
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
File: J7ITMhmYnmoy1xFY0IUqUW62958.mft (raw, json)
Hash identifier: +SwFD3IaMc3fGfeLe7yuNysJFRF9doXRO+XhsuuKGcw=
Subject key identifier: 69:08:B4:6E:8F:9A:46:39:61:86:14:0C:30:D6:2B:92:BD:3C:D4:FE
Authority key identifier: 27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F
Certificate issuer: /CN=27b2133219989e6a32d71158d0852a516eb6f79f
Certificate serial: 019CAC100AC985D5872E94C70F58572C4BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
Manifest number: 14CC
Signing time: Mon 02 Mar 2026 01:00:58 +0000
Manifest this update: Mon 02 Mar 2026 01:00:58 +0000
Manifest next update: Tue 03 Mar 2026 01:00:58 +0000
Files and hashes: 1: J7ITMhmYnmoy1xFY0IUqUW62958.crl (hash: LRwJl2bHEkBlb3vdzGjZfUwfzKuxO10I6Q/6yMUnvMo=)
2: aXD0FFNchQkwK34CB80vuVCFnu8.roa (hash: 7EgFfEGEl824yez9iLAftyJ4zvdxuachpWpx1Yo48rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:0a:c9:85:d5:87:2e:94:c7:0f:58:57:2c:4b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b2133219989e6a32d71158d0852a516eb6f79f
Validity
Not Before: Mar 2 01:00:58 2026 GMT
Not After : Mar 3 01:00:58 2026 GMT
Subject: CN=6908b46e8f9a46396186140c30d62b92bd3cd4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:85:f8:90:5f:46:4d:21:2e:67:56:89:ac:2f:
c7:c1:29:cc:42:e9:31:77:9f:d3:e9:b9:b5:c0:ad:
49:1a:8d:5a:b1:23:81:27:ac:ef:d8:4b:da:de:ee:
e6:c4:d0:74:3a:a4:5d:f1:f1:bc:f9:ec:ac:07:73:
c4:24:d5:42:ad:a0:65:1c:18:25:fe:f1:33:ee:90:
a5:c6:8e:aa:b3:39:d5:a7:a4:ad:3f:60:3a:8d:37:
7e:14:61:06:4b:19:7f:07:a5:46:38:b6:d2:35:91:
29:48:e0:86:27:5d:aa:53:20:fe:ef:cd:d0:59:e6:
2c:0d:3b:70:bf:bf:4a:85:7e:21:bd:5d:1a:74:1e:
0d:13:7d:ab:5c:2e:d1:f2:37:bd:30:39:04:c8:41:
a9:3e:25:6b:f8:71:35:88:83:c7:63:45:71:3f:ca:
0b:fe:bb:ec:b0:1c:94:1c:4e:fa:d3:cb:5d:9f:b1:
1f:d8:b1:ea:bb:3d:5e:64:75:5e:51:0a:59:24:da:
b2:79:c4:6e:c4:f5:5c:e1:88:89:1f:92:35:d2:c6:
16:71:f4:2e:46:f3:f6:3a:43:47:57:f5:2d:64:c8:
d7:fa:6e:7c:06:6c:d8:30:4c:03:ea:02:3b:ae:e2:
ef:8c:37:60:ea:53:1c:fc:59:da:5c:5a:4c:7f:02:
1e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:08:B4:6E:8F:9A:46:39:61:86:14:0C:30:D6:2B:92:BD:3C:D4:FE
X509v3 Authority Key Identifier:
keyid:27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:c6:9a:b9:c7:8b:7d:78:f4:59:82:b2:7a:12:67:06:20:bb:
7b:11:cc:9d:c9:1b:b1:d7:6e:c5:65:8f:39:ac:f7:66:c5:40:
18:97:2f:2b:e5:61:fa:2b:ae:9f:0a:3a:e8:e5:95:a0:65:98:
f3:d0:47:d9:eb:f3:56:05:12:f1:c9:aa:6f:58:49:4d:29:79:
af:ef:35:f9:61:ea:97:37:91:be:e8:03:c6:bb:3c:cc:ea:9f:
e9:d1:0d:c4:e5:bd:a9:af:32:f7:84:0c:a4:b0:61:44:3a:66:
c7:b2:5a:90:c6:1a:16:2b:ad:49:a2:13:69:9f:ed:3a:08:96:
e4:1d:f8:9d:da:61:5b:c7:1a:1c:2e:66:41:9d:0a:d5:64:87:
71:5c:90:08:76:d8:6a:82:87:6b:2e:b0:a7:b4:55:9e:07:64:
73:7a:fe:68:49:c1:db:8b:47:ca:4f:2e:73:4d:33:17:65:db:
1d:57:70:91:1a:2a:55:ab:e0:f4:c1:ce:9c:bc:4e:4e:2a:25:
c4:ad:88:90:f7:07:ae:97:18:e7:f1:de:c4:f8:92:bf:6e:aa:
e9:dd:ad:02:2d:99:05:e5:63:14:f9:37:82:4f:6d:f0:88:5e:
de:c4:7d:13:47:69:74:fc:ca:6f:9e:4a:51:3f:8b:a9:fe:95:
d2:1c:c6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:26 2026 by rpki-client