Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
File: d_jn-9SraVB_sf41ea80OlZjkIY.mft (raw, json)
Hash identifier: UfdnP4vWBphxv68W5BIxiCsZEW7BsL1lz9+OJt4rJE8=
Subject key identifier: 24:09:1D:1C:47:95:D5:89:20:25:F0:24:81:DC:2F:3C:B4:BD:09:0F
Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
Certificate issuer: /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Certificate serial: 01A0DA96C2956F3EB7B2DED462C2675FED04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
Manifest number: 1331
Signing time: Fri 25 Sep 2026 22:01:48 +0000
Manifest this update: Fri 25 Sep 2026 22:01:48 +0000
Manifest next update: Sat 26 Sep 2026 22:01:48 +0000
Files and hashes: 1: IM14LBYF8xBAMrWihjQwJhZWTFs.roa (hash: L/LoNTKL0OkWZiTSY3TN85uewDjoeQN9VcIBqy5aAq8=)
2: d_jn-9SraVB_sf41ea80OlZjkIY.crl (hash: th3Ry87h9zUllar0Y5Xm7wyTfxMXGOtRJ2xx9rOpIRA=)
3: meqA3EJ2dk40MOFtOn3KY_3JqZc.roa (hash: PMvWvyZeQ/F56OIn+Hm8HW0sQqsC8sTM1/3A775LAFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:c2:95:6f:3e:b7:b2:de:d4:62:c2:67:5f:ed:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Validity
Not Before: Sep 25 22:01:48 2026 GMT
Not After : Sep 26 22:01:48 2026 GMT
Subject: CN=24091d1c4795d5892025f02481dc2f3cb4bd090f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:80:83:63:6c:55:ba:43:08:9b:7e:69:5e:ce:
f0:1c:2a:06:e8:b1:0e:24:ee:61:95:a0:db:fc:38:
99:b4:78:07:62:9d:9e:6d:3f:35:9c:84:20:80:b9:
b9:81:e9:10:0e:10:23:4d:8b:27:6e:5d:18:ba:59:
c0:ba:39:87:48:8e:a9:56:40:fb:33:72:a8:7a:32:
93:b4:b0:8c:e0:b0:49:7f:9a:fd:e8:c2:ae:20:ae:
eb:19:fe:1d:6e:3b:da:55:f4:dd:ae:e4:d2:0c:58:
81:94:04:a4:72:45:f0:db:36:54:19:31:92:c2:c0:
25:15:a8:08:e6:2c:fa:1a:ff:3a:20:06:ab:a7:67:
d6:d5:2c:17:4e:bc:13:c3:9a:ea:28:8c:cb:94:d5:
af:f5:b7:4d:47:0b:a7:d3:e5:5e:07:72:49:2f:b5:
1c:02:af:cc:06:1f:a6:59:92:2e:2d:97:4e:06:a6:
59:66:dd:85:91:8e:2b:0b:34:32:86:83:3c:fc:87:
1f:42:4f:51:3b:ea:3f:a4:2e:93:d6:98:89:2a:1c:
27:9b:45:18:bc:36:0c:ce:a5:41:79:91:25:86:c3:
b4:e6:54:ba:91:66:7d:f3:1d:d2:0e:87:e8:40:c0:
9d:b7:cf:b7:70:10:b2:08:2d:49:ee:6b:f0:e2:57:
1d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:09:1D:1C:47:95:D5:89:20:25:F0:24:81:DC:2F:3C:B4:BD:09:0F
X509v3 Authority Key Identifier:
keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:65:d6:6d:ef:75:57:13:f6:f8:ef:05:e9:05:71:ce:b2:ee:
