Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
File: J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft (raw, json)
Hash identifier: Rj0bj+GZ21Gxcu44BgYRdL0OvNe6usdyW6jPInqCm/c=
Subject key identifier: C7:C9:21:27:45:0D:D9:B0:A0:6D:F3:5B:68:83:8F:77:BA:FD:8B:EC
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Certificate issuer: /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial: 019CAA58C4A52A319E27A8EC3CAD396B0BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
Manifest number: 16A6
Signing time: Sun 01 Mar 2026 17:01:10 +0000
Manifest this update: Sun 01 Mar 2026 17:01:10 +0000
Manifest next update: Mon 02 Mar 2026 17:01:10 +0000
Files and hashes: 1: 8pRpGLC7ufdVgfYDDUF6Zet2ESs.roa (hash: N6b81cttyVRNjS1aPTuek9kLwNALHCKPqaI95N5VpXM=)
2: J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl (hash: q6ea3iBeff5WMNn+hD0rSUw7oFfKjc9AJAhBpdP1WF8=)
3: iLJXM2riD2xLyWPgVHhFPJznv3A.roa (hash: htQVMbTQl+9gmW8aaJPtyq2ErZGw3e/ACgLnMofyCY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:c4:a5:2a:31:9e:27:a8:ec:3c:ad:39:6b:0b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Validity
Not Before: Mar 1 17:01:10 2026 GMT
Not After : Mar 2 17:01:10 2026 GMT
Subject: CN=c7c92127450dd9b0a06df35b68838f77bafd8bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a9:20:47:dd:78:48:25:82:99:d0:81:45:c8:
bf:b1:f0:a1:af:12:da:46:1e:39:ab:94:03:b6:26:
1d:b7:95:98:c8:4e:26:2e:a4:42:4c:ed:4c:1a:dc:
10:98:90:1a:9e:f0:3f:04:0b:ac:79:d2:15:6e:cf:
10:09:8c:7c:c8:7c:ec:31:98:5c:a7:18:a1:77:c4:
07:b8:10:a3:f2:02:77:b7:85:ed:be:10:bc:bc:d5:
da:8e:4a:06:fd:05:d2:46:65:ff:e8:94:82:f5:51:
f6:72:16:5e:26:32:4b:74:4e:61:78:f8:28:6c:90:
e5:a7:54:40:8b:06:65:6f:90:0d:ff:62:69:df:f6:
3f:cd:62:91:6c:49:ae:9b:0f:22:7f:ce:86:44:21:
53:1f:d0:92:2b:bd:71:9e:7d:99:59:07:39:7c:27:
7c:1f:54:8a:e0:97:06:70:2f:7e:8c:58:57:ee:d1:
b8:a0:47:a7:47:e5:78:35:6b:31:b6:47:f0:ee:88:
70:4d:08:fe:c1:aa:a1:2a:26:17:71:83:5e:ae:21:
6b:20:97:cf:6e:fe:79:4b:2f:12:9a:a5:0f:e5:d4:
41:47:b9:79:3f:a2:b2:85:1a:14:df:0f:ad:e9:a5:
82:6a:a7:1a:6c:2c:68:ee:d1:6a:e8:22:09:ae:bb:
5a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C9:21:27:45:0D:D9:B0:A0:6D:F3:5B:68:83:8F:77:BA:FD:8B:EC
X509v3 Authority Key Identifier:
keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6e:1a:80:11:d2:18:a3:be:cc:9a:25:6a:10:a6:89:cf:d6:
2d:2a:6e:e4:59:3c:0c:1f:56:e2:76:36:f9:5e:eb:9d:bb:64:
c6:89:da:23:ac:bb:38:14:0c:ec:9a:44:c6:d9:5e:f7:7f:f8:
71:b1:f1:86:2a:72:29:7c:44:b2:62:27:00:ea:c3:38:19:50:
ac:f9:cd:da:61:ce:bf:eb:58:66:b0:af:ba:6e:98:b9:06:88:
49:1b:08:4a:6b:25:32:1e:3e:55:45:40:9f:92:32:24:6a:c9:
b2:27:5b:66:15:d7:23:df:5b:a2:52:67:87:a5:91:24:7b:8b:
b2:e7:39:2b:7a:77:5d:42:7f:51:7c:49:e3:1e:13:dc:fe:0d:
17:fc:13:c0:90:eb:ad:2e:11:07:aa:67:b3:a7:63:f7:cf:3f:
86:c8:d4:84:c3:2b:9e:6a:6e:da:42:f5:a9:20:71:fe:d9:1d:
e1:20:3e:bb:b3:42:7b:d6:78:ab:1f:ae:f1:49:de:4f:da:92:
ec:4c:41:2c:32:fe:1c:c0:9e:98:31:d3:0f:7e:8c:2b:7b:5b:
b5:ca:a7:ef:0b:36:4f:cd:8c:7e:16:53:c2:9c:a0:7c:56:b2:
20:3e:98:98:7e:c7:15:03:45:42:1f:3a:9c:d4:8b:89:a1:2d:
94:c5:a5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:44 2026 by rpki-client