Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
File: J4YXdA7NlbcE2pel-eU8AxFEQms.mft (raw, json)
Hash identifier: LEZ4ajvrJ8yTIiR0itCb7igaBAOIJtQNCijv7SWSx3w=
Subject key identifier: D3:56:A6:E4:22:11:42:F5:BE:90:EA:4F:8B:6D:B3:2B:8B:D2:87:4B
Authority key identifier: 27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B
Certificate issuer: /CN=278617740ecd95b704da97a5f9e53c031144426b
Certificate serial: 01A0EC2EA75F4794371079EB46FF68AED1DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
Manifest number: 1623
Signing time: Tue 29 Sep 2026 08:01:15 +0000
Manifest this update: Tue 29 Sep 2026 08:01:15 +0000
Manifest next update: Wed 30 Sep 2026 08:01:15 +0000
Files and hashes: 1: J4YXdA7NlbcE2pel-eU8AxFEQms.crl (hash: EY+iMfHeECVB5YS6oIak1V81j2tiP8/3iKtSUb01uK4=)
2: hv5F2fKm7cZ-fqlTGhS4HLwa_Mo.roa (hash: 3e8QQ5wpWIE1xn2kF+A/CiSMbxQICMGVp/zM+nv9PN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:a7:5f:47:94:37:10:79:eb:46:ff:68:ae:d1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278617740ecd95b704da97a5f9e53c031144426b
Validity
Not Before: Sep 29 08:01:15 2026 GMT
Not After : Sep 30 08:01:15 2026 GMT
Subject: CN=d356a6e4221142f5be90ea4f8b6db32b8bd2874b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:75:90:05:24:c0:ad:21:d9:af:e4:7d:f2:7f:
74:c8:ca:cc:10:a7:43:31:ae:5f:df:9d:da:8b:30:
e8:e7:28:28:c4:2c:52:53:d5:41:7c:7f:c2:54:8c:
18:48:59:ec:5f:dc:0b:f1:29:57:ca:e0:57:1b:e6:
94:1a:47:b7:ef:71:d0:3b:59:02:16:18:57:5c:6f:
a9:6e:e9:94:f0:d1:18:4d:a0:bf:88:b1:98:a7:02:
3e:86:24:c2:8d:22:8e:42:80:c5:df:f3:19:2a:95:
39:b4:4a:d6:48:55:17:38:f2:e2:95:5e:bb:b5:3f:
cd:1d:46:80:0e:2a:7f:ec:31:13:c6:0b:1b:7c:09:
0e:5f:35:29:4c:d6:9b:d7:05:a4:b2:9b:93:59:5a:
1b:cb:64:26:99:e2:48:da:59:2f:1c:39:c9:77:94:
18:95:9d:d9:c3:df:a4:ba:7e:2a:e8:6d:39:45:25:
c4:91:30:18:f3:74:55:91:9b:cf:54:5b:16:fa:53:
7c:2e:7d:12:c4:e7:ec:a4:63:a2:d6:f0:9c:59:bf:
4e:ca:5a:17:f5:d6:99:f7:01:ec:b1:f8:30:fa:7e:
b2:64:46:dd:94:e8:65:60:b3:43:36:75:f9:80:26:
1f:e8:52:f1:57:c3:72:7c:3d:ab:e4:9a:90:db:44:
b9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:56:A6:E4:22:11:42:F5:BE:90:EA:4F:8B:6D:B3:2B:8B:D2:87:4B
X509v3 Authority Key Identifier:
keyid:27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:08:67:f5:6d:1d:e7:64:7b:8c:95:50:40:a9:67:99:ad:34:
1d:4d:33:34:56:b3:cc:f3:d1:5d:7a:d0:c6:6b:ec:ac:4a:d1:
75:13:db:be:ee:3e:d5:d6:50:c2:6f:bd:a8:05:b1:cd:14:fa:
3c:81:9e:15:56:18:07:7b:c9:c6:58:fd:7c:27:e6:11:96:b0:
71:8c:77:78:8a:65:33:f6:d6:6b:ec:a2:de:20:40:3c:c2:1e:
73:d2:a7:c4:f3:9d:0b:ff:57:f7:86:eb:c7:6b:4b:66:a5:de:
20:d9:42:60:2a:87:f2:9d:1c:08:91:cd:6d:0f:a0:13:45:ae:
a5:d8:4f:1b:2a:3b:50:cb:c8:89:fd:a3:36:fc:54:66:eb:a4:
51:fb:57:95:3b:1e:b1:9f:3f:f5:4a:6c:cc:69:35:c8:50:c4:
e4:0f:1d:1e:34:0f:cb:00:db:fc:7d:de:04:54:4b:fe:57:d6:
1d:98:3a:43:d2:a2:3e:a1:c1:e1:c5:4b:bd:b7:15:63:f4:a8:
b0:6b:07:79:63:d8:87:34:09:db:bf:fa:12:2a:06:0d:5c:be:
ec:da:84:24:cb:f7:d2:50:95:91:1a:51:3d:71:b3:c3:31:48:
3e:35:6e:af:8b:0a:9b:73:ee:70:74:ab:22:b4:51:9d:0d:25:
44:71:2f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:59:35 2026 by rpki-client