Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
File: Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft (raw, json)
Hash identifier: UrUkdzW6GB7qblWWSRCW85o9JnmormfveS8KdsAxPx4=
Subject key identifier: CF:B1:3B:36:6B:54:FB:A1:9F:07:23:32:C1:02:5B:02:87:4D:C8:C1
Authority key identifier: 26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57
Certificate issuer: /CN=267ef37f3dcd607f9871d239502badbf9b56bc57
Certificate serial: 019CAA21EE63793DC434ABA0686015E9EDBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
Manifest number: 0A76
Signing time: Sun 01 Mar 2026 16:01:16 +0000
Manifest this update: Sun 01 Mar 2026 16:01:16 +0000
Manifest next update: Mon 02 Mar 2026 16:01:16 +0000
Files and hashes: 1: GfLgRhct9oW5wY_4r00bTaw-xQ4.roa (hash: 3WghsPFrwdwVOD+irlDGlyeR+gBCQou6bkuUAmEByMw=)
2: Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl (hash: 57gbUmpXgjjNMmcDxXH6vqlGGcMRamOuAMYdGfgageA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:ee:63:79:3d:c4:34:ab:a0:68:60:15:e9:ed:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267ef37f3dcd607f9871d239502badbf9b56bc57
Validity
Not Before: Mar 1 16:01:16 2026 GMT
Not After : Mar 2 16:01:16 2026 GMT
Subject: CN=cfb13b366b54fba19f072332c1025b02874dc8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:6c:6f:fe:41:b1:26:a3:f2:fa:fb:70:2c:
d8:a8:07:f2:88:fe:d6:b9:a7:68:4c:db:4d:98:4c:
77:c5:cb:47:80:f0:7f:cf:b4:08:fa:31:b0:39:bc:
84:4d:82:73:04:04:02:cd:50:96:c2:47:b5:d3:14:
c1:6d:9d:b0:87:68:5e:01:3a:0c:68:b6:21:c5:39:
01:2f:f1:6e:92:3a:0b:75:fe:d3:29:3d:83:bc:59:
c4:1b:73:23:0c:a9:0a:94:4f:7d:52:8f:c4:fb:a7:
9b:c8:9c:97:ba:9b:d0:e8:cf:12:d2:e5:4a:56:1d:
3a:98:22:8e:ce:9b:cd:1f:a6:1f:3e:a5:49:b2:fc:
65:19:f1:53:11:18:13:c7:5c:3d:26:78:a2:88:66:
d7:24:8b:22:df:b1:9b:90:95:31:2c:17:11:1d:08:
48:1f:6a:e0:86:80:88:bd:f3:64:27:a6:c0:55:30:
27:8d:c8:b3:ca:7d:16:9b:9b:36:d1:a3:8c:d0:3d:
b3:74:f3:d2:7f:dd:9a:de:fc:f6:85:a4:e4:d2:8c:
1a:0d:c3:74:35:5c:d0:01:dc:59:99:23:db:fa:7c:
e2:f2:e0:9f:62:17:b3:25:9e:8c:46:b1:94:9c:ad:
02:aa:d4:1d:8d:93:86:40:8c:9e:6c:8e:48:69:9c:
f9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B1:3B:36:6B:54:FB:A1:9F:07:23:32:C1:02:5B:02:87:4D:C8:C1
X509v3 Authority Key Identifier:
keyid:26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2c:f1:af:73:d6:36:8c:a9:31:2e:c6:20:4a:32:41:52:af:
c0:9c:61:73:12:fa:0f:b9:dc:ec:3e:bf:80:d7:9b:b6:aa:5e:
