Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
File: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft (raw, json)
Hash identifier: DIaeHADD0rn3tLx0/WCzDiXv6EDgQ7eLuW5hI4dC1ww=
Subject key identifier: 66:E3:65:F0:3F:17:95:B8:CC:B5:C9:60:77:08:5E:36:18:A1:31:02
Authority key identifier: AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
Certificate issuer: /CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Certificate serial: 01A1DF4CC71B7A62EC8B8355E6709FD51997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
Manifest number: 0DC1
Signing time: Sun 15 Nov 2026 13:01:53 +0000
Manifest this update: Sun 15 Nov 2026 13:01:53 +0000
Manifest next update: Mon 16 Nov 2026 13:01:53 +0000
Files and hashes: 1: cFj2gabjb2A6OS2M4OWiTy7sjlY.roa (hash: c2wHgi8z7Wquh1Yiowi4MCoX8zsu06SPgPbyIoYnmLY=)
2: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl (hash: kNeAulS3gvkX9kXy5GMvJ5ArFv2Z0lYO8UWJc0ybNdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:c7:1b:7a:62:ec:8b:83:55:e6:70:9f:d5:19:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Validity
Not Before: Nov 15 13:01:53 2026 GMT
Not After : Nov 16 13:01:53 2026 GMT
Subject: CN=66e365f03f1795b8ccb5c96077085e3618a13102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:7f:22:80:b9:a4:76:a5:2a:a7:14:1b:f6:
7b:f8:c4:c7:81:b6:44:99:8e:e1:22:8c:22:b5:76:
a1:9f:32:89:de:b7:30:a7:99:51:6b:92:b9:6f:25:
3f:6d:39:bc:20:d1:9d:65:2f:d1:a2:e3:b4:15:e2:
e2:c2:4d:d7:6b:e7:e4:c3:b3:d1:1f:28:91:7f:f1:
cd:0c:f3:07:3a:6b:92:1b:3c:d7:c8:af:0f:f1:6c:
03:c6:e7:e2:35:48:31:21:7a:0d:1b:57:94:dc:cb:
c1:91:5a:1e:b2:7f:19:ac:00:2c:40:19:6f:dd:16:
a3:6e:04:ab:20:11:a7:d5:49:c1:a3:8e:16:31:f7:
85:d0:9f:54:3d:f6:4d:47:dd:84:4d:ec:b7:81:01:
ca:d2:85:7f:36:12:83:e7:fa:c7:33:e3:bc:3a:fd:
10:f1:dc:be:86:08:b3:b3:2e:ed:a6:a2:03:cb:c2:
a5:91:66:01:9f:62:88:bc:cf:79:ae:f6:4d:62:25:
fd:8f:df:f7:32:80:ac:0a:6f:d5:d9:bb:11:ad:c5:
94:81:12:fb:6d:9d:24:fe:3a:a8:e2:c7:ab:d3:a5:
37:04:b1:6b:68:5d:3f:83:b5:56:65:1f:1f:bf:8b:
42:ed:22:ad:2a:4c:f7:0d:dc:c6:2a:6b:89:56:95:
85:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E3:65:F0:3F:17:95:B8:CC:B5:C9:60:77:08:5E:36:18:A1:31:02
X509v3 Authority Key Identifier:
keyid:AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8e:5a:61:66:14:12:b0:dc:c2:5c:be:93:80:52:5b:60:06:
1d:a5:21:7b:4c:e0:5c:f4:26:b5:dd:f3:00:9c:45:1f:d1:9f:
2a:3c:7f:3a:d8:d3:13:0a:6b:04:da:54:64:2f:07:83:a1:94:
c6:7e:8b:e3:ae:a4:1e:af:9d:8d:c0:bf:9e:d4:d5:53:d0:a2:
ee:33:8c:61:9d:fc:fc:b5:21:6c:5f:b4:76:61:ff:fe:da:89:
c8:34:51:0a:76:3c:2f:09:75:35:c0:4b:50:74:fd:2f:23:25:
64:d8:d8:09:2a:70:c6:a5:71:6e:fd:1b:5e:79:8d:ac:f3:cf:
22:da:46:91:7b:56:37:a9:c8:c7:20:30:c6:a7:7f:e1:3a:fe:
ef:a0:6c:14:7d:04:9f:91:10:a0:7f:d2:69:c1:35:19:56:4a:
1d:31:64:b1:a9:7c:43:25:67:c5:da:20:3c:c7:71:43:ff:bf:
f7:a5:d6:35:b4:a5:4d:23:f2:de:52:45:a6:18:be:e1:69:cd:
c5:4f:b4:3c:ff:75:fa:da:0b:cb:b8:f6:6a:22:18:22:55:a1:
28:b8:e4:3b:b9:1a:48:6b:b4:30:a6:3b:bd:f9:cf:9d:15:a1:
3c:20:22:25:97:36:ff:9e:3d:0e:49:f2:58:a9:cf:43:d3:91:
c1:5d:ec:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfTMcbemLsi4NV5nCf1RmXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOWJiZjlmNjIzMzEzZWIyYjE4MjczNTBiNDVhOWJhMWZk
OWRhNWYwHhcNMjYxMTE1MTMwMTUzWhcNMjYxMTE2MTMwMTUzWjAzMTEwLwYDVQQD
Eyg2NmUzNjVmMDNmMTc5NWI4Y2NiNWM5NjA3NzA4NWUzNjE4YTEzMTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbF/IoC5pHalKqcUG/Z7+MTHgbZE
mY7hIowitXahnzKJ3rcwp5lRa5K5byU/bTm8INGdZS/RouO0FeLiwk3Xa+fkw7PR
HyiRf/HNDPMHOmuSGzzXyK8P8WwDxufiNUgxIXoNG1eU3MvBkVoesn8ZrAAsQBlv
3RajbgSrIBGn1UnBo44WMfeF0J9UPfZNR92ETey3gQHK0oV/NhKD5/rHM+O8Ov0Q
8dy+hgizsy7tpqIDy8KlkWYBn2KIvM95rvZNYiX9j9/3MoCsCm/V2bsRrcWUgRL7
bZ0k/jqo4ser06U3BLFraF0/g7VWZR8fv4tC7SKtKkz3DdzGKmuJVpWFgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbjZfA/F5W4zLXJYHcIXjYYoTECMB8GA1UdIwQY
MBaAFKybv59iMxPrKxgnNQtFqbof2dpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jN2I1NzMtMjc2OC00NzNjLWE1YzQt
NTdlZjdmZWU3NTljLzEvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9jN2I1NzMtMjc2OC00NzNjLWE1YzQtNTdlZjdmZWU3NTlj
LzEvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACo5aYWYU
ErDcwly+k4BSW2AGHaUhe0zgXPQmtd3zAJxFH9GfKjx/OtjTEwprBNpUZC8Hg6GU
xn6L466kHq+djcC/ntTVU9Ci7jOMYZ38/LUhbF+0dmH//tqJyDRRCnY8Lwl1NcBL
UHT9LyMlZNjYCSpwxqVxbv0bXnmNrPPPItpGkXtWN6nIxyAwxqd/4Tr+76BsFH0E
n5EQoH/SacE1GVZKHTFksal8QyVnxdogPMdxQ/+/96XWNbSlTSPy3lJFphi+4WnN
xU+0PP91+toLy7j2aiIYIlWhKLjkO7kaSGu0MKY7vfnPnRWhPCAiJZc2/549Dkny
WKnPQ9ORwV3shA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:39:46 2026 by rpki-client