 1: ElTViivmjGxEdxaxj11VFkP14YI.roa (hash: YUVaRGC2xsx0b6XubgQiQ6H3U/a4QTrhpMWWRuXADx4=)
2: J_lYw7dZsseJb17WY-gHeB8_9aI.crl (hash: Po5SujBiKivdhG7FIQ9GmhItrAjzlbuwGlSrk1Vl+fI=)
3: MH507cRFXNNeqadxQdKywhHkylA.roa (hash: SJpj63kNuERbqmJKNAG4loDyhiVzSuV9bopPuk1oXO0=)
4: yXUQWiWAuj52X2blMDF0ySpC9kY.roa (hash: 2dpSoguExI4LCzpUhvwGpd2mxrAlFFlJZgWzZagSNCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:aa:ba:a4:65:6e:55:09:e2:cd:c4:38:9f:92:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Validity
Not Before: Sep 24 11:03:27 2026 GMT
Not After : Sep 25 11:03:27 2026 GMT
Subject: CN=90d2e05cd711fa97d151022a5bbae3a706ce7c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:07:3d:58:bb:e6:b2:b4:b2:11:f1:1b:ec:7b:
70:c2:d6:4c:60:df:ca:a5:ec:7d:19:a2:ec:71:9e:
e5:63:06:42:07:d0:b8:11:da:0f:f2:2e:0a:9d:fc:
67:9e:d8:a8:83:58:4f:41:82:d9:ea:af:b1:c7:79:
82:78:55:cc:7a:7d:c0:80:3e:51:c7:8d:26:7b:a2:
f8:64:bb:5c:4e:ea:ef:3b:4f:e7:6a:c3:08:11:41:
88:2f:fd:5b:27:28:f9:7a:ba:29:f0:bb:c6:74:15:
53:d1:bb:4c:19:3c:6a:9c:c2:fe:5f:6a:9b:61:d3:
02:0f:0d:41:25:9d:96:06:c5:6f:2e:9c:14:fd:8b:
7f:62:a4:57:48:ca:84:43:3f:cc:dc:33:cd:65:d8:
17:f1:0a:80:76:33:7c:13:fc:3a:a9:80:ed:bc:92:
65:2e:ef:c3:5b:30:78:ce:7a:20:74:a5:a7:64:eb:
ec:8a:78:23:9a:f2:be:0f:d7:14:74:30:b0:4f:c7:
ce:7d:67:ba:b5:0a:f5:03:e7:e1:15:ba:45:af:e5:
30:40:fb:73:68:bc:99:b6:3c:86:e9:21:66:41:d1:
9e:d5:9e:f0:1d:d6:42:c8:4f:ce:fd:38:cd:27:2f:
92:3e:60:24:ff:be:1d:a5:80:34:3c:40:d0:35:4b:
b0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D2:E0:5C:D7:11:FA:97:D1:51:02:2A:5B:BA:E3:A7:06:CE:7C:50
X509v3 Authority Key Identifier:
keyid:27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9c:d6:83:82:79:7b:b2:be:d1:4a:3f:80:87:27:6c:1b:75:
49:8b:0b:c9:4e:5d:b3:9a:02:10:87:7c:36:28:ef:6e:e1:45:
57:a5:a3:e3:8a:c8:1e:54:7c:6c:a7:74:66:b6:17:7d:d0:d2:
90:55:d7:d1:71:38:07:d6:d6:2f:61:8f:d6:b2:c5:7d:fb:9b:
b3:b2:f1:ca:06:a4:1e:88:67:37:64:70:71:13:87:21:74:23:
2e:1f:42:5d:f6:d3:c5:ee:34:c1:6e:5b:0d:ee:c9:20:33:c1:
70:b5:69:78:9e:7b:a0:06:9f:d7:35:73:15:92:61:56:99:86:
a1:55:5e:43:e3:fc:c9:e3:20:60:54:a4:86:1c:c7:94:dd:52:
05:56:d6:ec:15:c1:13:34:6d:ab:fe:fb:b0:15:7f:b4:b8:39:
05:b7:71:4b:4e:b8:64:cc:40:2a:31:cb:ad:82:53:38:90:a5:
d1:70:30:41:0c:fa:4c:15:c9:d9:6a:99:e3:60:42:6f:33:e0:
51:42:e3:30:a9:b0:f2:05:da:b8:59:3f:99:73:9a:25:7f:6c:
c1:eb:1c:d6:8a:2b:34:e6:8f:0f:ff:f0:51:da:d2:8a:a0:61:
ff:c6:bd:2d:a6:c8:15:07:84:39:29:aa:42:a2:b2:a8:67:50:
01:6f:e0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:26:31 2026 by rpki-client