Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
File: Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft (raw, json)
Hash identifier: lxlBrQWb+uNhR9LXYIztuMhsTtsQSPbzBiI05fAhlvk=
Subject key identifier: 96:F4:B2:CF:55:D6:0C:02:D8:13:8A:AB:25:66:17:57:46:B8:C0:53
Authority key identifier: 26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57
Certificate issuer: /CN=267ef37f3dcd607f9871d239502badbf9b56bc57
Certificate serial: 019D371BE337BABC5BA86BB000A0E0EB19F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
Manifest number: 0ABF
Signing time: Sun 29 Mar 2026 01:01:07 +0000
Manifest this update: Sun 29 Mar 2026 01:01:07 +0000
Manifest next update: Mon 30 Mar 2026 01:01:07 +0000
Files and hashes: 1: GfLgRhct9oW5wY_4r00bTaw-xQ4.roa (hash: 3WghsPFrwdwVOD+irlDGlyeR+gBCQou6bkuUAmEByMw=)
2: Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl (hash: fsCIg2ofJ/2fzGxL6p/JvjZoXjh1w9lh8vLyTgyuxBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:e3:37:ba:bc:5b:a8:6b:b0:00:a0:e0:eb:19:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267ef37f3dcd607f9871d239502badbf9b56bc57
Validity
Not Before: Mar 29 01:01:07 2026 GMT
Not After : Mar 30 01:01:07 2026 GMT
Subject: CN=96f4b2cf55d60c02d8138aab2566175746b8c053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e6:33:f2:69:22:64:0e:b2:8d:19:b3:f9:9b:
dd:1c:ce:1a:72:4a:47:cd:c8:e5:0a:fe:22:12:b0:
c4:45:b2:dc:34:61:2e:af:1e:33:b4:5b:0b:1d:1a:
31:ce:56:07:d6:b9:ed:09:a6:4a:2c:6c:20:2f:8e:
cf:f8:4b:af:20:34:b8:23:b8:d5:bd:c1:52:f6:fe:
a1:19:44:7e:36:e4:6f:b1:1c:69:b8:28:fc:28:af:
76:13:be:a8:44:7e:8e:b6:dd:1b:3f:6d:aa:42:40:
a9:fd:2a:04:ac:b8:95:45:3a:3f:5f:c6:3a:7b:a5:
e8:2b:60:16:88:32:1a:6e:fc:8e:c1:21:69:6f:21:
a3:31:a3:92:6b:29:38:2d:53:e4:6d:54:44:6d:fd:
84:13:09:a6:06:70:b4:00:f2:8e:ed:a5:d1:63:51:
41:0f:90:7f:2b:84:9d:62:5c:22:d3:69:a4:3f:10:
be:f0:7c:6c:ed:ef:30:48:d3:0c:d6:ac:e9:e8:4d:
55:f7:10:b3:ba:da:3c:c5:e1:fc:a8:7c:6f:8d:66:
fa:ad:90:e8:21:22:f5:31:20:7c:71:3a:9e:5e:3c:
be:94:7f:7f:72:c4:72:0b:cb:40:26:74:77:07:38:
aa:2f:e9:30:33:be:f6:3f:dc:e4:22:aa:87:27:bb:
8a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F4:B2:CF:55:D6:0C:02:D8:13:8A:AB:25:66:17:57:46:B8:C0:53
X509v3 Authority Key Identifier:
keyid:26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:93:82:7d:8c:ed:2c:3a:61:b2:0c:09:57:27:d3:34:5a:16:
a5:12:5c:03:82:4b:60:08:88:05:b7:03:cf:3e:48:2d:3b:3f:
15:af:bc:d3:67:d7:aa:aa:de:57:a5:12:32:9c:05:11:64:83:
3a:4e:d7:23:25:1d:4c:37:07:c8:5c:b2:fe:c2:21:e0:df:8d:
0e:fc:27:d1:c9:c8:67:16:bd:18:ff:56:ff:b3:80:f9:ff:7f:
d7:93:0c:18:8e:50:a1:2b:41:76:ce:0a:45:1b:6f:3c:44:4c:
42:66:69:5c:8d:aa:ce:72:38:39:02:81:4d:3e:2a:d5:dc:c7:
f0:b8:42:ad:9c:47:42:2a:73:c5:c2:1f:b7:d4:96:30:26:97:
e9:5f:77:03:30:9a:d0:c5:ed:87:4a:4b:48:ac:7b:04:37:30:
11:9e:c3:11:04:d9:c2:68:72:7a:77:8c:71:01:1b:7f:53:72:
3e:6a:c0:44:90:57:d0:86:eb:9f:7a:84:b5:cb:40:22:8b:3e:
3a:0b:15:5d:de:46:11:46:f2:de:40:73:94:97:4f:44:58:a5:
36:0e:8c:9c:7c:30:92:94:24:19:41:e2:95:12:9c:05:9f:e4:
08:28:48:ad:68:50:d2:fc:cb:2b:35:bc:1f:bc:c0:91:56:27:
da:73:24:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:50 2026 by rpki-client