Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
File: d_jn-9SraVB_sf41ea80OlZjkIY.mft (raw, json)
Hash identifier: Zee2VA/i/9TplJPLVYKYf/vsD4dOc28VD/+9E26VPPo=
Subject key identifier: A0:D2:23:B2:93:D3:4F:1F:A2:9D:5C:70:B5:3C:51:02:4C:B9:81:6B
Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
Certificate issuer: /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Certificate serial: 019D26CD084EF2848914E80C5D5B53117284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
Manifest number: 1146
Signing time: Wed 25 Mar 2026 21:01:04 +0000
Manifest this update: Wed 25 Mar 2026 21:01:04 +0000
Manifest next update: Thu 26 Mar 2026 21:01:04 +0000
Files and hashes: 1: IM14LBYF8xBAMrWihjQwJhZWTFs.roa (hash: L/LoNTKL0OkWZiTSY3TN85uewDjoeQN9VcIBqy5aAq8=)
2: d_jn-9SraVB_sf41ea80OlZjkIY.crl (hash: N2t37V0pp6TDZ0IPE6XHNOJkhkOCJR39BelP5HbqWLs=)
3: k7SwSm-lR2tiZUN1enrqRZh95B0.roa (hash: F4SSqixujMFRC8AtyIaRgNjOXkxcmSPAezm1/5O7V+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:08:4e:f2:84:89:14:e8:0c:5d:5b:53:11:72:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Validity
Not Before: Mar 25 21:01:04 2026 GMT
Not After : Mar 26 21:01:04 2026 GMT
Subject: CN=a0d223b293d34f1fa29d5c70b53c51024cb9816b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2a:3b:31:43:75:d7:31:2d:8a:a0:35:69:aa:
48:d5:d1:e2:0a:e6:55:42:a6:91:71:f1:de:eb:4e:
d0:fd:65:5a:41:d5:f0:38:3a:c1:70:53:c3:86:b9:
91:3b:35:60:13:84:e1:99:53:92:e2:37:ae:3c:3e:
46:a3:30:26:5d:7e:ff:5f:e0:4a:4e:1c:32:14:ef:
8e:7c:a7:d8:28:4a:93:06:18:4c:f4:6c:6b:c6:bd:
c1:2f:60:32:a6:3d:64:99:30:ac:70:15:65:da:ca:
6e:21:48:e4:5e:fc:7c:16:55:a9:ba:60:08:42:ff:
77:34:f5:91:23:8b:62:25:e2:2a:01:d3:95:11:36:
5e:e0:c1:24:ca:8b:bb:d3:e1:26:cb:01:21:58:4b:
57:aa:2d:70:b4:8f:03:28:3b:5b:5f:4c:fd:f9:59:
5f:58:d0:fd:d0:44:c3:db:26:f4:70:36:d5:95:2a:
95:44:2a:30:fa:b9:b9:47:9a:58:ac:84:7b:b5:6d:
f7:b2:1a:4b:5e:e3:ad:c4:7a:a6:06:ac:cc:83:d2:
37:81:64:d9:27:eb:ab:aa:e4:ed:a8:cf:eb:7b:94:
44:b2:ac:cf:d2:f3:fa:30:c4:5b:47:7b:96:7c:51:
9e:fc:9f:fd:5d:a9:9b:d0:df:fa:66:38:fa:4d:94:
41:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D2:23:B2:93:D3:4F:1F:A2:9D:5C:70:B5:3C:51:02:4C:B9:81:6B
X509v3 Authority Key Identifier:
keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:87:82:b9:d1:48:c3:3d:74:96:f8:d4:2a:27:d3:fe:4e:3a:
2c:05:fc:33:1f:24:70:ef:31:f6:cd:07:1b:6c:15:54:6d:a6:
32:a9:a4:75:10:27:5c:aa:b4:1e:08:9f:1a:a7:5a:25:44:15:
68:7d:c2:e7:77:f6:2e:80:33:76:05:31:ba:a1:0c:0b:ca:3a:
99:4d:30:05:14:57:a1:e9:6f:60:a0:83:5d:e9:82:6b:71:b0:
f9:3d:53:5a:b8:cd:6d:9a:98:37:b6:cd:10:9e:34:48:b8:8f:
ce:2b:b7:75:1c:04:15:5b:e3:73:e8:24:cf:df:fb:b1:a7:20:
6e:86:04:35:7c:5f:66:1e:f9:68:b2:f4:5c:99:24:65:1b:5d:
0e:07:04:94:dd:ff:2a:41:24:c1:b9:5c:95:a4:eb:17:80:5e:
1d:e7:54:bb:63:02:f8:d5:01:21:55:68:38:cb:f9:ef:ee:eb:
fd:e5:cd:f7:2f:6e:d0:73:92:11:f1:58:10:fd:68:82:ac:b4:
83:7b:49:a5:70:7b:a6:3b:a4:a7:84:51:86:c7:6b:87:4b:bd:
00:ca:7e:fb:f4:57:72:3a:f5:3d:13:1b:05:7c:d6:6a:6b:2b:
04:61:dd:c5:5e:12:96:86:8e:bf:27:4e:f6:8c:ff:12:c9:0b:
a4:86:32:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:20 2026 by rpki-client