Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
File: J9TWlrrbEJTKoV176Gw5pxLg7hI.mft (raw, json)
Hash identifier: /SgzGI6XChaaXgj02DtLzKlpTh1ROg6e4kfkHBtXoi0=
Subject key identifier: 7C:62:EB:D3:EE:8E:A4:70:C8:DA:29:03:B1:A6:2C:D1:29:6D:B5:A9
Authority key identifier: 27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
Certificate issuer: /CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Certificate serial: 019CAA588DB1C7BFC2B93D6F7E0DAAE0540E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
Manifest number: 17D4
Signing time: Sun 01 Mar 2026 17:00:55 +0000
Manifest this update: Sun 01 Mar 2026 17:00:55 +0000
Manifest next update: Mon 02 Mar 2026 17:00:55 +0000
Files and hashes: 1: J9TWlrrbEJTKoV176Gw5pxLg7hI.crl (hash: 9TqJauLdXrLJ1lySQyrXhSLhICpcUfplRcCG7llQss8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:8d:b1:c7:bf:c2:b9:3d:6f:7e:0d:aa:e0:54:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Validity
Not Before: Mar 1 17:00:55 2026 GMT
Not After : Mar 2 17:00:55 2026 GMT
Subject: CN=7c62ebd3ee8ea470c8da2903b1a62cd1296db5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9f:eb:a5:f6:ef:2d:a7:95:55:98:d6:ff:94:
a4:dc:76:82:da:37:82:84:1c:17:0b:f8:eb:e2:e9:
17:13:6f:1f:e6:d3:10:56:13:dd:8c:59:09:9e:50:
e4:3a:7b:8d:9c:37:52:d9:4b:61:5c:a6:d6:c4:73:
c9:a6:5e:ed:bf:dd:f7:81:43:d7:ca:7d:c8:88:73:
8d:ae:5c:6b:cd:23:30:35:7e:47:e9:25:aa:2e:a4:
3d:2b:b2:d8:75:03:19:ec:dc:27:1c:d7:d3:61:8f:
39:94:27:fc:41:40:e6:8b:98:fd:0d:92:e1:f9:71:
bf:3a:66:fa:06:4c:66:f6:01:c6:23:9c:5e:17:28:
f9:c9:f2:0a:97:2f:40:7c:86:d4:ec:b4:53:1f:5d:
62:47:8b:d2:d1:dc:7a:7f:24:97:f4:d9:78:e5:34:
35:46:cc:d2:0c:20:d4:2c:57:0a:43:72:19:f1:fb:
24:ef:f2:2b:8f:41:51:91:7f:c5:22:02:b6:f3:3d:
26:15:2a:7f:fd:c9:05:e3:13:1a:f4:c4:7d:1f:1e:
4d:8e:fe:f3:94:ca:bc:ca:5f:33:ea:41:cc:a1:32:
23:74:31:72:59:71:01:e5:d7:94:db:9d:70:52:6c:
aa:74:4a:7e:ae:ae:a6:53:2e:28:d7:8c:b5:62:be:
a6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:62:EB:D3:EE:8E:A4:70:C8:DA:29:03:B1:A6:2C:D1:29:6D:B5:A9
X509v3 Authority Key Identifier:
keyid:27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:76:2f:fc:5b:6b:2a:34:b0:15:73:68:b0:54:d0:1a:ad:9a:
5c:81:2d:fa:13:b4:ef:b3:11:9e:25:d0:33:15:8a:13:2a:b9:
e8:05:00:89:55:f1:e6:3d:4d:f9:8b:f4:f7:04:b2:fe:ef:bc:
