Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
File: J49i86X4RyKFL8cPBSzxPeojdNA.mft (raw, json)
Hash identifier: UFr+SY4n5rXhOYjE9o58K4PwpHq9VgijoWBj6BjybR8=
Subject key identifier: 54:17:6A:63:F1:22:27:F8:D0:E4:69:D0:B9:B0:3D:3D:73:9E:E1:B3
Authority key identifier: 27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0
Certificate issuer: /CN=278f62f3a5f84722852fc70f052cf13dea2374d0
Certificate serial: 019CACB48DF1F19D445C6A25F8EFC9C7FDBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
Manifest number: 0B27
Signing time: Mon 02 Mar 2026 04:00:39 +0000
Manifest this update: Mon 02 Mar 2026 04:00:39 +0000
Manifest next update: Tue 03 Mar 2026 04:00:39 +0000
Files and hashes: 1: J49i86X4RyKFL8cPBSzxPeojdNA.crl (hash: SBbrS6oexCyoM/KrxWBweQQf70GFc/3OC8ETzR3kstw=)
2: tjHQL9126jSlMadUbx0UtwRmVpI.roa (hash: KKrhOiqiGWD/PXAF5L7Zxc0Yltf6jS4noyHNe6KHHoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:8d:f1:f1:9d:44:5c:6a:25:f8:ef:c9:c7:fd:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278f62f3a5f84722852fc70f052cf13dea2374d0
Validity
Not Before: Mar 2 04:00:39 2026 GMT
Not After : Mar 3 04:00:39 2026 GMT
Subject: CN=54176a63f12227f8d0e469d0b9b03d3d739ee1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:4e:64:e7:2e:e0:71:4f:9c:60:18:01:97:
55:a6:8e:68:53:8c:bd:8b:8c:91:66:a7:2d:d2:45:
19:17:56:04:49:05:99:8f:b6:d6:1d:7d:dc:cb:98:
0c:75:39:38:54:71:4f:39:40:4d:ae:e3:df:36:6d:
92:8a:01:d5:26:40:b2:58:db:f4:da:63:20:cc:81:
24:fd:9c:79:51:6f:c0:ed:e5:4b:66:74:fb:da:97:
a2:9c:b7:f1:db:25:f7:50:19:e6:e5:a9:39:61:de:
3c:36:c6:5e:5f:13:0b:a0:da:6f:7a:19:8f:25:ab:
a8:97:78:0d:d8:85:19:b7:97:84:37:55:31:82:9a:
fd:a2:9f:cb:0e:80:e7:1c:ad:da:61:3e:b2:96:3f:
08:46:80:c5:ed:f5:45:59:30:91:44:62:82:f0:e7:
d3:4d:bc:2e:0d:e1:b5:49:8b:a7:5e:9a:93:c2:4c:
7e:85:67:79:3c:cb:01:87:ec:b9:23:25:0d:c0:6b:
68:44:58:ff:c4:e1:d2:cc:04:37:c3:56:e2:02:c6:
ae:2a:58:2b:ba:f2:57:3e:4a:a1:05:15:f8:1e:4a:
d0:46:6c:97:68:4a:61:15:60:0c:7a:f6:1c:be:7f:
13:53:2f:b0:a6:e8:89:6f:29:19:1a:8d:4b:26:6d:
95:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:17:6A:63:F1:22:27:F8:D0:E4:69:D0:B9:B0:3D:3D:73:9E:E1:B3
X509v3 Authority Key Identifier:
keyid:27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a7:67:c2:9a:05:0b:24:43:16:85:a4:9d:a0:e1:c2:31:3a:
9d:c8:db:09:30:bc:09:52:e8:e0:61:19:0e:47:2b:b7:bf:7d:
4b:45:36:d7:c4:0a:de:5e:a6:14:16:30:2f:b4:08:89:a6:35:
2f:4b:f2:27:1e:f5:ff:01:24:4c:40:1a:e6:35:0d:94:bb:2f:
97:e6:1b:ba:2a:32:de:5f:a8:20:84:97:84:2c:c3:5c:6f:2a:
8a:4d:39:1d:58:33:4d:5b:6e:1d:1c:b1:4b:d7:00:ea:5a:c3:
66:63:71:9a:46:33:5e:25:60:44:f5:c9:5e:f5:95:9f:2a:0e:
41:ec:91:65:98:dd:ed:30:b2:8a:04:78:3d:50:2b:9d:1f:14:
de:8f:dc:e7:a6:26:eb:f0:35:2c:f6:e6:5c:d1:63:39:d7:1c:
8d:ca:c4:e1:0c:7c:40:91:cd:a8:a7:33:83:af:4f:f4:2e:61:
eb:6a:29:36:6d:ed:cd:43:4e:91:37:ce:d2:5c:2a:43:2b:7c:
8a:f9:df:4c:81:0e:be:f0:14:96:eb:64:76:ad:90:f8:58:6a:
fb:9a:33:68:dd:ea:67:90:8a:3b:84:d7:af:34:e8:63:b6:d3:
00:7c:67:1e:64:3f:c5:39:b0:bd:ac:68:20:bd:85:30:7d:23:
5f:a3:03:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:05 2026 by rpki-client