Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
File: J7jb2X3kzUBZtS5RPc81zTgaMrM.mft (raw, json)
Hash identifier: dVM0DUV4RMUWvk0M+JZMCpWoCJxr35dpy6PzZxQ5u5o=
Subject key identifier: 26:6E:B4:E7:3A:D3:F1:00:51:BD:18:89:50:1A:D6:94:E2:93:17:9C
Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
Certificate issuer: /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Certificate serial: 019D9E8857F7995C716A861A031F2F33DDC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
Manifest number: 119E
Signing time: Sat 18 Apr 2026 03:00:28 +0000
Manifest this update: Sat 18 Apr 2026 03:00:28 +0000
Manifest next update: Sun 19 Apr 2026 03:00:28 +0000
Files and hashes: 1: 0oxdyMukMZaAGBeo9l9rFsh78pk.roa (hash: DX6ZwX+iC1cN81KUv6aS7NPJaf7Awa86RPypXOmFS5E=)
2: J7jb2X3kzUBZtS5RPc81zTgaMrM.crl (hash: 4TuRjw5Iqd7tYmcyBr+rz7iUWzckiM2QKoN07iacOOY=)
3: dyVWHuwmCwNemfhA3NEDaxJ2sdw.roa (hash: Q8NYEk98UWxN0ux4Y6DtAD9386w6kojLNf1xUJ5/UcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:88:57:f7:99:5c:71:6a:86:1a:03:1f:2f:33:dd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Validity
Not Before: Apr 18 03:00:28 2026 GMT
Not After : Apr 19 03:00:28 2026 GMT
Subject: CN=266eb4e73ad3f10051bd1889501ad694e293179c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:f5:42:a4:e0:c4:bf:32:fd:1d:a7:62:8d:
b5:82:09:9b:9b:1d:04:01:1e:9b:af:7b:09:db:39:
71:e9:dc:2d:40:e6:ec:8b:d4:de:eb:0f:32:d7:b9:
41:4b:bb:00:ea:03:fd:c7:20:c4:79:65:6f:e1:3c:
ee:ce:93:ba:a2:23:ea:11:d6:de:cc:7d:35:5e:49:
56:04:7f:d9:0c:f2:c1:1f:71:8d:06:38:d3:57:6e:
63:f6:0f:36:d3:55:c8:a2:13:06:7a:dd:45:66:bd:
24:63:7e:eb:56:2d:0c:8b:d3:d1:93:cc:96:ee:1e:
99:ab:c9:2f:d3:29:2c:40:ca:cf:20:c1:a7:ca:94:
d9:7c:2d:64:15:76:a7:ef:e0:4b:ac:09:9b:13:6b:
e9:17:b6:56:ec:40:32:e2:86:80:64:4c:4c:d4:32:
cd:7d:33:fc:35:bc:36:66:36:d8:e9:d0:06:95:99:
34:b2:27:e5:b7:18:a5:e3:30:46:5a:c0:25:59:7e:
fc:72:55:f6:d9:d0:cd:b4:d4:63:b2:6e:c7:9a:20:
82:f9:54:cd:bb:a4:7b:2b:fd:70:6c:a3:ae:63:1a:
33:59:15:59:4a:3a:b4:b7:8a:82:6c:f0:2b:4c:bd:
d4:5c:41:1f:d6:1b:99:76:b3:34:ba:39:b3:30:6a:
cb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6E:B4:E7:3A:D3:F1:00:51:BD:18:89:50:1A:D6:94:E2:93:17:9C
X509v3 Authority Key Identifier:
keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:f0:a4:aa:69:01:d1:37:13:d8:a5:fa:d1:26:71:eb:97:0f:
