Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
File: J0hgAkaZUbaABwTI8CysdLX4KQU.mft (raw, json)
Hash identifier: 3SIzu75qzsJGfbgvvEdvk+UWRiqGloidKRo0lRwFVlA=
Subject key identifier: EF:DC:6F:2C:72:94:1C:01:C2:5B:00:D2:70:48:4A:FE:B3:80:6B:9C
Authority key identifier: 27:48:60:02:46:99:51:B6:80:07:04:C8:F0:2C:AC:74:B5:F8:29:05
Certificate issuer: /CN=27486002469951b6800704c8f02cac74b5f82905
Certificate serial: 019CAD5A0BFEDEE1DBB868B3164BB71F0184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
Manifest number: 0708
Signing time: Mon 02 Mar 2026 07:01:25 +0000
Manifest this update: Mon 02 Mar 2026 07:01:25 +0000
Manifest next update: Tue 03 Mar 2026 07:01:25 +0000
Files and hashes: 1: J0hgAkaZUbaABwTI8CysdLX4KQU.crl (hash: Hay2Qxv44S39oztMUFl52hUvJFp7F4L87HQ5YC8W57k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:0b:fe:de:e1:db:b8:68:b3:16:4b:b7:1f:01:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27486002469951b6800704c8f02cac74b5f82905
Validity
Not Before: Mar 2 07:01:25 2026 GMT
Not After : Mar 3 07:01:25 2026 GMT
Subject: CN=efdc6f2c72941c01c25b00d270484afeb3806b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:8f:50:fb:30:8b:0f:e8:e4:d9:4f:44:7e:
5a:0c:e7:85:45:b5:a7:1b:6a:f4:b7:40:f7:9a:ce:
7d:f9:8e:b7:f2:f3:63:59:dc:e6:ab:ba:ec:4f:2a:
9d:70:5d:27:e9:eb:94:a4:9c:bb:b8:59:8c:25:c7:
01:53:b0:3b:a0:ca:d5:a4:9c:e0:a0:f3:9a:2f:85:
ea:c2:f3:1a:22:08:af:94:22:2b:3f:d3:26:40:ef:
6d:ab:da:f4:4d:e7:e6:7d:86:b1:97:94:5f:84:01:
0b:33:5b:fc:44:0b:53:b8:35:5b:cd:a5:78:dc:4f:
44:9d:34:28:95:f1:9a:4b:10:e3:00:4b:1e:49:84:
23:a3:12:61:08:e7:12:c5:fc:d4:c2:ef:93:35:af:
e6:00:ca:b8:02:82:bd:b4:11:bf:81:bb:e3:eb:90:
22:89:25:17:86:25:f9:6b:cf:48:2f:22:a5:ba:c8:
e6:78:b6:bb:1e:0f:07:12:5d:6d:ab:61:02:cd:99:
56:21:f4:e8:fb:98:5e:81:12:3c:7d:cf:2f:fa:94:
38:09:7c:6f:d7:4e:d1:8a:11:ce:9a:e3:b7:6c:1e:
20:97:a9:7d:41:7a:19:fb:dd:0c:94:0f:6c:03:06:
3a:a8:61:aa:4a:16:87:0c:e6:ae:43:62:f4:4b:9f:
de:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DC:6F:2C:72:94:1C:01:C2:5B:00:D2:70:48:4A:FE:B3:80:6B:9C
X509v3 Authority Key Identifier:
keyid:27:48:60:02:46:99:51:B6:80:07:04:C8:F0:2C:AC:74:B5:F8:29:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ca:7a:d7:3b:00:39:23:6d:52:33:8c:39:f6:73:1d:d7:5f:
0d:f9:d3:ad:8e:c9:fb:97:24:98:b9:9d:5b:81:f3:ea:ac:3b:
