Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
File: J9VOSniNaWei7vOmaSYiYm9U760.mft (raw, json)
Hash identifier: Bw2L1PR0YJpPtJ19rNC+X4We0IxDvbLztr416K3uExA=
Subject key identifier: 2C:80:2E:41:D4:7D:44:5D:C6:E6:14:1B:76:81:15:DF:4D:4C:F7:05
Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
Certificate issuer: /CN=27d54e4a788d6967a2eef3a6692622626f54efad
Certificate serial: 019CA945FC32E7267E97110214B83DBF7794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
Manifest number: 0D6D
Signing time: Sun 01 Mar 2026 12:01:01 +0000
Manifest this update: Sun 01 Mar 2026 12:01:01 +0000
Manifest next update: Mon 02 Mar 2026 12:01:01 +0000
Files and hashes: 1: J9VOSniNaWei7vOmaSYiYm9U760.crl (hash: gur6N8ZeUjiMqoAwKU9NnC4nkJFsjgzKiUZfpMyXyw0=)
2: tDGcwqlaTPnixLkEemSY0dR8oEE.roa (hash: dntAFtICbpLiWSfID0C/faNT0VRienZetlVV8mxC9ro=)
3: zm911m8cc8YZZfJbwYQ5aTAaoOY.roa (hash: ReJF3cVbfAIqGPp+g2zOsYcwozrF/qsi8DLjV5pxna8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:fc:32:e7:26:7e:97:11:02:14:b8:3d:bf:77:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad
Validity
Not Before: Mar 1 12:01:01 2026 GMT
Not After : Mar 2 12:01:01 2026 GMT
Subject: CN=2c802e41d47d445dc6e6141b768115df4d4cf705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:93:ee:b4:21:98:aa:f6:1f:96:77:23:91:7b:
90:16:8d:ed:06:c6:0e:89:fc:38:7e:8c:29:e6:7a:
ba:69:c0:05:85:bf:0b:73:ed:e5:6e:03:df:ee:5e:
89:2f:4a:f4:04:0f:55:ff:53:b6:f0:14:fa:90:7e:
a0:55:2d:fb:25:90:11:7d:56:d4:af:4d:c6:c8:ec:
96:4c:57:9b:85:8d:83:a6:fa:92:bf:8d:3f:19:2c:
d6:62:6b:ab:fc:b4:b6:81:c8:c7:4b:57:e3:81:1b:
fb:df:7a:87:89:dd:7c:bc:d9:69:2a:6c:01:2d:da:
3b:5e:77:9b:cf:cc:54:80:07:78:04:71:52:3a:d5:
2f:46:5c:c9:c8:06:ec:d7:cd:45:c6:63:9f:7c:86:
cc:eb:29:2f:9c:c4:42:49:29:6f:83:c5:d6:52:64:
07:3b:fb:14:6a:99:7a:5d:e4:3f:6a:fd:43:c6:f7:
8b:b2:62:7b:50:51:2e:7f:eb:7c:1e:fe:23:dc:57:
d9:6a:e8:41:f0:de:67:7c:57:2e:09:9c:8b:9e:01:
bf:ac:c5:22:93:a5:56:6a:f3:d9:84:f1:46:03:8b:
8e:d8:a5:c7:22:38:86:fc:dc:0b:4d:53:10:e6:3d:
1f:b7:f2:2c:b7:9d:af:07:d4:73:0a:18:bd:e9:b8:
dc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:80:2E:41:D4:7D:44:5D:C6:E6:14:1B:76:81:15:DF:4D:4C:F7:05
X509v3 Authority Key Identifier:
keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ef:63:14:89:66:31:fc:b3:b2:c8:da:a2:a4:90:d0:1f:8a:
77:68:7e:9d:c5:81:0f:7e:9e:9c:4c:ea:48:76:16:97:08:80:
56:df:74:4f:a8:12:b7:54:69:ed:3b:18:7d:b1:7f:cf:fc:70:
fa:76:0d:8a:0d:cd:f6:e2:af:76:13:25:94:1f:15:5d:d9:3d:
35:3b:f0:07:35:ef:83:7f:35:db:5b:7e:0b:5a:1a:79:98:21:
8c:4a:e8:92:35:5d:de:05:d5:c4:55:fc:5e:1f:ae:07:21:63:
a8:c1:6c:2f:e2:c6:2b:e6:1d:f7:7e:e1:80:e7:d1:b8:97:ff:
0a:d9:bc:63:4a:1d:ed:0a:87:1e:2c:11:a4:75:88:60:02:b6:
15:3b:aa:7d:25:a2:8d:d3:50:8f:d5:1e:6f:69:e0:35:52:c6:
d9:50:7c:dd:90:71:6f:16:f9:6d:3a:58:f2:d6:97:e5:06:40:
d0:7e:48:44:bb:7e:c2:a7:6e:ad:fa:71:3f:66:0d:42:b5:ee:
46:76:24:58:6d:ad:86:ec:64:b0:29:d2:74:06:47:3a:d2:39:
2c:52:02:af:e3:30:e9:a5:68:a3:0f:95:e3:6f:73:f1:97:d2:
c4:2b:7b:4a:c6:dc:61:d6:01:3c:46:f6:29:20:0a:aa:27:e3:
06:7a:39:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:34 2026 by rpki-client