84:db:6f:db:28:e2:9c:62:4c:58:17:33:68:d0:9c:70:88:a0:
9f:4b:08:2d:02:24:34:cf:97:c2:7d:bb:f8:b9:1b:85:e1:9a:
05:03:92:8c:1f:5d:74:58:22:57:17:82:c6:5e:aa:e5:92:76:
ca:19:bb:d5:a3:5a:07:91:db:8a:e8:c5:0f:19:db:eb:01:c5:
99:4b:fa:94:c9:0d:3d:8f:be:ff:19:44:5f:8f:a8:98:28:d6:
fa:da:f2:9b:e3:27:6d:e8:84:c4:48:84:d6:eb:f0:33:b2:0a:
0d:d2:28:0d:46:e0:a4:0d:30:79:38:b6:f6:69:3d:ca:86:93:
26:36:d2:aa:b0:56:21:05:22:b8:e6:fe:e7:25:47:3d:3d:c1:
72:9e:fb:9c:79:52:a0:1b:a7:f6:d2:e9:b1:77:cc:4e:2a:00:
e3:9f:63:93:1b:0c:b5:92:f6:ac:ff:d9:e8:fb:68:53:6e:99:
82:f0:64:d5:59:6f:e0:31:b5:7c:5e:9f:a9:4d:06:3c:f6:89:
66:f7:b3:c9:7b:f7:19:3e:f5:1e:4a:04:16:81:69:76:eb:39:
a0:b7:1c:76:86:d3:aa:d0:ac:e7:30:29:05:5f:c8:de:54:ab:
aa:6d:f1:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2eiFf3mVxxaoYaAx8vM93AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YjhkYmQ5N2RlNGNkNDA1OWI1MmU1MTNkY2YzNWNkMzgx
YTMyYjMwHhcNMjYwNDE4MDMwMDI4WhcNMjYwNDE5MDMwMDI4WjAzMTEwLwYDVQQD
EygyNjZlYjRlNzNhZDNmMTAwNTFiZDE4ODk1MDFhZDY5NGUyOTMxNzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4f1QqTgxL8y/R2nYo21ggmbmx0E
AR6br3sJ2zlx6dwtQObsi9Te6w8y17lBS7sA6gP9xyDEeWVv4TzuzpO6oiPqEdbe
zH01XklWBH/ZDPLBH3GNBjjTV25j9g8201XIohMGet1FZr0kY37rVi0Mi9PRk8yW
7h6Zq8kv0yksQMrPIMGnypTZfC1kFXan7+BLrAmbE2vpF7ZW7EAy4oaAZExM1DLN
fTP8Nbw2ZjbY6dAGlZk0sifltxil4zBGWsAlWX78clX22dDNtNRjsm7HmiCC+VTN
u6R7K/1wbKOuYxozWRVZSjq0t4qCbPArTL3UXEEf1huZdrM0ujmzMGrLLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZutOc60/EAUb0YiVAa1pTikxecMB8GA1UdIwQY
MBaAFCe429l95M1AWbUuUT3PNc04GjKzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84NTkyOGYtNWYxOS00MWQ5LTgyMzgt
NWM1NGNkYWQxOWYxLzEvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy84NTkyOGYtNWYxOS00MWQ5LTgyMzgtNWM1NGNkYWQxOWYx
LzEvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6fCkqmkB
0TcT2KX60SZx65cPhNtv2yjinGJMWBczaNCccIign0sILQIkNM+Xwn27+LkbheGa
BQOSjB9ddFgiVxeCxl6q5ZJ2yhm71aNaB5HbiujFDxnb6wHFmUv6lMkNPY++/xlE
X4+omCjW+trym+MnbeiExEiE1uvwM7IKDdIoDUbgpA0weTi29mk9yoaTJjbSqrBW
IQUiuOb+5yVHPT3Bcp77nHlSoBun9tLpsXfMTioA459jkxsMtZL2rP/Z6PtoU26Z
gvBk1Vlv4DG1fF6fqU0GPPaJZvezyXv3GT71HkoEFoFpdus5oLccdobTqtCs5zAp
BV/I3lSrqm3xoA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 08:54:38 2026 by rpki-client