53:34:87:bd:4f:56:96:cf:7d:c5:4d:b6:8e:9b:96:a5:9a:4a:
81:96:f4:9f:ca:87:5f:1d:61:ac:3f:cd:c6:e9:69:0b:64:a6:
b7:50:60:95:b4:76:f4:98:58:92:fb:64:af:96:9e:15:91:27:
60:9e:70:91:29:80:1e:51:cb:88:46:40:70:66:28:f0:0a:ad:
2d:b3:2f:ca:1b:c9:1c:6c:f2:ec:a8:80:a8:69:9a:9b:02:b9:
1a:c8:2d:61:0a:a1:44:5b:1a:03:15:f0:16:be:81:e4:39:75:
74:21:bb:91:0a:05:b2:61:a2:eb:a8:fe:31:db:09:d1:96:d3:
ce:10:0a:b4:1c:e0:e7:ea:9b:10:8d:b2:97:c9:0e:37:fc:26:
73:79:89:4e:87:d1:18:ec:0a:9e:2b:2c:13:97:8a:a1:1f:4e:
55:59:78:03:c0:9d:ce:2f:59:a5:73:a5:82:7b:5f:88:f8:ea:
8c:47:95:f9:08:12:29:80:9a:51:65:d6:8b:57:cb:ed:ef:50:
32:27:cb:8e:cf:ae:8a:21:66:be:a9:1f:88:3a:bf:a3:d5:3d:
f0:e7:24:0a:fe:17:ac:ab:60:f6:72:03:71:2f:b2:d0:9e:05:
8f:6b:bf:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDalsKVbz63st7UYsJnX+0EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjhlN2ZiZDRhYjY5NTA3ZmIxZmUzNTc5YWYzNDNhNTY2
MzkwODYwHhcNMjYwOTI1MjIwMTQ4WhcNMjYwOTI2MjIwMTQ4WjAzMTEwLwYDVQQD
EygyNDA5MWQxYzQ3OTVkNTg5MjAyNWYwMjQ4MWRjMmYzY2I0YmQwOTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoCDY2xVukMIm35pXs7wHCoG6LEO
JO5hlaDb/DiZtHgHYp2ebT81nIQggLm5gekQDhAjTYsnbl0YulnAujmHSI6pVkD7
M3KoejKTtLCM4LBJf5r96MKuIK7rGf4dbjvaVfTdruTSDFiBlASkckXw2zZUGTGS
wsAlFagI5iz6Gv86IAarp2fW1SwXTrwTw5rqKIzLlNWv9bdNRwun0+VeB3JJL7Uc
Aq/MBh+mWZIuLZdOBqZZZt2FkY4rCzQyhoM8/IcfQk9RO+o/pC6T1piJKhwnm0UY
vDYMzqVBeZElhsO05lS6kWZ98x3SDofoQMCdt8+3cBCyCC1J7mvw4lcd9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQJHRxHldWJICXwJIHcLzy0vQkPMB8GA1UdIwQY
MBaAFHf45/vUq2lQf7H+NXmvNDpWY5CGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82YzI3MzYtYWIwMi00ODk3LTk1Njgt
NzdmNmU5NGUzZGNjLzEvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82YzI3MzYtYWIwMi00ODk3LTk1NjgtNzdmNmU5NGUzZGNj
LzEvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGXWbe91
VxP2+O8F6QVxzrLuUzSHvU9Wls99xU22jpuWpZpKgZb0n8qHXx1hrD/NxulpC2Sm
t1BglbR29JhYkvtkr5aeFZEnYJ5wkSmAHlHLiEZAcGYo8AqtLbMvyhvJHGzy7KiA
qGmamwK5GsgtYQqhRFsaAxXwFr6B5Dl1dCG7kQoFsmGi66j+MdsJ0ZbTzhAKtBzg
5+qbEI2yl8kON/wmc3mJTofRGOwKnissE5eKoR9OVVl4A8Cdzi9ZpXOlgntfiPjq
jEeV+QgSKYCaUWXWi1fL7e9QMifLjs+uiiFmvqkfiDq/o9U98OckCv4XrKtg9nID
cS+y0J4Fj2u/hg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 01:45:36 2026 by rpki-client