bc:b0:0b:eb:80:2d:8c:c5:fc:53:4d:96:92:5a:89:5c:55:21:
01:2e:f3:62:49:d2:17:ba:1c:35:d6:a5:29:7e:11:6e:e1:1f:
fd:e7:66:04:fe:7e:10:f7:1d:4e:74:cc:43:18:9b:46:88:55:
8f:a1:cc:fe:36:8c:b1:aa:7b:10:2e:22:f7:95:13:b3:da:22:
ee:48:5a:c8:d3:e3:13:bd:6c:72:56:26:ab:4c:99:a8:07:2a:
69:93:3c:b6:f9:bd:91:b9:af:85:48:40:bd:9f:ab:fa:e4:98:
69:77:19:d9:1b:04:24:44:2b:2f:eb:94:4f:69:78:82:65:98:
07:4d:72:d3:be:a6:8f:57:57:a9:b5:c6:f9:34:ff:2d:18:14:
2d:ac:00:c5:b9:2e:39:1d:8e:73:5a:d8:f4:5a:0f:46:fb:b5:
4a:38:93:01:f9:88:fc:b6:b3:65:56:c7:3f:bb:bc:d3:2b:19:
09:3a:03:c2:17:b4:96:b0:65:19:71:55:7a:c6:a7:12:e1:57:
2e:a8:01:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWI2xx7/CuT1vfg2q4FQOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDRkNjk2YmFkYjEwOTRjYWExNWQ3YmU4NmMzOWE3MTJl
MGVlMTIwHhcNMjYwMzAxMTcwMDU1WhcNMjYwMzAyMTcwMDU1WjAzMTEwLwYDVQQD
Eyg3YzYyZWJkM2VlOGVhNDcwYzhkYTI5MDNiMWE2MmNkMTI5NmRiNWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ/rpfbvLaeVVZjW/5Sk3HaC2jeC
hBwXC/jr4ukXE28f5tMQVhPdjFkJnlDkOnuNnDdS2UthXKbWxHPJpl7tv933gUPX
yn3IiHONrlxrzSMwNX5H6SWqLqQ9K7LYdQMZ7NwnHNfTYY85lCf8QUDmi5j9DZLh
+XG/Omb6Bkxm9gHGI5xeFyj5yfIKly9AfIbU7LRTH11iR4vS0dx6fySX9Nl45TQ1
RszSDCDULFcKQ3IZ8fsk7/Irj0FRkX/FIgK28z0mFSp//ckF4xMa9MR9Hx5Njv7z
lMq8yl8z6kHMoTIjdDFyWXEB5deU251wUmyqdEp+rq6mUy4o14y1Yr6mnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxi69PujqRwyNopA7GmLNEpbbWpMB8GA1UdIwQY
MBaAFCfU1pa62xCUyqFde+hsOacS4O4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjlUV2xycmJFSlRLb1YxNzZHdzVweExnN2hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kMGNlZDgtZjFiNS00Y2Y1LWI0NGQt
ZThhNGVjZTkzYTM1LzEvSjlUV2xycmJFSlRLb1YxNzZHdzVweExnN2hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9kMGNlZDgtZjFiNS00Y2Y1LWI0NGQtZThhNGVjZTkzYTM1
LzEvSjlUV2xycmJFSlRLb1YxNzZHdzVweExnN2hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxHYv/Ftr
KjSwFXNosFTQGq2aXIEt+hO077MRniXQMxWKEyq56AUAiVXx5j1N+Yv09wSy/u+8
vLAL64AtjMX8U02WklqJXFUhAS7zYknSF7ocNdalKX4RbuEf/edmBP5+EPcdTnTM
QxibRohVj6HM/jaMsap7EC4i95UTs9oi7khayNPjE71sclYmq0yZqAcqaZM8tvm9
kbmvhUhAvZ+r+uSYaXcZ2RsEJEQrL+uUT2l4gmWYB01y076mj1dXqbXG+TT/LRgU
LawAxbkuOR2Oc1rY9FoPRvu1SjiTAfmI/LazZVbHP7u80ysZCToDwhe0lrBlGXFV
esanEuFXLqgBWg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:06 2026 by rpki-client