Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
File: d_jn-9SraVB_sf41ea80OlZjkIY.mft (raw, json)
Hash identifier: H4kcY6pQhFPf64uRkyPgvSroHzWd5XC5BhqYEmS0+QI=
Subject key identifier: 9B:0B:63:1A:AF:A1:3C:2A:AD:10:94:E8:38:25:02:D3:A3:E2:18:36
Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
Certificate issuer: /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Certificate serial: 019CAB348FEF28A25194D1E3B1C62E0B3D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
Manifest number: 1106
Signing time: Sun 01 Mar 2026 21:01:14 +0000
Manifest this update: Sun 01 Mar 2026 21:01:14 +0000
Manifest next update: Mon 02 Mar 2026 21:01:14 +0000
Files and hashes: 1: IM14LBYF8xBAMrWihjQwJhZWTFs.roa (hash: L/LoNTKL0OkWZiTSY3TN85uewDjoeQN9VcIBqy5aAq8=)
2: d_jn-9SraVB_sf41ea80OlZjkIY.crl (hash: Pr7sHS6ZxuX3ha+TEdP4IRHomURTujr1Dc6oOblld9k=)
3: k7SwSm-lR2tiZUN1enrqRZh95B0.roa (hash: F4SSqixujMFRC8AtyIaRgNjOXkxcmSPAezm1/5O7V+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:8f:ef:28:a2:51:94:d1:e3:b1:c6:2e:0b:3d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Validity
Not Before: Mar 1 21:01:14 2026 GMT
Not After : Mar 2 21:01:14 2026 GMT
Subject: CN=9b0b631aafa13c2aad1094e8382502d3a3e21836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:85:b3:ae:a0:ab:78:b8:13:d4:29:bf:23:
d9:79:77:7b:2d:59:c6:3b:83:b1:6d:03:10:ea:ab:
64:bf:cd:62:5b:02:06:d7:d6:3d:8b:99:b4:e8:cf:
7e:7a:fb:eb:d6:74:d1:9e:15:17:08:57:73:b2:71:
03:60:ed:d4:cc:45:f7:64:b5:73:5e:d5:e3:39:86:
e5:8f:e2:8d:41:d6:07:c0:65:14:ea:9c:26:c1:2f:
e1:0c:b6:10:11:47:c5:51:36:d5:a3:8d:d9:e8:0a:
54:7c:26:f6:13:ec:ed:6b:5c:d1:24:1b:14:45:c9:
ff:bd:56:ff:4c:d5:56:d0:78:fc:ab:98:d5:66:de:
a2:0a:a6:23:8e:3d:54:87:15:7c:1a:d9:af:26:92:
6f:18:23:93:16:8b:c9:54:be:83:59:55:eb:a6:a4:
e2:fc:37:df:ff:2e:c2:c8:e1:57:41:76:12:6d:f6:
1d:16:12:ab:22:f7:97:9d:d0:01:9f:ca:33:a9:4b:
92:54:78:07:09:0d:21:32:82:d7:36:1b:ce:cf:a2:
99:d9:dd:15:72:07:51:b3:36:28:8d:f7:ab:9d:14:
a2:96:77:57:34:0f:1f:ae:2d:f9:c0:bd:c6:6d:2b:
cc:a6:9d:1d:e2:32:ab:b5:42:85:1c:29:e7:65:d2:
12:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0B:63:1A:AF:A1:3C:2A:AD:10:94:E8:38:25:02:D3:A3:E2:18:36
X509v3 Authority Key Identifier:
keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:5b:96:9b:d7:ee:dc:c0:f4:93:68:9b:33:bc:fc:cd:6c:7c:
66:f4:f6:fd:1c:71:4a:01:00:f0:de:7a:9d:24:de:81:17:bc:
14:e4:18:a4:2d:58:b2:67:2c:ca:33:a7:19:fb:80:99:68:3d:
8a:52:88:17:08:8d:f9:92:47:88:22:c5:b7:34:88:9f:4f:17:
27:8b:47:f7:f2:89:71:2d:34:4c:df:87:0f:63:2d:77:07:fc:
ae:7c:1e:d1:13:02:fd:d9:39:46:7d:9a:4d:14:ff:0e:d1:54:
dd:4b:17:0d:b0:f2:61:2f:52:f8:03:7a:fe:44:6d:4c:9c:e2:
17:a5:cf:b7:81:8c:c5:25:11:85:65:23:39:f7:d4:8c:50:be:
e1:cb:36:4a:1d:0e:82:52:3f:e9:1e:53:6e:e6:79:f3:a8:d5:
58:79:44:f0:5d:b1:1a:f4:3c:b0:b6:4c:90:82:d0:a2:69:01:
3b:bf:1e:16:81:26:49:39:69:05:db:a2:3d:27:b6:f8:97:dc:
b9:b0:53:31:14:d8:01:d2:7c:d2:7f:f1:b6:60:19:b0:94:56:
83:bb:9f:29:2b:81:f0:8f:53:6b:dc:d0:7a:b9:7a:1b:77:93:
fe:4c:05:fa:63:ef:d4:d4:84:dc:42:c4:63:df:a6:ad:23:4e:
2b:68:3e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:14 2026 by rpki-client