Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
File: J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft (raw, json)
Hash identifier: T5IGJ0zW/Fe0crErojDZG14AlQnvBfHWElMwoHGIUms=
Subject key identifier: 9F:A8:B2:75:48:CC:B7:43:B4:46:00:DF:4A:D3:83:71:F1:E4:1C:BC
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Certificate issuer: /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial: 019D99D05CEA14C03F6F73D4123B52DC69B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
Manifest number: 1722
Signing time: Fri 17 Apr 2026 05:01:02 +0000
Manifest this update: Fri 17 Apr 2026 05:01:02 +0000
Manifest next update: Sat 18 Apr 2026 05:01:02 +0000
Files and hashes: 1: 8pRpGLC7ufdVgfYDDUF6Zet2ESs.roa (hash: N6b81cttyVRNjS1aPTuek9kLwNALHCKPqaI95N5VpXM=)
2: J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl (hash: Uesl0zWgxg5IpCUEC4zGPTrunOaz+Y1/lz/gGGpa9C0=)
3: iLJXM2riD2xLyWPgVHhFPJznv3A.roa (hash: htQVMbTQl+9gmW8aaJPtyq2ErZGw3e/ACgLnMofyCY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:5c:ea:14:c0:3f:6f:73:d4:12:3b:52:dc:69:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Validity
Not Before: Apr 17 05:01:02 2026 GMT
Not After : Apr 18 05:01:02 2026 GMT
Subject: CN=9fa8b27548ccb743b44600df4ad38371f1e41cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:59:a6:0c:b9:9c:06:d0:5d:23:78:0b:97:
1b:8f:14:77:11:f5:2b:c9:79:8c:08:b9:c3:c3:e9:
2a:4f:fd:d1:5a:5d:6f:f8:ea:6c:1e:71:fc:b7:02:
6b:57:ce:11:32:85:73:82:e5:7a:29:4f:8b:2e:3f:
31:2e:d2:e8:93:2c:9b:2e:e3:69:b9:40:a0:b8:96:
df:6d:64:b2:cd:47:cd:47:12:3e:07:b1:42:70:92:
2b:be:31:d3:94:84:98:23:64:d3:bd:e4:39:04:e2:
4d:e3:01:3f:eb:7c:82:cb:f7:87:a2:01:3e:af:4b:
8b:eb:7e:4e:ea:b5:e8:15:81:80:19:c9:df:82:c4:
31:f3:b0:33:f5:19:15:24:07:7d:48:14:53:22:5b:
a1:16:44:62:40:61:5d:bb:4a:64:6d:4e:b3:79:d0:
d2:7c:7a:c2:ee:cf:17:2c:17:ef:39:2e:3c:f0:48:
15:b5:67:01:bf:22:ac:e9:f1:01:a5:c4:84:7d:0f:
9b:c1:5c:94:f5:53:d5:98:ff:e2:51:d2:03:59:ae:
65:da:78:78:21:85:d6:9f:df:93:14:2e:20:01:9e:
22:aa:ff:ce:72:22:57:c0:03:45:82:a9:b8:45:cd:
5f:6a:d6:67:f5:da:61:f1:c5:a6:91:ff:31:8e:bb:
ad:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A8:B2:75:48:CC:B7:43:B4:46:00:DF:4A:D3:83:71:F1:E4:1C:BC
X509v3 Authority Key Identifier:
keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:62:a8:79:b7:e9:42:0a:9f:0a:21:2e:a4:d4:7f:86:08:ee:
85:42:86:c2:2c:77:0f:1d:2d:da:44:2c:3d:e9:ad:c2:54:df:
f4:f1:8b:0b:3e:6d:a8:df:e0:77:0c:12:45:ae:91:20:f0:3b:
a1:d7:ad:37:a2:cd:ea:92:b2:fb:2b:86:09:60:19:40:cd:3c:
26:94:69:f6:8d:ca:69:d1:a5:5c:4e:21:1d:4e:56:6f:3a:b6:
fc:ba:78:a4:71:14:ee:42:a0:ae:f8:a8:6b:29:e6:7f:01:04:
83:f4:1b:ab:91:43:8c:95:63:cc:b7:37:c7:c8:08:32:f2:1a:
fd:5d:bd:8d:a0:ea:52:95:4f:bf:3d:a8:6d:78:96:15:1e:5a:
e1:8f:a1:12:48:be:f5:b6:76:9f:a4:6c:b5:e2:c2:5c:44:d4:
63:19:32:ef:24:44:c3:de:2a:28:93:84:b4:f2:00:85:0b:ea:
66:6d:2d:18:0c:84:f7:aa:2c:b4:d3:00:ad:78:cb:9f:75:9a:
71:1b:9c:44:10:4a:86:ba:f7:f3:be:db:78:46:4a:69:49:73:
38:ac:f8:0a:5e:f7:d3:54:2a:db:27:ab:47:cc:36:67:37:d4:
46:5c:91:ae:76:57:56:54:18:7c:b7:b5:d1:a0:79:87:eb:ad:
06:da:f9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:55:12 2026 by rpki-client