Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
File: J9ivflbIDRjclo9NvOyBP4XqMKQ.mft (raw, json)
Hash identifier: hZRB+1rRQB8SGjOIIdQ2ETO2nm0Gbicq8uC3gj9jiys=
Subject key identifier: EE:02:91:A3:1D:AD:0A:B8:45:B5:B3:1E:EB:E9:67:28:1C:29:0A:06
Authority key identifier: 27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
Certificate issuer: /CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Certificate serial: 019CAD5A497338C7B99BED408436C31C4CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
Manifest number: 1005
Signing time: Mon 02 Mar 2026 07:01:41 +0000
Manifest this update: Mon 02 Mar 2026 07:01:41 +0000
Manifest next update: Tue 03 Mar 2026 07:01:41 +0000
Files and hashes: 1: J9ivflbIDRjclo9NvOyBP4XqMKQ.crl (hash: 1kC8MXw43ALo/KW+0d7d4uZ+kmDAfkfVIaGKmGo009k=)
2: zpBvr7D0ZTnk2RASjPjWwuPCBo4.roa (hash: 6ihXuEihTvHi2kmbZX2/h+YBlObaB/XzKmiIBYoX2XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:49:73:38:c7:b9:9b:ed:40:84:36:c3:1c:4c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Validity
Not Before: Mar 2 07:01:41 2026 GMT
Not After : Mar 3 07:01:41 2026 GMT
Subject: CN=ee0291a31dad0ab845b5b31eebe967281c290a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:86:d6:a1:14:ee:75:15:23:23:01:91:c2:6b:
26:8a:ca:0f:53:92:2d:53:6d:ca:8a:c0:e5:a0:3c:
e5:77:69:9f:ca:be:10:2a:d4:5e:16:a4:59:cc:6b:
b9:ed:2b:8c:d6:fe:cb:d2:07:57:d7:48:0b:04:0f:
d3:ee:0d:6c:de:63:93:60:91:6c:93:5c:7c:f3:49:
b1:81:dd:f7:74:29:06:9b:53:7f:27:53:2f:96:3d:
14:f6:d6:3d:b7:63:6b:1b:8c:61:02:6b:35:1d:0d:
27:2f:71:98:27:05:10:9f:d0:17:d2:5c:9c:68:54:
bc:8e:b5:6d:ad:8f:4c:4d:f0:4c:b5:e9:81:35:09:
a9:ed:38:80:c4:8a:90:d8:79:9d:22:3d:30:53:30:
56:e3:89:8a:36:4b:5b:7f:67:8b:03:d8:45:aa:62:
f0:cc:74:ec:86:7f:22:fe:eb:da:f9:fd:43:4e:0a:
4d:e5:83:49:79:fb:90:90:8e:e2:f1:02:7a:87:3e:
e7:fe:bd:fc:2b:55:52:62:91:50:bd:f1:99:da:d3:
78:6e:02:75:64:60:d9:e7:59:19:68:93:50:ef:c8:
a7:8f:09:9c:c1:4a:3a:7e:03:f4:de:6b:50:81:d2:
31:6d:b9:7a:71:a7:94:30:69:5d:b0:da:b4:bf:8c:
ea:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:02:91:A3:1D:AD:0A:B8:45:B5:B3:1E:EB:E9:67:28:1C:29:0A:06
X509v3 Authority Key Identifier:
keyid:27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b4:ca:d8:c3:f6:8d:fe:b5:ad:41:f0:1a:48:92:b9:e4:b9:
11:8d:17:65:8a:29:df:75:13:55:92:db:19:0c:e2:d2:4f:3b:
68:cf:d9:7b:3f:23:a7:cc:4b:1b:db:c3:13:d6:af:e8:21:f5:
4f:74:44:b1:92:e0:4d:79:44:c6:f8:70:2d:a2:a7:f0:e7:1c:
7b:a2:93:84:12:ed:8b:b0:1c:be:e4:c1:97:ec:c7:39:3e:a8:
36:54:e3:2b:24:2d:1b:92:68:2a:23:ea:23:c3:c9:e1:73:78:
9a:50:da:9f:eb:80:fd:76:53:b3:b6:de:e4:32:f2:a7:ab:96:
71:9a:fa:d5:d7:be:c4:8a:48:38:d3:0e:e3:2f:83:06:b9:d0:
84:c8:07:6c:86:1b:b1:35:df:e2:cf:39:08:83:bb:2a:3b:5f:
a0:42:cb:61:d9:2e:f5:7e:5f:c7:ad:2c:4c:e0:a5:88:53:35:
5b:6e:f6:56:19:ac:f3:17:dc:39:c3:e9:68:61:2c:31:3a:0a:
8d:a9:74:43:d7:31:c4:f5:e9:52:60:64:f0:0f:6d:97:3f:2b:
39:31:95:79:bc:57:4e:a2:90:70:48:76:d1:b7:f9:f4:cc:e3:
2e:60:94:5a:64:5b:85:84:9e:9c:a5:a8:55:51:47:b0:99:b5:
58:a9:95:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:09:16 2026 by rpki-client