3c:1c:43:45:52:db:b7:e1:d9:57:76:5e:29:fd:06:1c:31:0c:
67:f3:29:4a:bc:54:0f:98:31:1d:b3:23:f8:7d:1e:e8:dc:81:
15:b1:01:69:9b:29:2b:e1:7f:e5:1b:6c:2f:30:ef:a9:64:8c:
5c:a4:de:c4:23:38:b5:a5:8c:3c:da:4a:a1:07:31:e0:da:8b:
3f:a0:8b:2f:b7:89:1a:a1:71:f1:ba:a0:6d:4f:dc:86:37:41:
ff:f9:05:c9:06:8d:7e:91:a3:e4:80:84:58:ed:1f:1d:a4:9d:
36:bc:d4:cb:1f:d3:69:71:17:a7:de:3e:a4:83:0a:2e:7c:91:
e9:0a:33:13:62:1e:83:5f:8b:74:46:d3:f6:35:a9:c3:ce:76:
72:1e:03:b9:1c:7c:8e:b6:68:71:0d:40:83:df:76:62:3b:7c:
4a:d4:c2:9f:9c:6c:17:f9:b8:07:f5:8f:04:65:c4:5b:e1:e4:
36:2a:eb:01:eb:fe:11:ab:5b:ab:e0:38:ca:40:ba:a0:41:27:
47:94:c6:11:60:e6:0f:8f:89:33:0a:87:9c:0c:0f:e9:90:30:
1c:b7:a5:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWgv+3uHbuGizFku3HwGEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDg2MDAyNDY5OTUxYjY4MDA3MDRjOGYwMmNhYzc0YjVm
ODI5MDUwHhcNMjYwMzAyMDcwMTI1WhcNMjYwMzAzMDcwMTI1WjAzMTEwLwYDVQQD
EyhlZmRjNmYyYzcyOTQxYzAxYzI1YjAwZDI3MDQ4NGFmZWIzODA2YjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL+PUPswiw/o5NlPRH5aDOeFRbWn
G2r0t0D3ms59+Y638vNjWdzmq7rsTyqdcF0n6euUpJy7uFmMJccBU7A7oMrVpJzg
oPOaL4XqwvMaIgivlCIrP9MmQO9tq9r0TefmfYaxl5RfhAELM1v8RAtTuDVbzaV4
3E9EnTQolfGaSxDjAEseSYQjoxJhCOcSxfzUwu+TNa/mAMq4AoK9tBG/gbvj65Ai
iSUXhiX5a89ILyKlusjmeLa7Hg8HEl1tq2ECzZlWIfTo+5hegRI8fc8v+pQ4CXxv
107RihHOmuO3bB4gl6l9QXoZ+90MlA9sAwY6qGGqShaHDOauQ2L0S5/e6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/cbyxylBwBwlsA0nBISv6zgGucMB8GA1UdIwQY
MBaAFCdIYAJGmVG2gAcEyPAsrHS1+CkFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBoZ0FrYVpVYmFBQndUSThDeXNkTFg0S1FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82ZjU4ZmItNzM3OS00MmFiLTg2M2Mt
YzRlYjZkZjk3NGFkLzEvSjBoZ0FrYVpVYmFBQndUSThDeXNkTFg0S1FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82ZjU4ZmItNzM3OS00MmFiLTg2M2MtYzRlYjZkZjk3NGFk
LzEvSjBoZ0FrYVpVYmFBQndUSThDeXNkTFg0S1FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAksp61zsA
OSNtUjOMOfZzHddfDfnTrY7J+5ckmLmdW4Hz6qw7PBxDRVLbt+HZV3ZeKf0GHDEM
Z/MpSrxUD5gxHbMj+H0e6NyBFbEBaZspK+F/5RtsLzDvqWSMXKTexCM4taWMPNpK
oQcx4NqLP6CLL7eJGqFx8bqgbU/chjdB//kFyQaNfpGj5ICEWO0fHaSdNrzUyx/T
aXEXp94+pIMKLnyR6QozE2Ieg1+LdEbT9jWpw852ch4DuRx8jrZocQ1Ag992Yjt8
StTCn5xsF/m4B/WPBGXEW+HkNirrAev+Eatbq+A4ykC6oEEnR5TGEWDmD4+JMwqH
nAwP6ZAwHLeldQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:22:31 2026 by rpki-client