Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.mft
File: J5_fPkke9m13cUOJrjbwRXFfJ2g.mft (raw, json)
Hash identifier: fHQWaq0TDXnTLZVz6LLxfjBH+OALosLew4zinsdjdNk=
Subject key identifier: DC:80:BF:AC:C0:6A:6B:F0:EA:8C:86:3F:1D:CD:8B:3B:33:CB:CE:71
Authority key identifier: 27:9F:DF:3E:49:1E:F6:6D:77:71:43:89:AE:36:F0:45:71:5F:27:68
Certificate issuer: /CN=279fdf3e491ef66d77714389ae36f045715f2768
Certificate serial: 01A0C3E59B39849841F883CEDF144BF46434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.mft
Manifest number: 0169
Signing time: Mon 21 Sep 2026 12:16:39 +0000
Manifest this update: Mon 21 Sep 2026 12:16:39 +0000
Manifest next update: Tue 22 Sep 2026 12:16:39 +0000
Files and hashes: 1: J5_fPkke9m13cUOJrjbwRXFfJ2g.crl (hash: nTwtmBRX3AgDh7TfWHvwDelZFsqwc51ID6QTJ6JJ/HI=)
2: eYIU0lgIGbeRVl2e4lvrfNL_AGI.roa (hash: +E4U6Wwkj+cuvgvS94OAueMPchhfOUf2dvj5+HfKbkc=)
3: jx2IrehBfGIoz07HNrnJbRx1Ie8.roa (hash: elgg0Zp0doZnyv6v09SX8lS/zVSrNYK42ElsTeAO/Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:16:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:e5:9b:39:84:98:41:f8:83:ce:df:14:4b:f4:64:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279fdf3e491ef66d77714389ae36f045715f2768
Validity
Not Before: Sep 21 12:16:39 2026 GMT
Not After : Sep 22 12:16:39 2026 GMT
Subject: CN=dc80bfacc06a6bf0ea8c863f1dcd8b3b33cbce71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dd:66:56:1d:52:59:ac:cf:6a:9a:f3:8f:0f:
14:6d:4b:f5:0c:8b:df:c7:63:bd:db:fc:ae:4a:43:
e2:60:45:1d:f3:22:e1:96:37:00:ac:c6:a9:b6:02:
16:84:fb:20:47:cd:8d:c8:7b:2a:e4:f9:e7:de:47:
90:d2:f7:4c:5a:46:43:1a:ba:2c:90:ae:15:a1:4f:
d9:0e:ac:b2:49:8b:6d:eb:2e:10:9d:a7:7d:86:c8:
fb:a2:08:22:81:e7:bb:18:6f:6f:ba:20:27:98:12:
21:ef:0b:be:41:c8:e1:6e:bf:b2:09:6e:57:35:83:
0a:db:5c:5d:7a:39:d0:4f:a6:19:e9:db:fe:85:62:
33:c2:c6:f7:53:b5:7f:5d:64:74:03:f8:a1:b4:ca:
2b:c2:66:99:70:4a:51:fe:87:0f:c1:1c:e1:84:3f:
9f:b7:be:bd:cd:1d:06:6b:5b:6b:44:e0:72:6a:b8:
de:03:51:03:38:b6:6e:e1:fb:45:8d:df:c7:61:1a:
e6:17:f2:ae:6d:69:65:a6:6b:62:20:63:c7:18:b5:
01:51:74:6d:e6:0f:ca:20:28:93:28:4d:2a:a1:c1:
1b:54:3d:cb:9e:5b:00:81:69:76:f6:ac:57:8a:42:
37:68:30:c2:b4:a3:26:b9:90:7a:de:34:70:7e:7f:
a6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:80:BF:AC:C0:6A:6B:F0:EA:8C:86:3F:1D:CD:8B:3B:33:CB:CE:71
X509v3 Authority Key Identifier:
keyid:27:9F:DF:3E:49:1E:F6:6D:77:71:43:89:AE:36:F0:45:71:5F:27:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ee:89:b0:83:50:6a:76:64:fe:6c:06:5d:fd:3d:d3:a4:4f:
61:b3:31:c6:39:a9:ca:63:2d:c7:69:2b:9c:a7:eb:76:f3:8e:
d5:ef:f2:cc:73:8b:bf:f8:1a:70:bc:a6:ad:80:d7:84:b1:ef:
51:5b:2e:79:98:b6:a1:b0:4d:0e:4a:ca:d8:b7:e5:c3:30:8a:
3f:27:e2:b0:c8:2c:23:f2:89:bf:af:4c:8e:f5:f1:5d:61:cb:
fe:79:6d:51:59:f9:e2:0d:70:db:61:ce:8c:60:f1:58:d9:6f:
cb:7e:d8:d0:03:a1:11:79:09:d7:ef:1e:21:76:84:b9:77:dd:
cf:4f:db:dd:84:d3:20:3e:cf:29:20:c8:69:c8:0e:a0:6f:e2:
3b:05:e0:43:28:f1:5e:8c:b8:45:b5:86:1d:50:85:17:a7:d2:
df:ca:d4:77:26:d5:6e:14:8d:11:ef:4d:72:e9:ad:42:2a:6c:
e5:f3:6c:34:f4:38:32:87:cf:2b:a2:0f:18:9a:48:3b:86:fb:
25:fb:9a:37:3c:54:36:7d:d6:5e:4d:6a:8a:9a:ea:75:af:fe:
43:7e:20:65:f0:2a:72:90:d6:ee:92:fb:6a:d4:71:e8:58:29:
4e:3f:a5:6e:3f:46:61:86:45:af:a7:03:6f:4c:68:49:d6:db:
f3:d4:29:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:58:50 2026 by rpki-client