Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
File: J2PZz8gXMu0vpKZC7a4zTAApUPg.mft (raw, json)
Hash identifier: xG34GMXekGWqpnwdaqoIZ9inVHgktkpNSW4eryIT0WE=
Subject key identifier: B8:48:76:4D:65:CA:FF:CB:65:7C:83:01:B5:E7:C7:E2:92:33:19:5A
Authority key identifier: 27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
Certificate issuer: /CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Certificate serial: 019D9C63100F3368E92D00BAFD20FBE43E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
Manifest number: 035D
Signing time: Fri 17 Apr 2026 17:00:30 +0000
Manifest this update: Fri 17 Apr 2026 17:00:30 +0000
Manifest next update: Sat 18 Apr 2026 17:00:30 +0000
Files and hashes: 1: J2PZz8gXMu0vpKZC7a4zTAApUPg.crl (hash: 4KFPHquB4MRtE3+rPEPAupRn/ydvML0N/tk/+j9QRwQ=)
2: xqDiTE82VfBKD9rVWVzUaZpsTPI.roa (hash: 9m/z8uOFFSLz+xo2V7/xt7po1ubSIknfY+Jf0uQ8ei0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:10:0f:33:68:e9:2d:00:ba:fd:20:fb:e4:3e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Validity
Not Before: Apr 17 17:00:30 2026 GMT
Not After : Apr 18 17:00:30 2026 GMT
Subject: CN=b848764d65caffcb657c8301b5e7c7e29233195a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:54:ef:d8:ea:9c:6d:89:4b:76:1c:d5:df:86:
41:90:ef:57:98:4f:d8:6e:c8:33:7c:7e:4b:54:16:
c4:74:c6:5a:fe:50:43:2f:ae:54:71:f0:e8:ce:fb:
5c:7a:ea:bc:9f:82:5d:c6:d7:7f:73:77:e3:94:0a:
7c:39:5a:e5:a5:a0:aa:ed:61:11:db:f4:58:ac:79:
3b:c2:fa:d1:1b:47:0a:20:65:fd:26:54:32:0a:76:
64:05:9c:16:ab:d9:50:ae:5b:2d:c3:c5:0c:e7:bf:
11:2c:56:d7:21:e4:95:15:34:38:16:dd:90:89:75:
5e:06:fb:6e:b5:13:da:ca:9f:25:d0:4d:05:62:4c:
b9:c7:a1:6b:ac:72:84:7b:86:9b:da:f2:5e:4d:87:
37:52:87:1c:35:48:52:31:6c:c5:86:3d:31:d6:ac:
d6:d3:61:39:ae:e2:86:30:04:f6:13:d7:8e:22:71:
2e:59:40:74:c3:db:1b:f8:af:be:bf:00:9d:ef:33:
48:51:bc:8c:d5:5c:a8:fc:9e:6d:35:02:74:29:46:
c9:5a:59:19:18:2d:a8:c1:d6:34:8d:5b:42:2a:32:
f9:df:06:5f:ab:8c:0c:11:81:bc:bc:13:ed:cb:b3:
7d:27:31:7e:56:2b:3f:2f:0e:dd:c7:bf:7d:5e:ad:
1f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:48:76:4D:65:CA:FF:CB:65:7C:83:01:B5:E7:C7:E2:92:33:19:5A
X509v3 Authority Key Identifier:
keyid:27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:66:b4:23:2b:52:08:a3:93:00:0e:21:97:63:fa:07:16:ea:
6d:a0:14:62:32:fe:95:50:8c:6c:bd:3b:f7:14:0f:5f:db:e3:
f5:7e:09:02:b3:3a:0d:79:ad:28:bd:dd:2d:57:f4:e9:a3:b6:
82:56:48:0c:40:cf:02:7f:24:b6:06:4f:05:3f:d1:64:13:3e:
f4:3b:58:71:18:66:7c:e8:5b:3c:27:e6:20:0c:b3:94:d7:cf:
2d:59:20:b6:71:c3:f5:91:9d:37:b2:5a:66:8d:0c:17:a8:6b:
ef:32:cc:43:30:78:2c:46:04:56:b7:78:b8:13:b4:70:a2:ee:
7a:c6:b7:c4:f9:ec:fb:13:ce:15:f9:5c:dc:cb:d2:f1:18:60:
7c:33:0e:cd:73:e9:f4:b0:2a:3f:40:da:b4:40:ad:6e:e7:e4:
69:7b:17:79:e8:5c:94:d6:88:25:2f:c3:dc:3a:b3:bf:b5:76:
4d:be:1a:8d:ba:17:fc:e6:53:d2:83:ea:42:75:b7:5d:16:2c:
68:36:b7:0b:17:0c:7e:fb:e7:b2:33:71:2d:23:7c:41:6c:f5:
d7:74:9e:30:77:70:5e:08:34:52:34:67:78:66:11:f9:c5:52:
a2:46:59:6d:bf:3f:95:48:b8:e6:88:dd:17:9a:8d:51:32:9e:
40:a1:8f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:24:02 2026 by rpki-client