
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
File: jdADrwR3TdPjlzBJeYmjoXFRYlI.mft (raw, json)
Hash identifier: 02ny225pIb48CNtZh1HCnq0Au3JXevHX2Y1KkUBcvDg=
Subject key identifier: D7:E9:B4:59:78:BD:94:67:D0:B2:68:A9:05:05:7B:F2:60:F0:2F:0F
Authority key identifier: 8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
Certificate issuer: /CN=8dd003af04774dd3e39730497989a3a171516252
Certificate serial: 01A08AFACB366FFF201A4327B261F5E5DAFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
Manifest number: 14EE
Signing time: Thu 10 Sep 2026 11:01:26 +0000
Manifest this update: Thu 10 Sep 2026 11:01:26 +0000
Manifest next update: Fri 11 Sep 2026 11:01:26 +0000
Files and hashes: 1: Dcx8h4CiQxGZDM9GxaHxjohozgs.roa (hash: JQ8uIK2vUMKNWaAjfc0A3/ZC5vK96qHNS+69HHvjW+s=)
2: jdADrwR3TdPjlzBJeYmjoXFRYlI.crl (hash: ZMReQ4rBjDiuIN+9bX/VqYawRB71asXLcJoMn0YxZlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:cb:36:6f:ff:20:1a:43:27:b2:61:f5:e5:da:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dd003af04774dd3e39730497989a3a171516252
Validity
Not Before: Sep 10 11:01:26 2026 GMT
Not After : Sep 11 11:01:26 2026 GMT
Subject: CN=d7e9b45978bd9467d0b268a905057bf260f02f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:08:80:d0:3f:7b:aa:20:7b:72:f3:e1:21:
25:12:77:5a:3b:58:ff:c3:73:af:9e:35:2f:6d:a5:
f8:b9:15:a8:fe:73:5b:82:c4:5a:71:f5:30:19:e9:
44:47:d0:9b:81:b7:bb:11:a6:2a:db:32:43:d0:a3:
1c:82:8c:93:cd:24:55:22:e6:eb:24:57:1f:97:72:
0d:9f:69:ec:8c:12:9e:66:53:ad:04:ff:80:7a:f7:
e4:d5:cb:31:0d:d1:c3:5a:06:d6:9c:85:e6:cd:49:
d9:f0:8c:ab:5a:91:89:93:2f:24:ac:f0:b6:25:da:
cc:4c:bb:75:74:07:be:8d:e9:fb:6f:ea:63:d3:f3:
ae:bd:3d:f4:42:cd:46:6c:d5:9b:df:ed:f3:3e:e3:
93:8b:f7:59:d8:27:97:0f:1d:5e:72:9e:35:e8:bf:
50:c6:4c:68:ad:00:fd:7b:bd:04:25:11:5c:91:dc:
ed:87:7f:45:b3:3f:af:9d:69:70:87:a5:3c:84:26:
5d:6b:1f:6a:e1:20:64:b2:30:47:15:80:ea:0f:68:
0a:72:76:c4:13:4f:a1:4a:a3:8c:d9:b4:2b:cf:7c:
73:2d:ab:e6:25:03:d4:66:69:06:d4:d5:64:37:3d:
8e:48:87:d4:2c:9b:ca:eb:04:ef:a6:ff:d4:33:d7:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E9:B4:59:78:BD:94:67:D0:B2:68:A9:05:05:7B:F2:60:F0:2F:0F
X509v3 Authority Key Identifier:
keyid:8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:27:70:e6:2f:2c:6f:72:65:23:d4:35:ff:9f:2f:df:cb:93:
7b:0f:c5:aa:c6:38:ba:14:cf:c2:15:2a:a9:df:ed:4a:76:a2:
5e:7f:3f:fb:61:0d:64:71:4d:cf:4e:83:53:e4:98:0a:82:88:
22:ae:45:3b:a5:1b:c9:ce:fd:a8:25:6e:78:97:64:3c:35:ec:
79:d5:bd:3d:a4:ca:77:34:b6:71:0e:87:65:e5:33:ae:b5:44:
c3:59:aa:7a:0a:74:96:be:a9:18:fe:49:50:40:04:e8:eb:4b:
4a:1f:d3:ad:22:7b:08:89:0d:2d:c9:a8:0f:de:a7:c3:87:58:
26:7c:83:5b:66:a7:54:11:d7:60:90:3a:39:3f:7f:66:3f:36:
23:3e:59:36:8f:60:8f:4a:4c:d0:36:39:18:f5:51:ce:b7:77:
e9:a3:69:42:6e:69:81:72:ef:43:aa:d1:e5:4c:80:9e:99:66:
40:ee:4a:47:4e:6a:80:0d:f7:5d:90:5b:f4:aa:01:9a:af:13:
90:a6:a0:d3:a2:ba:b2:4c:74:da:23:34:cc:b6:38:5e:f4:f0:
68:b0:ee:b7:da:18:06:00:5f:ba:6f:b9:a5:93:11:e8:15:c8:
dd:c2:89:7a:e8:64:6f:21:3c:ec:f2:a7:a1:49:46:f1:aa:90:
ba:72:66:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:12:26 2026 by rpki-client