Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
File: J7jb2X3kzUBZtS5RPc81zTgaMrM.mft (raw, json)
Hash identifier: QfC3h8SWPZa+K0uWKaXOG2JUVHrqu1/sK9J13Q2z37w=
Subject key identifier: FD:8D:A5:3B:E5:E9:3C:03:93:2B:12:31:2D:9E:2D:A4:DE:C2:E8:0F
Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
Certificate issuer: /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Certificate serial: 019CAD2263610FE01B452CA178E8E896F78D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
Manifest number: 1121
Signing time: Mon 02 Mar 2026 06:00:37 +0000
Manifest this update: Mon 02 Mar 2026 06:00:37 +0000
Manifest next update: Tue 03 Mar 2026 06:00:37 +0000
Files and hashes: 1: 0oxdyMukMZaAGBeo9l9rFsh78pk.roa (hash: DX6ZwX+iC1cN81KUv6aS7NPJaf7Awa86RPypXOmFS5E=)
2: J7jb2X3kzUBZtS5RPc81zTgaMrM.crl (hash: mhqlwY3bn7awrmLbxD+ke45TeHe+BR6vPtc3VuMpOkA=)
3: dyVWHuwmCwNemfhA3NEDaxJ2sdw.roa (hash: Q8NYEk98UWxN0ux4Y6DtAD9386w6kojLNf1xUJ5/UcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:63:61:0f:e0:1b:45:2c:a1:78:e8:e8:96:f7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Validity
Not Before: Mar 2 06:00:37 2026 GMT
Not After : Mar 3 06:00:37 2026 GMT
Subject: CN=fd8da53be5e93c03932b12312d9e2da4dec2e80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0e:62:4f:7b:25:aa:13:49:cc:5c:34:7b:6a:
67:35:47:ad:bf:df:7c:89:b4:87:18:1b:22:d2:e5:
52:5c:8c:22:19:d1:1e:08:24:a9:09:8b:ba:86:de:
3d:bf:a6:b7:e6:10:b8:97:3e:09:27:8e:17:7b:53:
b3:22:38:a2:04:84:5c:ee:b9:2d:e8:78:94:78:b7:
35:63:26:e3:ac:93:ef:40:06:25:d7:0a:8d:84:7e:
12:d9:34:e7:c6:d5:aa:61:0a:7d:fc:57:58:b7:40:
09:3f:0e:0d:48:ee:6d:b4:3b:0a:f6:22:a0:54:96:
0d:f6:7a:af:a6:97:c9:6b:d5:0c:c3:6d:e3:b9:5c:
7b:06:f4:c7:25:a2:50:2d:26:9d:5c:b3:25:3c:9f:
6e:b7:b4:d5:7b:b2:1e:90:ae:58:4f:f9:e2:88:b2:
c0:bc:d7:5e:de:ea:81:ba:2c:db:87:33:76:77:66:
22:b4:56:9a:a6:21:db:21:31:b3:4c:0b:ae:c5:b9:
58:53:11:cc:cc:c1:a0:f4:ea:9f:6c:ca:38:c0:63:
14:fd:f8:90:28:b1:ba:4e:c5:16:c3:28:f7:26:12:
83:10:04:51:75:4a:08:8b:8c:29:0d:00:88:06:f2:
0c:8a:a9:52:ee:b0:82:0b:ac:81:60:90:30:f6:b2:
9e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8D:A5:3B:E5:E9:3C:03:93:2B:12:31:2D:9E:2D:A4:DE:C2:E8:0F
X509v3 Authority Key Identifier:
keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:44:88:8c:44:6d:5e:2e:4d:80:96:2b:7a:37:a4:89:b2:d7:
15:c8:b6:19:dc:c7:6c:d7:27:b1:e4:9d:9e:05:0d:47:f8:9e:
97:0f:ab:28:a2:a7:22:eb:2f:c7:ab:08:43:ed:aa:18:7a:25:
b9:fb:99:7c:05:ee:0b:0e:ac:ae:29:3b:3a:41:9b:e6:d4:19:
73:4e:56:5f:6a:76:9b:68:16:20:b3:07:bd:b1:a7:44:1c:b7:
85:7a:94:2b:36:a1:ed:dd:3b:03:80:cb:6b:4b:b4:8c:a7:48:
d9:28:61:08:67:d3:f5:8a:6b:bc:39:90:f0:35:ac:d6:93:ad:
37:7e:e4:d3:30:ec:70:93:eb:3e:ef:0e:21:c4:38:26:3a:0a:
7a:33:f3:96:e8:de:80:cf:c2:8f:73:8e:56:4a:64:cb:96:61:
89:df:b4:39:e4:19:86:bf:29:bf:d1:93:a1:c1:d7:4d:54:e6:
de:20:ae:c2:31:55:86:c2:8e:ce:14:e7:8b:97:a6:e6:75:e2:
60:7e:8e:07:a1:7f:24:2a:d9:a8:e8:58:d3:c4:d5:c0:eb:66:
95:23:9e:d3:d9:59:5d:73:05:88:0f:d7:e0:9b:04:32:f8:e5:
f9:ac:4e:08:b1:d8:8a:61:ab:14:66:c2:df:9f:1e:ab:03:3b:
34:9c:2e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:05:48 2026 by rpki-client