Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
File: J9rx4g0ElJnor1-LcVr23PIIpSE.mft (raw, json)
Hash identifier: uHVnJy3k7NYAKfE0wIWs6Gu7ApuRVhkjlkDToYDrE2I=
Subject key identifier: D7:A3:10:2B:05:93:30:4A:41:80:F3:E3:01:C3:D1:14:4E:5C:35:0A
Authority key identifier: 27:DA:F1:E2:0D:04:94:99:E8:AF:5F:8B:71:5A:F6:DC:F2:08:A5:21
Certificate issuer: /CN=27daf1e20d049499e8af5f8b715af6dcf208a521
Certificate serial: 01A132901A9F7BEB766A6F6101285A806FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9rx4g0ElJnor1-LcVr23PIIpSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
Manifest number: 010B
Signing time: Tue 13 Oct 2026 00:01:07 +0000
Manifest this update: Tue 13 Oct 2026 00:01:07 +0000
Manifest next update: Wed 14 Oct 2026 00:01:07 +0000
Files and hashes: 1: J9rx4g0ElJnor1-LcVr23PIIpSE.crl (hash: JnjuBGFs60t5uQkPzcA694l+N2gs5k/gAUNGWlYWLzE=)
2: s3CTsEzepaXlQZBtmGn_vCqhH9c.asa (hash: pkiv835CcXvEGW6xy8WrRo2GTtt82YoHF6DEjpPgKn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9rx4g0ElJnor1-LcVr23PIIpSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:90:1a:9f:7b:eb:76:6a:6f:61:01:28:5a:80:6f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27daf1e20d049499e8af5f8b715af6dcf208a521
Validity
Not Before: Oct 13 00:01:07 2026 GMT
Not After : Oct 14 00:01:07 2026 GMT
Subject: CN=d7a3102b0593304a4180f3e301c3d1144e5c350a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:73:24:40:6d:67:03:59:2b:09:4a:b4:e0:23:
98:eb:43:0c:7c:ad:7a:2f:0f:9f:69:af:45:57:d1:
ed:85:79:e4:82:1c:5b:c7:0d:ee:43:00:a3:75:3d:
23:02:fa:b9:9e:43:42:5a:b5:86:c9:6a:e0:5d:9d:
01:2c:a7:26:bd:3e:49:9e:26:87:30:59:0b:e4:24:
26:a8:50:e1:b2:eb:69:48:6c:bd:05:a3:1e:03:a0:
aa:9a:fe:c5:a5:92:9f:4e:f4:0f:4a:cc:bf:cb:56:
11:30:1f:cb:7f:08:af:e6:7a:66:1e:72:84:5e:d4:
69:51:ee:0d:3f:01:64:50:29:7a:51:4b:48:f0:12:
36:2b:4f:56:ad:5a:7c:d1:c3:23:5a:54:18:52:4d:
e9:8a:37:1a:89:65:7c:77:65:1a:12:9e:68:57:52:
a1:e6:5d:76:c8:43:65:ec:87:3f:0d:2d:04:c1:79:
0f:eb:30:9e:fb:19:7a:51:2d:74:a6:dd:0c:c0:54:
c0:42:8c:2e:c2:b0:95:fa:c9:d4:0f:9b:66:bf:39:
21:ca:ab:b7:89:e9:2a:04:33:64:ec:2c:9c:e5:1f:
76:a4:ec:0d:d5:20:4c:60:c4:aa:11:df:21:85:aa:
3e:53:62:d9:d3:57:4a:76:0b:a9:0b:45:06:11:83:
99:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A3:10:2B:05:93:30:4A:41:80:F3:E3:01:C3:D1:14:4E:5C:35:0A
X509v3 Authority Key Identifier:
keyid:27:DA:F1:E2:0D:04:94:99:E8:AF:5F:8B:71:5A:F6:DC:F2:08:A5:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9rx4g0ElJnor1-LcVr23PIIpSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:29:3f:99:98:53:71:17:0b:5e:32:56:7d:fa:94:66:26:41:
7e:0b:8a:5c:0b:12:7a:77:24:7f:03:af:9e:ef:7b:54:30:24:
7a:97:81:de:ff:57:e9:ce:ce:17:23:19:62:75:60:c1:2d:f7:
72:d4:1d:a1:da:67:8f:f0:c3:b9:ba:a5:5f:ad:5f:d8:50:e0:
d9:65:c0:59:18:d1:22:2f:81:ee:43:5c:a1:94:cb:0d:6c:da:
aa:41:48:b3:48:6e:35:45:2d:ed:f2:39:90:5e:a5:24:62:aa:
19:5e:f1:5f:12:32:d1:03:19:ff:6d:2f:99:54:3a:4c:fb:22:
8e:66:d7:8b:74:df:a6:d7:ae:94:45:af:e0:27:b9:fd:30:3b:
3d:2c:f2:9b:28:57:70:b0:9d:49:2c:43:89:11:f3:7a:b3:b1:
a2:0b:be:bf:08:58:db:9f:58:2f:61:fa:89:06:f1:df:8c:f4:
c1:c2:3c:4e:99:77:1a:30:3d:6b:32:d0:09:96:24:98:f2:77:
98:19:8b:59:0e:2e:24:8c:b4:04:2e:f0:98:53:f4:71:0f:5f:
a3:4c:a2:ef:35:00:ec:a5:30:15:6e:aa:47:11:8d:9b:0e:f9:
59:95:a8:a6:01:6f:43:e9:fa:37:bd:76:da:59:7e:43:0b:dc:
a6:b0:ab:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:34:51 2026 by rpki-client