Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
File: J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft (raw, json)
Hash identifier: XoIifgvUAgy8NRj29waQ23mxqr8yPBaJA3zX3SN7LM8=
Subject key identifier: 0C:45:D1:B9:01:5F:F4:66:9E:6E:38:6F:5A:FD:71:E2:65:5E:61:3A
Authority key identifier: 27:FD:CE:9D:B6:AF:9B:81:33:A3:26:17:EE:F4:E0:46:44:4E:FD:D4
Certificate issuer: /CN=27fdce9db6af9b8133a32617eef4e046444efdd4
Certificate serial: 019CAAC6D9A4CE8FB2B62B68C579B36AD45C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
Manifest number: 09BC
Signing time: Sun 01 Mar 2026 19:01:24 +0000
Manifest this update: Sun 01 Mar 2026 19:01:24 +0000
Manifest next update: Mon 02 Mar 2026 19:01:24 +0000
Files and hashes: 1: J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl (hash: gTUCbwFwBDfhgury0Wnq87rSYipU3qgYbpn+L/SPXlc=)
2: pG3Dfbd9hX3TvxsYc8iEA-E9yvU.roa (hash: RKfqaHBHufPXQ+FRBmatkD236oqFKLw1y5df/WqN564=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:d9:a4:ce:8f:b2:b6:2b:68:c5:79:b3:6a:d4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27fdce9db6af9b8133a32617eef4e046444efdd4
Validity
Not Before: Mar 1 19:01:24 2026 GMT
Not After : Mar 2 19:01:24 2026 GMT
Subject: CN=0c45d1b9015ff4669e6e386f5afd71e2655e613a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d0:e9:36:22:b7:4b:35:ec:ac:42:c6:40:08:
78:ff:55:cb:de:79:cd:06:6a:21:a9:3e:b6:e1:1f:
86:77:05:f9:07:f8:9d:2b:f4:f5:5c:92:72:e4:af:
eb:0c:e8:d1:ee:49:92:0a:3d:ac:81:3b:37:e0:8a:
27:15:6e:12:22:f0:74:d1:72:f6:bd:90:c7:5d:cb:
2d:13:3d:c5:5f:f9:81:e5:94:10:97:9c:37:fb:23:
42:eb:aa:cf:a5:7a:ce:4d:60:66:39:65:ac:fd:a3:
69:1a:ca:c6:6e:07:b1:97:04:8a:de:d4:77:6a:5d:
32:69:e3:8e:05:e0:6c:60:51:e4:b0:86:08:f1:87:
ff:ec:54:e6:ea:b9:c2:70:37:8c:42:e4:0c:55:c7:
8f:d7:93:de:dc:dc:cb:2c:c0:80:a6:5d:03:d7:20:
01:a6:c7:0c:f6:c7:bc:03:ec:01:bb:57:b0:97:9d:
a5:54:11:f6:6d:99:bd:fc:7b:1e:12:94:d1:8b:9d:
64:c1:df:65:90:a9:6c:09:34:37:9d:e3:84:26:95:
aa:e2:e1:4e:18:58:7f:2d:61:82:e8:a0:1e:1d:1d:
25:7d:03:0f:93:d0:ba:7c:15:dd:9d:71:9c:1f:1e:
18:11:3e:6e:fe:44:5d:ca:36:ff:d3:27:d5:68:f3:
f6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:45:D1:B9:01:5F:F4:66:9E:6E:38:6F:5A:FD:71:E2:65:5E:61:3A
X509v3 Authority Key Identifier:
keyid:27:FD:CE:9D:B6:AF:9B:81:33:A3:26:17:EE:F4:E0:46:44:4E:FD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f1:47:71:9f:31:ab:70:e8:21:b4:97:22:68:ee:80:76:30:
ff:37:9f:a2:61:6c:1f:2e:a1:cb:aa:9b:b7:27:c9:f9:1e:8e:
0b:6d:65:51:f9:0a:c4:2b:65:42:2a:71:82:da:6a:56:6f:40:
4d:89:63:23:1f:68:98:fc:7d:4e:87:93:1b:4b:da:2a:df:7b:
14:c8:31:ae:04:65:4c:dd:d3:ee:ee:02:99:ab:81:bc:31:f7:
0f:cc:09:af:24:1a:ae:db:e3:7a:1b:ec:45:cb:ee:ae:d8:15:
f5:26:ff:be:75:ab:0a:83:ff:73:30:c6:43:8a:18:82:e7:4f:
87:2e:b0:46:67:1e:6f:93:f7:83:14:75:27:c0:a6:4c:34:9e:
9b:a5:3a:76:e8:0b:c8:25:48:03:67:1d:50:af:fd:50:a7:1e:
1a:aa:ae:fe:a5:bb:d1:a8:dd:4f:68:ff:98:15:5c:1d:c7:06:
0a:1a:1d:43:0e:bd:56:a9:28:b1:41:09:c8:98:b0:0f:df:5a:
9d:68:95:14:bf:7b:66:0f:d1:37:ae:3e:72:52:eb:f1:cc:a2:
1b:82:fc:2b:39:35:5c:47:a3:06:20:fd:69:89:e2:fa:6c:7a:
58:bf:65:80:00:d6:a0:bb:bf:5e:f8:3b:8c:21:71:b9:16:c0:
7d:f6:f5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:33 2026 by rpki-client