Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
File: J7syqoyfjQXFF74q1mUvZlUKjVc.mft (raw, json)
Hash identifier: wfu+lLqdeNH03HuEmN2SN7DBrgIvWvcQFnQ/+bUXcPE=
Subject key identifier: 2B:FA:25:B7:84:6E:8A:D4:52:0B:34:B6:0C:91:7D:6A:7E:47:1A:A3
Authority key identifier: 27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
Certificate issuer: /CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Certificate serial: 019CACB504B16DFBF894E98FF995E1641670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
Manifest number: 184C
Signing time: Mon 02 Mar 2026 04:01:10 +0000
Manifest this update: Mon 02 Mar 2026 04:01:10 +0000
Manifest next update: Tue 03 Mar 2026 04:01:10 +0000
Files and hashes: 1: 3RCjNuMxUkfSYyNOUlggwRfWfc4.roa (hash: UnwrsssJDeDLbtzFhokPg+3DUFYJBO3poSSiUsMCOJk=)
2: J7syqoyfjQXFF74q1mUvZlUKjVc.crl (hash: B3Hgyh33tQ8ovngOY6ZIiCSF4HGo/16o6qtFhvUUqNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:04:b1:6d:fb:f8:94:e9:8f:f9:95:e1:64:16:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Validity
Not Before: Mar 2 04:01:10 2026 GMT
Not After : Mar 3 04:01:10 2026 GMT
Subject: CN=2bfa25b7846e8ad4520b34b60c917d6a7e471aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:18:4a:38:41:f0:6a:32:43:d4:12:e4:30:fd:
51:cd:7f:28:0c:e7:a4:8e:70:3b:09:72:fd:76:ec:
a7:9b:4e:91:ae:c4:34:bd:d6:b2:75:e8:aa:27:e0:
db:fe:10:69:40:78:c2:fc:73:76:7e:50:90:8c:f9:
69:09:61:51:73:38:d9:2d:ba:f6:71:f2:c2:fe:bc:
a8:9d:8a:04:81:2c:fa:50:cd:f3:93:2e:43:01:53:
18:ad:53:d6:f3:ef:d6:48:b6:97:08:bd:75:8d:dd:
83:e3:68:86:39:d6:df:0f:f5:4a:d0:0f:64:90:ba:
85:5f:5e:ee:db:da:b2:ad:47:a0:b5:72:f6:29:bd:
2c:7e:9d:3e:0e:b6:52:f2:e1:03:df:bd:ef:bf:a7:
44:1f:7e:9a:1e:c8:e4:6b:cb:67:1e:7e:62:e7:82:
f1:3f:c3:49:3b:e8:3e:99:fa:75:52:68:29:c9:24:
13:40:ae:47:43:ea:9c:f8:ca:66:94:77:12:a9:c8:
e1:09:2e:7d:3b:6f:10:94:1d:58:21:64:6e:28:78:
fc:72:78:62:8c:57:50:c6:e4:61:48:a1:97:70:61:
ae:fa:5b:bc:d1:23:90:e1:30:2f:2a:ea:fc:ed:3f:
78:66:ee:cb:26:2d:7c:5f:11:c6:55:ca:95:1f:27:
98:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FA:25:B7:84:6E:8A:D4:52:0B:34:B6:0C:91:7D:6A:7E:47:1A:A3
X509v3 Authority Key Identifier:
keyid:27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:96:98:ee:36:d2:bc:b3:62:43:67:f1:a8:46:cf:4a:f9:9e:
57:3b:07:e4:12:48:eb:a7:5e:fb:95:97:60:4b:f8:94:d9:72:
aa:02:4b:19:5a:e4:ee:f4:cd:a5:57:62:3c:40:bf:cc:5c:34:
2a:c3:b4:21:db:cd:d0:11:49:0b:b0:1d:5e:a8:53:31:89:93:
7a:e2:47:a7:c2:25:d5:96:53:9a:8c:c6:0a:94:40:06:0b:26:
b6:d4:a4:46:a8:3e:a1:98:35:23:d5:2d:86:c4:96:b6:99:fd:
44:51:60:da:da:16:e2:03:02:8b:d4:09:b3:0c:1e:5b:84:01:
72:64:0d:35:45:70:6a:60:f9:a7:ab:ed:d1:ef:11:ba:a5:22:
7f:b8:1f:9b:fa:2d:31:0a:78:62:33:6e:aa:8b:9a:13:d3:24:
c4:5f:ad:c6:fa:c1:b9:9d:34:ab:6a:cc:1c:9e:26:ec:17:90:
4f:c0:d2:e3:ee:71:56:30:dd:a1:13:3e:75:79:30:05:fa:84:
39:39:a0:3a:2f:32:27:71:6b:1e:c6:5e:a0:a0:4c:21:91:1b:
2a:88:e6:6d:82:96:2e:c5:88:d9:66:71:a4:61:0e:55:1b:f0:
ce:83:8d:3d:f1:8e:c3:bc:dd:2f:eb:15:95:13:d7:2a:11:49:
85:9b:49:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:51:23 2026 by rpki-client