Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft
File: J6-AiEvc7y-e2bqXgRYKBnyMTws.mft (raw, json)
Hash identifier: FrIo6qmNpdkMJ9ZihDdn7OhNPuaj5BwarZvJh6h6UBE=
Subject key identifier: BD:FA:FE:0E:26:6F:9C:03:34:8C:86:1C:AD:FF:6F:A7:2E:EB:07:4D
Authority key identifier: 27:AF:80:88:4B:DC:EF:2F:9E:D9:BA:97:81:16:0A:06:7C:8C:4F:0B
Certificate issuer: /CN=27af80884bdcef2f9ed9ba9781160a067c8c4f0b
Certificate serial: 019CA97D29E1075E80E04A05C5E43D7468F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft
Manifest number: 0657
Signing time: Sun 01 Mar 2026 13:01:17 +0000
Manifest this update: Sun 01 Mar 2026 13:01:17 +0000
Manifest next update: Mon 02 Mar 2026 13:01:17 +0000
Files and hashes: 1: J6-AiEvc7y-e2bqXgRYKBnyMTws.crl (hash: O67pirJg+8t/qsr5cuK9Z4x3WvHQct3UszUOzyeQ46s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:29:e1:07:5e:80:e0:4a:05:c5:e4:3d:74:68:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27af80884bdcef2f9ed9ba9781160a067c8c4f0b
Validity
Not Before: Mar 1 13:01:17 2026 GMT
Not After : Mar 2 13:01:17 2026 GMT
Subject: CN=bdfafe0e266f9c03348c861cadff6fa72eeb074d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4d:9a:ef:f7:cf:98:94:58:6e:31:2e:08:70:
01:d6:8e:2d:86:c8:df:1c:9d:7c:d8:50:62:76:4b:
96:1a:52:60:27:2a:12:1c:7b:89:67:e0:66:4a:55:
50:f8:4e:b9:06:24:43:e5:2e:08:8a:fc:21:2e:5d:
8d:96:42:11:62:c9:3c:52:5e:18:c4:88:c0:89:58:
f2:df:1d:60:e5:39:af:50:09:59:dc:d0:48:9a:91:
0a:0a:fd:5d:10:08:48:c0:9e:cd:ee:37:50:3b:35:
b2:7b:80:66:a2:7c:10:02:f5:99:47:6d:14:f7:03:
5e:b4:3c:fb:db:18:c1:69:0e:ee:68:57:8e:12:36:
93:64:44:da:06:1b:bf:10:64:a9:cc:21:bd:a0:dc:
85:e7:85:3a:70:35:8d:9d:22:60:13:78:1d:ef:6a:
ff:71:53:5e:50:a1:e0:4a:33:16:ca:61:1d:0f:6e:
f0:72:6d:19:71:06:12:87:74:a1:11:04:88:46:6e:
bb:80:00:2a:c1:3a:20:2c:c0:b4:b7:ed:b8:78:95:
32:30:61:83:2e:cf:7e:24:ce:b6:a4:a6:ba:e4:3b:
b4:3b:80:f3:36:44:5d:d3:74:9f:36:b2:d8:d1:35:
5d:3a:73:a6:02:be:cd:f6:c2:96:6e:c9:bf:98:1c:
fb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FA:FE:0E:26:6F:9C:03:34:8C:86:1C:AD:FF:6F:A7:2E:EB:07:4D
X509v3 Authority Key Identifier:
keyid:27:AF:80:88:4B:DC:EF:2F:9E:D9:BA:97:81:16:0A:06:7C:8C:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c3:20:3f:b9:31:91:a1:83:91:51:63:ac:09:49:e1:14:63:
d5:9c:d2:27:a2:59:34:7b:6d:25:03:bb:d7:d0:14:0e:68:ca:
8c:ee:e0:77:5a:9f:e4:02:60:c5:60:c8:5d:e5:f2:30:ea:38:
d3:ff:dd:a0:3f:77:89:93:57:87:d7:74:d9:2d:91:63:1e:2c:
b6:ff:ed:c9:c8:1b:b0:0d:32:f7:6d:19:ee:dd:8e:88:b3:cf:
e0:f0:d6:f8:d1:9c:b6:6b:fb:da:a6:45:b6:88:a1:83:f4:ae:
d1:89:31:d4:d2:25:f5:17:a7:65:24:33:fe:72:a8:46:27:e6:
23:32:08:a5:f3:4e:42:73:1e:0d:72:74:0e:6b:be:38:a4:21:
2e:6e:99:98:3f:b9:8e:0f:58:f0:e2:40:5f:86:7b:99:63:fd:
43:5a:42:a3:89:ac:f1:92:7f:29:66:e7:31:55:8a:f0:ed:4a:
a5:5a:df:00:e9:9c:b0:26:46:31:0d:bf:26:c4:12:bb:45:c1:
f1:4b:a9:0a:a0:14:76:51:5d:9c:0f:24:ed:42:95:7d:d7:c8:
79:d7:b5:d2:56:c3:f2:8b:83:b3:ce:37:f6:d4:e0:95:98:fa:
d4:5a:66:41:55:e3:f7:d3:a7:4e:8f:3d:0a:ff:5d:8a:28:b4:
d3:20:0d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:34 2026 by rpki-client