Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
File: Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft (raw, json)
Hash identifier: /YtfVN41f6xIwYlbWf+2S3pHo6ViOGpX79Fr1OTrpno=
Subject key identifier: D8:EE:AB:24:87:98:79:A8:FB:83:7E:54:02:68:39:8A:8A:7F:49:32
Authority key identifier: 26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57
Certificate issuer: /CN=267ef37f3dcd607f9871d239502badbf9b56bc57
Certificate serial: 019D27A8A3F789EE09971F37036F5D5F597A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
Manifest number: 0AB7
Signing time: Thu 26 Mar 2026 01:00:56 +0000
Manifest this update: Thu 26 Mar 2026 01:00:56 +0000
Manifest next update: Fri 27 Mar 2026 01:00:56 +0000
Files and hashes: 1: GfLgRhct9oW5wY_4r00bTaw-xQ4.roa (hash: 3WghsPFrwdwVOD+irlDGlyeR+gBCQou6bkuUAmEByMw=)
2: Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl (hash: gEHe/acoC+U+wb8BbaFIpSFNiFifZoaFMhNcCNs633g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a3:f7:89:ee:09:97:1f:37:03:6f:5d:5f:59:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267ef37f3dcd607f9871d239502badbf9b56bc57
Validity
Not Before: Mar 26 01:00:56 2026 GMT
Not After : Mar 27 01:00:56 2026 GMT
Subject: CN=d8eeab24879879a8fb837e540268398a8a7f4932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7e:2b:22:d6:49:8f:66:4a:4b:5c:40:d4:0a:
3a:7d:c2:d5:b6:1d:17:80:65:c6:f4:9e:d3:e6:4a:
24:b7:21:d8:51:12:94:c2:cd:44:b8:a7:09:aa:fe:
21:94:60:fd:20:1d:75:ae:6a:85:32:ca:d3:b7:ba:
64:cf:15:aa:33:fe:89:bb:6a:49:3d:a6:5b:6a:81:
b2:67:38:f5:bc:41:0f:ea:35:1e:90:34:9c:0d:e8:
aa:ff:ce:c0:1f:6f:7c:80:51:95:92:06:d5:64:5d:
46:ab:43:61:9a:75:26:ce:0c:b0:19:f8:9b:f4:f3:
c8:51:c4:06:bb:40:6d:9a:4d:d4:c9:12:da:0a:36:
59:ca:2d:99:ca:d5:3c:ee:9e:90:01:0f:05:27:97:
0e:38:39:87:84:e1:0b:ab:a7:c6:6d:43:ca:0a:2c:
9a:c0:0d:65:b3:2c:64:07:98:7f:fe:f5:40:a7:08:
34:37:dd:11:8a:5e:51:e2:2d:cc:dd:55:3e:61:58:
65:ef:37:15:aa:01:8f:f6:fe:ca:58:ac:40:fb:01:
db:2d:33:00:93:1e:f4:b0:d8:12:53:a9:aa:02:14:
85:39:b8:cd:04:db:44:ea:d2:c3:f8:55:5b:be:fe:
33:52:22:a8:c6:f5:8f:7e:c6:13:db:3b:de:6f:d1:
42:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EE:AB:24:87:98:79:A8:FB:83:7E:54:02:68:39:8A:8A:7F:49:32
X509v3 Authority Key Identifier:
keyid:26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:94:34:9c:5d:62:ad:0a:e7:b8:24:8e:7c:3f:23:72:4f:db:
80:f5:01:cb:31:25:e6:2c:2f:46:07:08:3b:93:e7:4b:21:bf:
9c:47:12:2b:c3:e6:d3:81:d0:c2:6d:53:8e:e2:1a:b7:4d:fb:
44:e4:64:e1:71:81:6e:7c:c1:c3:03:ea:68:b9:87:71:28:4e:
00:39:68:ab:35:f6:91:1a:94:ae:3c:1e:38:f7:c1:07:87:82:
a2:4b:41:13:2d:21:1a:ed:7c:2f:b6:65:97:1d:1e:7f:ae:cb:
aa:da:af:06:fe:32:d3:d2:54:9b:b5:86:c3:53:3a:7b:8a:12:
19:76:c9:30:3f:a9:38:8b:d1:94:30:5e:e3:da:11:2c:e2:8a:
6a:92:77:b6:54:cd:86:82:6c:35:69:12:f4:40:b2:33:e4:4d:
cf:cf:b0:05:5e:4a:98:7c:3b:1f:9f:d7:f7:61:8d:c4:89:ae:
eb:5a:e2:27:04:1f:c9:40:7d:dc:ac:4f:93:b2:41:80:1a:72:
ab:1b:b9:44:ed:4d:ea:dd:a2:ba:03:4a:42:45:6a:46:e2:83:
a4:4b:25:cb:0c:f8:e2:47:58:bc:9e:12:0f:23:57:b7:8c:2b:
72:de:29:e7:f6:67:73:02:d1:72:80:0e:a4:b3:57:b3:5f:47:
3d:55:8d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:55 2026 by rpki-client