Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.mft
File: J9QGnis6k_cQuUMOpksNXsQXP80.mft (raw, json)
Hash identifier: 45mh2dXNzchNlgpFB4PBWSmqwzwtZrKQqDvN7obAMv8=
Subject key identifier: A8:D6:F8:AD:ED:55:6B:02:49:E9:B0:C6:BB:13:79:68:DC:F9:F5:5D
Authority key identifier: 27:D4:06:9E:2B:3A:93:F7:10:B9:43:0E:A6:4B:0D:5E:C4:17:3F:CD
Certificate issuer: /CN=27d4069e2b3a93f710b9430ea64b0d5ec4173fcd
Certificate serial: 019FA89A4771CB03697633E969C87CE7A36B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9QGnis6k_cQuUMOpksNXsQXP80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:50 +0000
Manifest this update: Tue 28 Jul 2026 12:01:50 +0000
Manifest next update: Wed 29 Jul 2026 12:01:50 +0000
Files and hashes: 1: 1PS3xn2HlB_EI2o2MOu2IRguZ5k.asa (hash: DdJ9Ve9Dta4cddkV96/sbiGA4xK8D4nCSE99B4jzPGw=)
2: J9QGnis6k_cQuUMOpksNXsQXP80.crl (hash: 4tFxWBZcvl/Z9ubai/tMqbbBL5T30Q39OFua0Q7W0uI=)
3: kJEm8FnSW7mVLY5IWWP6qEWfx9E.roa (hash: Ej+aimb9neSZBoIZ2FZPgurRvFvkfzoPExucJgSd/L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9QGnis6k_cQuUMOpksNXsQXP80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:47:71:cb:03:69:76:33:e9:69:c8:7c:e7:a3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d4069e2b3a93f710b9430ea64b0d5ec4173fcd
Validity
Not Before: Jul 28 12:01:50 2026 GMT
Not After : Jul 29 12:01:50 2026 GMT
Subject: CN=a8d6f8aded556b0249e9b0c6bb137968dcf9f55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c7:18:f0:58:aa:2b:fc:76:e3:22:cd:e5:b3:
da:7f:c2:a1:d4:b4:05:3e:56:e3:7c:4d:db:b5:92:
de:7f:c6:83:40:59:6e:4e:6e:aa:c5:7b:c7:50:e6:
76:e8:6f:38:38:80:cf:fb:4e:01:72:5a:f9:3e:ab:
ac:67:90:d3:7a:eb:60:8a:76:23:6d:66:12:50:78:
33:73:15:93:4b:b1:19:18:16:d0:1d:17:4a:51:1b:
24:39:d1:50:a5:0f:b2:77:44:ce:7a:59:ad:8b:a9:
89:d5:b5:9b:b9:89:7c:2c:b2:34:40:1c:70:65:77:
09:69:09:7a:e3:b3:7f:e5:23:12:a5:a7:0b:1b:65:
9e:44:0f:23:67:5e:a2:ec:ab:e0:0e:72:ff:4f:af:
3b:10:e6:47:b3:e8:46:a6:b6:46:f7:e2:60:e1:50:
72:a0:c8:6e:9c:33:35:8e:84:4e:60:8c:1b:66:d1:
2f:c4:25:3e:4a:4d:2f:d1:c7:66:9b:f8:14:99:0b:
36:33:b4:26:72:41:53:7a:2e:e7:3e:bf:5f:77:e3:
b5:41:74:7a:00:2e:5d:f6:97:c7:65:64:66:f1:cd:
9b:a0:fb:83:40:72:d1:2d:6e:a1:82:ee:c6:6c:43:
df:b6:6b:c6:99:eb:b4:af:9c:28:df:f3:16:6f:9d:
24:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D6:F8:AD:ED:55:6B:02:49:E9:B0:C6:BB:13:79:68:DC:F9:F5:5D
X509v3 Authority Key Identifier:
keyid:27:D4:06:9E:2B:3A:93:F7:10:B9:43:0E:A6:4B:0D:5E:C4:17:3F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9QGnis6k_cQuUMOpksNXsQXP80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f3:cc:47:49:7d:9c:9d:aa:5a:ec:8b:dc:8e:bc:bb:da:53:
bc:fd:59:05:29:1b:fd:3a:7a:61:07:e6:e7:65:2d:0a:a0:a0:
b7:1e:e4:8f:7e:02:bd:bc:53:96:46:38:43:b0:47:07:39:a0:
59:10:88:60:72:e7:7c:08:d2:61:46:46:2d:a7:67:53:5c:ca:
61:45:47:84:48:02:6d:b2:99:1d:f3:b6:0c:4d:4a:29:28:08:
23:23:94:b6:95:13:4c:c3:c4:e4:4f:d8:d4:28:da:b4:fa:af:
85:c6:f5:ea:45:14:8d:f8:9f:f6:84:ea:51:39:00:0a:29:51:
56:ee:fc:85:25:ad:72:3a:66:2a:37:df:61:4d:2e:27:75:d0:
f3:e8:fe:8c:81:a6:f1:63:db:ef:93:b8:a5:27:c4:73:8b:35:
e2:f0:15:82:c3:19:c8:c1:36:5d:59:55:7e:ad:64:8b:1b:97:
0c:88:38:50:68:18:80:26:a6:d4:61:37:37:0b:4f:90:92:e4:
51:df:41:58:ca:7f:12:b9:71:d1:5a:57:3c:bc:72:89:5e:60:
66:8f:1a:5a:53:dd:68:e7:35:61:18:b9:cb:03:f7:0a:fe:a2:
7e:0e:a2:dd:1e:1d:12:f2:81:c4:44:f9:fd:d6:d3:50:56:44:
2d:41:c7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:38:54 2026 by rpki-client