Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
File: J9rx4g0ElJnor1-LcVr23PIIpSE.mft (raw, json)
Hash identifier: M7m10lnm9ne9Qss9qvFEhDOJf7GVGxhoH4oPBOjYvsM=
Subject key identifier: C6:DE:A1:46:F2:A0:DC:A3:A6:79:7B:C9:2E:2B:A4:71:58:F5:18:91
Authority key identifier: 27:DA:F1:E2:0D:04:94:99:E8:AF:5F:8B:71:5A:F6:DC:F2:08:A5:21
Certificate issuer: /CN=27daf1e20d049499e8af5f8b715af6dcf208a521
Certificate serial: 019FA8995BA7C72E09A32BE2164FD6A2FFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9rx4g0ElJnor1-LcVr23PIIpSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
Manifest number: 3F
Signing time: Tue 28 Jul 2026 12:00:50 +0000
Manifest this update: Tue 28 Jul 2026 12:00:50 +0000
Manifest next update: Wed 29 Jul 2026 12:00:50 +0000
Files and hashes: 1: J9rx4g0ElJnor1-LcVr23PIIpSE.crl (hash: D5zBBfodz1qRgLdslM1LsG7kNZBy8DQz2QgTveMupGw=)
2: s3CTsEzepaXlQZBtmGn_vCqhH9c.asa (hash: pkiv835CcXvEGW6xy8WrRo2GTtt82YoHF6DEjpPgKn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9rx4g0ElJnor1-LcVr23PIIpSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:5b:a7:c7:2e:09:a3:2b:e2:16:4f:d6:a2:ff:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27daf1e20d049499e8af5f8b715af6dcf208a521
Validity
Not Before: Jul 28 12:00:50 2026 GMT
Not After : Jul 29 12:00:50 2026 GMT
Subject: CN=c6dea146f2a0dca3a6797bc92e2ba47158f51891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9e:c1:a7:0e:68:98:ad:dd:98:60:91:a0:54:
aa:7a:ff:b9:bf:63:0e:88:dc:c0:16:f0:fb:11:66:
79:95:85:ae:b7:2c:f2:9b:11:44:3d:51:67:54:3b:
77:8e:fa:8a:e6:79:6a:09:33:88:1d:20:29:c9:a4:
1a:28:9a:aa:57:6b:fe:83:d0:dc:9b:2d:fd:98:3f:
bf:ee:09:f5:07:54:e6:03:4c:36:31:08:c7:12:bb:
0a:1c:67:ef:dd:11:6d:f4:e8:bf:86:8c:39:4d:a4:
8a:ff:a0:e0:d5:e6:fd:5d:e0:b4:04:c4:f8:df:cb:
fc:6c:d6:d0:32:11:ee:0a:1a:e5:84:0a:cd:70:0e:
a3:50:07:4d:ff:9e:4d:43:a9:bb:9b:3a:32:4d:91:
0e:fa:82:45:8e:f8:42:6e:43:ab:50:ec:e8:ee:15:
cd:9d:8e:98:d7:f5:05:0e:7e:a4:8e:ab:ac:fe:53:
3e:41:25:2c:69:4a:f2:fb:0e:a5:28:b8:6a:1f:e2:
7b:d7:f2:f9:5e:58:80:88:db:29:2c:74:b6:22:68:
0d:95:e4:00:cc:36:3f:8c:40:c3:6d:2d:e9:e2:9e:
71:a8:ea:9a:eb:3c:6a:1d:31:f0:22:9b:3b:fa:18:
d3:6a:77:5a:32:90:c6:cf:93:54:85:c8:7c:43:20:
78:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DE:A1:46:F2:A0:DC:A3:A6:79:7B:C9:2E:2B:A4:71:58:F5:18:91
X509v3 Authority Key Identifier:
keyid:27:DA:F1:E2:0D:04:94:99:E8:AF:5F:8B:71:5A:F6:DC:F2:08:A5:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9rx4g0ElJnor1-LcVr23PIIpSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/33e125-4189-474b-8090-782027719a12/1/J9rx4g0ElJnor1-LcVr23PIIpSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:09:aa:c7:c1:cc:8f:bf:2b:95:4c:f1:d3:c3:7c:77:2e:3c:
cd:07:47:f6:56:04:ed:53:f5:02:97:74:f5:1c:5d:73:86:f0:
5c:39:05:61:03:18:7e:c6:71:4b:4a:e9:5a:bf:40:d9:3f:31:
34:ee:0d:f0:c0:88:8d:d2:49:42:26:15:1e:67:a8:a2:a4:1f:
70:82:71:c8:32:70:e2:ca:d9:74:9f:13:14:97:bd:ea:b6:c2:
67:c1:97:5a:3a:0a:bc:ef:00:ac:b0:57:44:db:76:2d:11:01:
39:95:e8:d5:aa:07:a6:19:34:51:23:c4:3d:79:98:4a:3c:4f:
cf:fd:e0:b0:ec:99:d5:d4:05:e5:0f:ee:0c:06:a6:c7:19:79:
13:66:6c:c0:89:f6:a4:3e:4c:61:13:36:77:32:ce:32:fe:31:
b6:34:eb:24:d8:42:5b:8a:73:69:e0:6e:bb:bc:16:12:0c:08:
3b:62:a2:4b:da:9e:78:f7:4c:1b:b1:8e:5a:b4:7c:61:a7:a4:
b5:a0:46:e4:d3:98:12:69:6e:d8:b2:25:0d:ce:e5:fc:49:25:
f0:6b:b2:08:cd:fe:e3:29:87:4d:3b:c7:8a:be:02:5e:7e:06:
0f:be:48:92:c3:74:02:51:51:2c:5a:f1:3d:85:09:aa:8f:01:
43:ec:c7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:33:46 2026 by rpki-client