69:09:eb:7d:94:82:a7:99:af:9b:ec:08:b3:c1:d0:cc:ea:3f:
4d:ff:f6:01:36:bc:3f:02:12:e2:e7:2c:c8:96:89:c3:37:0a:
69:48:cd:36:55:5d:f8:c7:31:88:1a:6a:a3:ac:ff:7f:28:ae:
c0:5e:8d:bb:09:f5:4e:fe:49:e8:c2:11:ee:2d:21:d2:39:d5:
10:97:7a:7d:bf:6b:4d:c7:1e:8a:61:ec:b8:ce:84:ab:74:d0:
c7:18:52:b9:2a:6f:69:de:d3:da:fb:70:25:12:c2:57:07:09:
94:3e:0c:2e:f1:84:c5:aa:3c:2e:84:ac:55:bd:12:b8:bd:58:
df:2a:2b:06:ec:75:57:fb:99:79:d0:e1:aa:8f:d1:fb:4e:79:
7e:0b:e1:d9:b4:23:ea:75:82:26:5c:72:e6:58:40:1c:d7:f9:
38:76:4a:0f:a3:28:82:d7:42:f5:9a:ac:b8:2f:1f:a2:ef:c5:
eb:b7:50:12:fc:e5:66:cf:46:b6:79:2c:e9:0c:83:99:0c:10:
4b:e1:bf:4c:18:51:b9:f2:84:06:b3:25:0a:59:4d:89:9f:03:
e5:d1:2b:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIe5jeT3ENKugaGAV6e2+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2N2VmMzdmM2RjZDYwN2Y5ODcxZDIzOTUwMmJhZGJmOWI1
NmJjNTcwHhcNMjYwMzAxMTYwMTE2WhcNMjYwMzAyMTYwMTE2WjAzMTEwLwYDVQQD
EyhjZmIxM2IzNjZiNTRmYmExOWYwNzIzMzJjMTAyNWIwMjg3NGRjOGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3Zsb/5BsSaj8vr7cCzYqAfyiP7W
uadoTNtNmEx3xctHgPB/z7QI+jGwObyETYJzBAQCzVCWwke10xTBbZ2wh2heAToM
aLYhxTkBL/FukjoLdf7TKT2DvFnEG3MjDKkKlE99Uo/E+6ebyJyXupvQ6M8S0uVK
Vh06mCKOzpvNH6YfPqVJsvxlGfFTERgTx1w9JniiiGbXJIsi37GbkJUxLBcRHQhI
H2rghoCIvfNkJ6bAVTAnjcizyn0Wm5s20aOM0D2zdPPSf92a3vz2haTk0owaDcN0
NVzQAdxZmSPb+nzi8uCfYhezJZ6MRrGUnK0CqtQdjZOGQIyebI5IaZz5yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+xOzZrVPuhnwcjMsECWwKHTcjBMB8GA1UdIwQY
MBaAFCZ+8389zWB/mHHSOVArrb+bVrxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm43emZ6M05ZSC1ZY2RJNVVDdXR2NXRXdkZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9kZWExM2QtNmRmZS00ZDliLTllZjUt
MzYyOGYwNmRiY2M3LzEvSm43emZ6M05ZSC1ZY2RJNVVDdXR2NXRXdkZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9kZWExM2QtNmRmZS00ZDliLTllZjUtMzYyOGYwNmRiY2M3
LzEvSm43emZ6M05ZSC1ZY2RJNVVDdXR2NXRXdkZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcizxr3PW
NoypMS7GIEoyQVKvwJxhcxL6D7nc7D6/gNebtqpeaQnrfZSCp5mvm+wIs8HQzOo/
Tf/2ATa8PwIS4ucsyJaJwzcKaUjNNlVd+McxiBpqo6z/fyiuwF6Nuwn1Tv5J6MIR
7i0h0jnVEJd6fb9rTcceimHsuM6Eq3TQxxhSuSpvad7T2vtwJRLCVwcJlD4MLvGE
xao8LoSsVb0SuL1Y3yorBux1V/uZedDhqo/R+055fgvh2bQj6nWCJlxy5lhAHNf5
OHZKD6MogtdC9ZqsuC8fou/F67dQEvzlZs9Gtnks6QyDmQwQS+G/TBhRufKEBrMl
CllNiZ8D5dErEQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:18 2026 by rpki-client