Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
File: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft (raw, json)
Hash identifier: F982xDYlBuyTyzZGybBJ59p8IT4G4sYdKlzLg8J19TY=
Subject key identifier: B9:D4:59:5A:D8:3B:AB:0F:4D:B3:22:42:60:E2:1B:04:4D:52:AE:8A
Authority key identifier: AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
Certificate issuer: /CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Certificate serial: 019CAAC6529E0BA976BE05552B8CE53C4014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
Manifest number: 0B7B
Signing time: Sun 01 Mar 2026 19:00:49 +0000
Manifest this update: Sun 01 Mar 2026 19:00:49 +0000
Manifest next update: Mon 02 Mar 2026 19:00:49 +0000
Files and hashes: 1: OapL7HyFK0X9wx4mL1edhbz25m0.roa (hash: f3Ysa7cBGNsoNSQJdM2JIeAtt87DP7/+oUJ9JxWPJ4k=)
2: WkUE5TtDSY0qUMHRVPnjHcODIrA.roa (hash: 7KfXEZ987lAvPil502fNFkfEV1D1Y8iJROoMhWkSDa8=)
3: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl (hash: LeBzpd63SYWeecV5VSPY/WcqY0bTNZiXXvPLY9P3R9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:52:9e:0b:a9:76:be:05:55:2b:8c:e5:3c:40:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Validity
Not Before: Mar 1 19:00:49 2026 GMT
Not After : Mar 2 19:00:49 2026 GMT
Subject: CN=b9d4595ad83bab0f4db3224260e21b044d52ae8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:08:a2:13:b7:d0:37:34:5e:28:24:3f:11:2f:
aa:09:c6:3d:f1:04:37:ed:3f:32:97:04:d0:0c:9f:
86:4e:45:d5:d5:2f:10:eb:f4:2f:bc:c1:9a:4f:26:
4a:82:17:1b:2d:05:42:c6:ca:c7:38:2b:c6:f8:fb:
f8:de:a1:0f:17:10:5a:6c:b2:c5:1e:91:a1:9b:75:
7a:3b:17:6a:15:fe:98:ed:5d:e5:c5:15:bc:43:77:
6d:5e:d1:1d:13:2b:33:e7:e9:05:5f:bd:da:ae:16:
3a:c2:13:db:8b:6a:48:82:99:6a:67:6f:f0:fe:d3:
ed:3f:52:08:b1:2e:35:3a:52:68:34:ee:00:3d:26:
54:6e:6a:c3:6d:bf:02:3c:d4:16:79:ab:b5:94:2b:
7e:ff:cb:6f:0f:12:5d:92:21:ae:f8:b9:3a:a0:e6:
7c:be:51:09:ab:9c:27:5b:97:ff:e8:31:8e:b1:19:
08:9f:61:3e:16:fe:97:d6:e0:f7:36:2e:fb:c7:57:
ed:59:c0:5f:a9:25:82:50:ad:d8:88:0c:6d:72:f6:
5d:6d:7d:4a:ae:db:35:d8:f8:47:62:58:f8:64:9a:
6f:89:b2:12:85:3d:80:1d:0a:76:18:60:49:36:72:
72:76:3e:13:f3:2c:f5:9a:7f:45:11:6b:ff:16:d1:
50:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D4:59:5A:D8:3B:AB:0F:4D:B3:22:42:60:E2:1B:04:4D:52:AE:8A
X509v3 Authority Key Identifier:
keyid:AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2d:47:2d:bd:8c:cc:ca:69:bc:ef:47:ae:e3:c0:4d:58:25:
79:25:59:fd:d5:2a:2d:4b:13:0d:fb:bb:4d:8e:68:78:e5:d2:
df:08:23:37:95:5c:1e:4b:24:2f:ed:a2:2f:e5:db:ca:9e:46:
24:8d:f6:3e:d9:45:3b:39:a4:51:b8:b4:1f:a2:74:18:20:e8:
cb:74:bc:6c:1d:f2:c5:e8:2d:12:3d:e1:b0:65:8d:07:90:53:
7a:34:85:6e:f7:b2:05:79:30:50:52:a2:2a:eb:61:d8:0b:ec:
46:5d:25:f8:6b:1c:bc:74:ff:6c:fe:b4:43:4b:1b:b3:7d:11:
05:f3:c7:62:21:28:e7:48:8b:eb:8f:a6:f2:d1:6a:f5:26:20:
cb:a7:43:7a:ef:59:7f:26:30:99:01:19:61:d4:ab:c9:c9:06:
7a:9a:d1:d8:4a:cc:7a:95:fb:43:50:c8:e5:67:82:8e:d6:58:
62:3a:5f:c6:76:2c:48:9e:74:3e:ad:c8:92:20:be:f6:81:6b:
e9:e2:39:37:cb:27:01:69:92:94:67:61:2f:b5:7f:e3:25:f4:
3d:6f:70:2d:17:09:ab:df:6a:f5:c9:3c:f3:eb:e6:82:70:4e:
f4:07:47:69:c5:18:4f:1d:4f:25:80:ef:c8:5c:d3:bb:20:d0:
50:82:22:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:48 2026 by rpki-client