Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
File: J2PZz8gXMu0vpKZC7a4zTAApUPg.mft (raw, json)
Hash identifier: 02ldAQOLa6/uQEC/M5ELhEAQtALL2hnHzWzCXJR0M+Y=
Subject key identifier: B8:CA:97:B0:6D:64:86:F4:AD:08:10:35:53:3E:95:08:9B:C1:7D:82
Authority key identifier: 27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
Certificate issuer: /CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Certificate serial: 01A0E28740758B368DD7160790AD498A959F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
Manifest number: 050F
Signing time: Sun 27 Sep 2026 11:01:49 +0000
Manifest this update: Sun 27 Sep 2026 11:01:49 +0000
Manifest next update: Mon 28 Sep 2026 11:01:49 +0000
Files and hashes: 1: J2PZz8gXMu0vpKZC7a4zTAApUPg.crl (hash: 6tj5THaST1OVR9BMXs4+T4/h6a3GUQ3RUfwDyRDWzrA=)
2: v2RhzwzRYxDBxoI8x3qcoCuvcCY.roa (hash: +dNdFFmraUSumCJQ+HT3ZgjMQ3xG8lfqVtX8iY6CtK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:87:40:75:8b:36:8d:d7:16:07:90:ad:49:8a:95:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Validity
Not Before: Sep 27 11:01:49 2026 GMT
Not After : Sep 28 11:01:49 2026 GMT
Subject: CN=b8ca97b06d6486f4ad081035533e95089bc17d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:12:49:57:34:7e:29:69:7e:01:c8:91:a3:48:
3f:f6:1b:64:52:93:36:4b:3e:f5:22:04:87:50:c9:
7d:67:10:14:f6:31:70:31:5f:d1:30:01:90:8b:df:
e8:b5:34:31:02:33:9b:03:bd:c2:d6:b8:f3:7e:28:
ba:7c:4e:c6:68:f2:cf:51:8e:2a:ad:e1:6a:4b:28:
47:af:89:72:04:42:4e:26:18:c6:23:9a:0d:05:2f:
f0:a9:1e:15:e6:3f:b6:c5:3b:a3:bf:8f:79:ba:b1:
97:67:80:01:10:cd:1a:b2:03:d3:3a:0d:36:21:b2:
20:cb:4a:61:a6:eb:26:ea:86:9a:47:47:5b:e2:95:
70:55:a7:9d:bb:a8:69:1c:44:d3:e5:8b:aa:36:38:
73:c8:45:10:02:a9:f3:3f:a1:2d:37:a6:a5:8a:05:
1d:2d:fd:53:e1:dd:17:56:8b:c0:0a:b4:87:c4:63:
47:1d:8b:9d:10:22:88:07:37:19:05:b9:71:70:83:
0d:0c:05:dc:9e:ed:83:27:59:b6:69:ff:c0:f1:37:
c7:0a:85:bf:f6:78:08:4e:5b:db:0e:d4:ef:ca:5d:
41:d8:9d:07:1c:52:52:2b:89:6a:10:81:77:a2:d1:
bd:d7:2d:f8:da:00:c6:13:23:f9:16:6a:dc:9c:b9:
e3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CA:97:B0:6D:64:86:F4:AD:08:10:35:53:3E:95:08:9B:C1:7D:82
X509v3 Authority Key Identifier:
keyid:27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1b:92:ca:87:82:64:ad:63:1e:17:ea:0d:24:d5:6b:4c:77:
d6:1f:8b:bd:73:ec:4c:f3:88:a7:28:b0:46:98:47:f7:d9:61:
d0:a5:a5:9d:4c:8d:fc:fe:e4:e2:c3:9c:25:1b:7a:4a:e7:ae:
8d:2e:53:a4:87:fd:98:58:07:2b:5e:0d:87:0a:ce:c2:4c:10:
b6:81:10:5c:fa:ce:a7:cd:37:45:c1:5c:3a:37:3e:11:ae:5c:
d7:66:95:66:78:e9:33:5f:11:f6:97:dc:54:62:2d:53:3b:59:
c2:8c:1b:ef:3c:a6:a4:e1:37:89:56:3d:a4:36:04:c7:44:13:
b9:99:b5:5a:22:89:07:19:e1:d4:2c:ff:d5:57:ca:5c:3c:d3:
91:42:02:a9:79:e5:e0:a0:6b:21:41:3b:11:4c:f9:09:2c:a3:
72:88:79:83:1d:58:12:ec:2e:a9:be:da:81:f0:3b:5f:fc:38:
e5:21:fd:5b:d2:6e:04:fb:b1:f7:1d:5e:4a:4f:6a:25:00:00:
40:be:2c:cd:0b:3c:81:1d:d3:cc:de:7a:e4:a8:00:86:8d:6b:
d1:cf:e4:8a:86:98:cf:81:51:d6:33:a0:27:2b:d3:90:22:0b:
82:87:e8:0f:ef:b3:03:73:45:41:b9:7a:a6:a5:ad:b8:90:63:
c6:46:ce:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:59:00 2026 by rpki-client