Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
File: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft (raw, json)
Hash identifier: Wii5IsgE5aUCYcvvlNWng253Hs9msb1qszkO9Sh49o0=
Subject key identifier: B4:D8:47:C8:1B:58:73:10:D4:B2:FD:9F:40:07:0F:16:67:56:D0:74
Authority key identifier: 8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24
Certificate issuer: /CN=8e79cef458de50392e3c02b69182f34c60148d24
Certificate serial: 019FAA5068A268D9BD4E849A50AE1159CA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
Manifest number: 03A3
Signing time: Tue 28 Jul 2026 20:00:24 +0000
Manifest this update: Tue 28 Jul 2026 20:00:24 +0000
Manifest next update: Wed 29 Jul 2026 20:00:24 +0000
Files and hashes: 1: _c6xx4G9gRqlWT599mmQOoWoW50.roa (hash: c/9VJ4HKTN9Q4dyySRrDW6GfcNhn9tZLqvs7ju71Tx8=)
2: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl (hash: 1tNrn1IxlHwkez4MzP21Y4QpOM0C7J8mJUAjhyX8Vxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:68:a2:68:d9:bd:4e:84:9a:50:ae:11:59:ca:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e79cef458de50392e3c02b69182f34c60148d24
Validity
Not Before: Jul 28 20:00:24 2026 GMT
Not After : Jul 29 20:00:24 2026 GMT
Subject: CN=b4d847c81b587310d4b2fd9f40070f166756d074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:37:75:60:89:d0:40:cd:4a:2a:af:3c:e6:c4:
83:3e:14:88:ea:5a:98:f7:06:6e:a0:d2:3a:17:1e:
e6:37:5e:23:cd:45:47:45:91:9f:94:ae:8d:7f:08:
d5:8f:08:6a:77:65:84:e2:ff:c2:72:01:14:8b:f9:
b4:be:ce:51:be:a2:4f:82:2e:d4:e0:68:05:cd:9b:
d5:a9:af:bb:42:89:b5:34:45:f2:32:29:da:da:5c:
54:e9:cc:af:1a:54:45:8c:81:7d:d5:fc:d9:3f:42:
ae:1e:87:69:93:14:84:68:4f:63:c2:f7:f1:19:af:
c9:be:20:69:4c:bd:bc:ab:7e:0c:e6:03:1b:b3:6c:
17:35:9b:bf:c8:04:bd:55:1c:1a:cd:d7:ec:ff:2d:
5f:5e:48:9f:98:1d:3f:6c:9e:ac:1d:b2:22:3f:45:
61:56:08:2d:56:1d:43:b7:81:78:5c:67:8a:40:f7:
a5:5a:cd:90:aa:7e:22:bb:51:3b:ea:fc:af:8e:ed:
f9:cf:a3:93:d4:1c:a5:b0:23:f5:41:da:10:a1:47:
b0:9b:75:bf:1c:38:03:7e:80:fc:17:71:5b:f2:c4:
41:f5:71:f5:4a:27:7f:0c:85:b2:f7:41:d5:b2:9b:
f0:72:e4:90:85:3a:c8:91:fc:cd:0f:df:7a:c1:d9:
47:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D8:47:C8:1B:58:73:10:D4:B2:FD:9F:40:07:0F:16:67:56:D0:74
X509v3 Authority Key Identifier:
keyid:8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ee:e5:91:ca:10:9d:96:95:c0:57:19:5e:fa:bb:b2:e0:42:
d5:f2:cd:29:8e:91:d2:8c:0f:be:74:ec:42:e8:8d:e3:ee:ee:
30:a8:90:14:7a:71:f4:a3:65:2b:9b:f7:8d:0a:bd:aa:75:fb:
b2:0a:66:34:f3:63:81:00:74:b6:90:a9:52:33:2b:db:38:97:
07:4a:e2:ce:bc:90:8f:6d:b0:3f:bd:d6:76:9b:52:7e:8e:da:
89:4e:6e:7c:18:f0:5d:0d:59:b6:44:07:5d:fa:e5:8f:00:da:
61:2c:90:0b:ee:7c:95:d5:ab:49:7f:55:31:9e:85:e1:64:6e:
6b:88:1b:e1:1e:36:89:c0:d8:21:b8:0d:07:4c:66:76:f5:df:
d8:8d:0a:62:3d:64:6b:e3:8c:aa:1b:62:e5:17:ea:4c:f8:6c:
d2:ed:76:e6:79:fb:e3:d9:8f:6c:88:53:19:54:b5:dd:b4:18:
19:10:e3:36:47:a2:99:7b:5d:1c:dd:14:05:0f:9d:0d:6a:42:
8a:34:f4:d0:85:8f:8c:b7:bd:a5:09:ec:93:6e:d1:8b:27:14:
39:00:c4:95:0b:1f:d9:d0:8a:a7:2a:27:2c:a7:7a:e2:48:59:
12:08:01:a2:6a:43:cd:9a:3b:66:df:12:6d:9b:71:ea:d2:58:
f6:7a:15:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:01:57 2026 by rpki-client