Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
File: J-cRzjQCblevMpDH3izSHcZx4Pw.mft (raw, json)
Hash identifier: URjyUuaK2ojRdVree+w4TkRgkprZ46UBahes1bNJxKk=
Subject key identifier: 2E:9A:5A:C7:CA:19:3C:6C:81:00:3E:B2:D1:29:1A:9D:91:FF:E2:09
Authority key identifier: 27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
Certificate issuer: /CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Certificate serial: 01A0E061A3CCD01EB4A4463CEEC926187704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
Manifest number: 1A77
Signing time: Sun 27 Sep 2026 01:01:30 +0000
Manifest this update: Sun 27 Sep 2026 01:01:30 +0000
Manifest next update: Mon 28 Sep 2026 01:01:30 +0000
Files and hashes: 1: J-cRzjQCblevMpDH3izSHcZx4Pw.crl (hash: GDgWBtPrgjU7eTTjzxdAhv5ug5cfnQz1DMsOXQceEWo=)
2: _n04tbHejANq8Ug_J-BPx0EeIOY.roa (hash: XtKxscitCuMv9T8d0VZ6njYDJbqu3csyAljLvKPr+l0=)
3: y_SBLUhzBtU72NxeeIak4RRDnEU.roa (hash: x10yvxp0EebXuA7j4nfdDlIV0rhNw6PWqLB8KW20YOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:a3:cc:d0:1e:b4:a4:46:3c:ee:c9:26:18:77:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Validity
Not Before: Sep 27 01:01:30 2026 GMT
Not After : Sep 28 01:01:30 2026 GMT
Subject: CN=2e9a5ac7ca193c6c81003eb2d1291a9d91ffe209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1a:cf:b4:08:ae:bc:e3:98:63:ce:db:b4:c6:
bf:2a:d2:38:dd:cd:19:d8:aa:e2:5d:ab:fa:89:f6:
9b:a1:47:0d:6a:2d:ad:ec:af:1d:9a:93:0c:b0:bf:
c3:f3:d0:d3:cf:87:21:97:bd:b7:21:e3:4d:3d:af:
04:39:35:47:e6:aa:2c:da:d4:68:68:57:32:bb:ec:
da:dc:b6:63:22:23:19:c0:9c:10:ae:d8:c6:9c:31:
de:af:56:f8:db:f5:09:dc:66:77:54:9e:bc:0a:e0:
86:b1:4d:a0:da:a6:22:eb:fb:48:85:e7:f1:5e:0e:
79:0a:ce:3e:7f:c9:59:f9:8b:df:7e:a1:83:62:55:
0b:e4:19:11:83:96:79:a5:61:a2:f5:ec:9c:7a:b2:
b9:12:4b:23:c4:8f:00:a3:67:5c:e7:92:28:d8:00:
21:e0:32:7c:39:3b:58:b0:72:57:01:df:fd:3f:75:
28:6c:de:3c:eb:44:f1:1e:62:c6:3c:8f:9b:15:13:
da:47:1a:73:f6:15:08:27:f8:ad:92:f2:03:14:ad:
6f:d8:9d:73:5d:42:9d:a4:84:7b:ca:1c:ae:3f:88:
1e:3d:4a:6b:3b:95:8d:b3:96:4f:70:ae:0d:cb:83:
f2:fe:56:b3:75:dc:94:91:7a:1f:b6:f2:cd:d9:70:
de:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9A:5A:C7:CA:19:3C:6C:81:00:3E:B2:D1:29:1A:9D:91:FF:E2:09
X509v3 Authority Key Identifier:
keyid:27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:57:37:dd:ed:f3:c6:ed:b6:36:e0:9c:74:6f:11:85:64:34:
47:89:5d:7a:f3:23:9a:20:bf:ab:d7:7a:2a:15:15:d2:a6:ec:
d9:16:74:08:29:65:a1:da:23:b5:c6:e0:f3:c1:aa:f0:fe:6c:
8a:f3:7c:8b:b5:87:c0:55:38:d8:21:c0:b1:17:d3:70:5f:72:
3a:bb:c6:6d:7f:c3:0f:ee:3f:fa:05:89:19:4a:32:9f:90:de:
ba:10:4a:48:8d:79:c1:b5:78:89:58:58:29:26:02:bb:2c:00:
2a:61:e7:3b:2d:dd:13:f3:10:6d:fd:db:ea:31:36:16:79:a0:
01:6c:50:2a:42:37:39:d5:35:a2:42:fc:24:8b:4b:bb:00:b9:
ef:e7:60:9c:c2:2f:35:37:df:e5:26:dd:b8:7e:58:79:39:f7:
e1:ae:54:1a:6f:44:19:93:b3:26:8c:c3:1b:93:b0:a2:e1:9d:
c3:50:b7:0c:c6:ef:fa:cb:94:8a:5a:f8:47:49:26:47:6e:b6:
73:7a:55:1c:bb:ac:7d:ed:b1:80:97:6f:78:29:f2:bf:2e:1b:
c9:37:b9:af:df:6f:af:02:10:fc:2a:4c:53:d4:30:1f:97:2d:
5b:92:be:f5:58:29:b0:6f:3a:a1:eb:55:9d:77:af:93:02:ab:
96:19:e0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:40:42 2026 by rpki-client