Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
File: j2xCTP6ScDEA1QooMiU3RN11ZFI.mft (raw, json)
Hash identifier: 3NB1S3akShGEIm8Gk6dEPQCY3lN3ZhMHX0zh0ygC1Yw=
Subject key identifier: 0C:7A:31:55:5F:E7:2E:29:55:45:FD:0C:99:5D:F2:62:FF:4F:4A:F7
Authority key identifier: 8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
Certificate issuer: /CN=8f6c424cfe92703100d50a2832253744dd756452
Certificate serial: 019D9A3E2E5A3C92727053E4C85912E7D31E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
Manifest number: 1183
Signing time: Fri 17 Apr 2026 07:00:59 +0000
Manifest this update: Fri 17 Apr 2026 07:00:59 +0000
Manifest next update: Sat 18 Apr 2026 07:00:59 +0000
Files and hashes: 1: j2xCTP6ScDEA1QooMiU3RN11ZFI.crl (hash: 0unH23Dkp1TAeIlZHMdrGYFj0qfc2Ts2OIJhOXOgKcE=)
2: t2ZZuk9Jhb77dG7jfBxACPE3v0Y.roa (hash: j8FLow634/sFX5We1fU/Tl5tl/Iw6/b+Vn5Ia8rywE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:2e:5a:3c:92:72:70:53:e4:c8:59:12:e7:d3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6c424cfe92703100d50a2832253744dd756452
Validity
Not Before: Apr 17 07:00:59 2026 GMT
Not After : Apr 18 07:00:59 2026 GMT
Subject: CN=0c7a31555fe72e295545fd0c995df262ff4f4af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:83:c6:fe:09:c4:ff:71:7f:28:38:02:6f:
03:de:89:b6:36:c5:a7:75:0b:16:83:4c:4a:fd:8c:
4b:01:67:ba:3f:63:d8:84:80:ba:76:2e:22:07:dd:
f3:19:f3:e9:2a:19:5e:74:04:ab:14:c9:36:c6:99:
41:46:82:bf:28:3a:80:98:8d:41:cc:62:05:bd:45:
8a:77:f7:1c:c2:9d:89:93:fd:f5:d7:b1:a1:85:49:
3a:8f:f8:c0:af:34:9f:d7:a8:9a:bc:fe:8c:eb:05:
c7:aa:7f:f4:91:40:f8:ab:1d:e3:68:0e:80:46:f0:
36:03:ae:d9:8a:69:25:1b:4d:ae:f3:d2:1c:74:a5:
59:0b:61:59:d0:d5:85:13:80:60:35:eb:84:15:2d:
e0:95:8a:a6:f7:61:83:ca:c0:8d:22:7f:18:18:e8:
bd:ea:b0:a6:5e:46:c5:d4:e7:2b:d0:5b:86:a0:2f:
6b:10:ad:2d:72:d9:df:94:f0:11:0c:5a:0f:9c:5c:
fc:46:1a:ae:fd:5d:80:ab:ac:c2:64:ec:51:ed:b9:
85:24:58:7e:53:f2:7e:40:da:07:3a:4d:24:d9:7e:
29:f3:dc:53:1c:99:b2:19:b7:61:6d:56:09:7e:b3:
ae:57:cd:55:52:b0:5a:1d:32:ce:8f:30:9d:e4:6e:
aa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7A:31:55:5F:E7:2E:29:55:45:FD:0C:99:5D:F2:62:FF:4F:4A:F7
X509v3 Authority Key Identifier:
keyid:8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:52:2b:18:64:cd:9f:77:a1:a4:ba:db:a1:2b:de:3d:45:3b:
63:d8:c9:40:e3:ae:6c:81:cd:c4:6b:ab:ba:b4:92:5a:6f:bd:
36:8d:7d:cd:a4:ef:5d:a2:2b:e4:fa:0f:12:ad:3a:03:20:6c:
2c:69:4a:12:f3:92:e5:40:ad:a3:68:bf:ba:15:d6:00:80:0a:
9f:50:f3:2a:76:b8:c4:f4:0b:1c:62:05:7b:4c:18:cf:4a:95:
37:15:13:9c:1a:5e:b1:c3:74:4a:88:c5:ad:00:f6:4e:af:98:
06:c7:3d:95:6d:51:6f:ee:ea:b7:5a:5c:f7:99:1d:2a:46:d9:
fb:57:72:61:d6:04:84:31:65:63:6d:71:0e:5e:89:7d:2f:3f:
7f:a5:52:2b:49:57:f4:cb:2f:81:2d:65:47:99:5f:19:e7:54:
83:94:82:c2:f9:2f:8b:1a:65:19:a2:9b:f9:e1:1a:13:b6:36:
25:70:12:70:8d:59:3d:9e:6d:2c:1f:7a:b1:ac:2b:05:cf:50:
97:92:24:3e:47:81:71:c5:85:b4:25:c5:f0:c8:ce:73:b2:01:
13:81:dc:e8:e4:d0:e9:4a:6f:c3:4d:bd:36:9e:f4:d3:be:59:
0d:7a:0d:28:3c:8e:cb:59:38:22:73:f0:ce:ad:04:c2:26:61:
6d:ac:24:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:17 2026 by rpki-client