Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
File: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft (raw, json)
Hash identifier: QLyQ8Ie+L07PbD/MWR2zAfNyaalwnPTjPHnCVUitbHw=
Subject key identifier: 4F:FE:5C:01:1C:E2:1B:92:58:CC:3A:42:12:46:1D:41:B9:91:E6:4A
Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
Certificate issuer: /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Certificate serial: 019CAD90882F8E9CD06E3ED4D6B1C6DB0BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
Manifest number: 17DA
Signing time: Mon 02 Mar 2026 08:00:56 +0000
Manifest this update: Mon 02 Mar 2026 08:00:56 +0000
Manifest next update: Tue 03 Mar 2026 08:00:56 +0000
Files and hashes: 1: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl (hash: HqZsm5qxFqnFIL2JmTpUm8BwqzOz42YXPwAi7AeGuGU=)
2: eL4sddmNTd7PSzARjzADz_21RBc.roa (hash: 9PP/TpfqraKWqrmb3Ro9MwG6dH8Z8rYhFZu1I649JYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:88:2f:8e:9c:d0:6e:3e:d4:d6:b1:c6:db:0b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Validity
Not Before: Mar 2 08:00:56 2026 GMT
Not After : Mar 3 08:00:56 2026 GMT
Subject: CN=4ffe5c011ce21b9258cc3a4212461d41b991e64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:30:55:be:df:ba:18:b0:a7:e1:54:16:db:31:
cd:42:46:27:6d:b7:b6:79:5d:68:63:dc:b9:94:b1:
77:38:c0:72:cd:d3:ba:68:61:34:e5:b1:47:63:87:
35:e9:d7:ed:40:d8:dd:05:69:5b:2a:02:de:9e:95:
33:eb:32:af:26:10:91:c6:50:f2:c4:6d:c7:8c:7c:
f1:e3:87:8d:65:90:80:ac:02:8f:96:da:54:b2:90:
4e:66:70:17:fe:e1:87:e9:b3:59:17:6b:32:8e:b9:
37:fb:72:52:f6:90:47:df:43:cc:4a:8b:96:1f:7e:
11:a7:99:16:a8:e2:8a:ca:0e:77:b7:a8:08:c4:1e:
3d:9f:08:64:e1:3e:0b:1c:88:27:49:3b:8b:bc:c8:
40:59:5e:d5:25:fb:dc:77:05:f1:ac:7e:f3:dd:65:
c4:48:58:47:64:48:11:3e:e2:05:fb:0b:8e:35:96:
ee:0b:a0:e7:5b:9a:90:95:78:01:67:b7:53:57:a4:
ad:60:14:1d:25:ff:b2:26:24:ff:5e:62:d2:59:5d:
f1:f0:62:2d:86:13:6e:c4:dc:30:37:12:a3:ab:ea:
4e:ad:f4:d9:96:f2:3f:19:c7:b3:3e:85:de:9f:c9:
24:67:0e:cd:85:f0:f6:e1:b2:af:bc:c5:1e:34:7e:
10:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FE:5C:01:1C:E2:1B:92:58:CC:3A:42:12:46:1D:41:B9:91:E6:4A
X509v3 Authority Key Identifier:
keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:79:1c:0c:98:96:7c:e5:de:9a:25:cd:05:f9:ee:27:b5:eb:
b4:6e:07:87:88:31:6c:ae:e8:ca:d5:8c:fd:55:ac:1b:9e:27:
b5:56:33:e2:c8:a0:5d:39:f9:58:dc:7f:9c:26:a8:8d:8f:0e:
e6:bc:e5:7e:c4:37:78:23:bc:fb:5d:d0:b4:74:c4:ef:c9:37:
56:6a:e4:05:b6:75:35:6d:16:f7:b0:7e:0b:91:56:3a:ec:c4:
5a:31:93:39:65:e7:4f:90:9b:27:f5:b1:be:b2:fa:c8:7a:f2:
6d:67:3f:b4:56:d8:9e:51:06:b0:b9:ef:81:64:a9:af:c6:d3:
32:15:42:11:d4:8e:36:09:fb:75:aa:54:eb:7d:cd:57:7b:a9:
94:94:15:69:47:46:33:b5:6d:c0:30:16:8c:b5:77:be:5e:69:
15:3f:f7:e8:b2:29:e0:e4:16:0c:51:e2:ba:01:93:9e:ff:e8:
91:c1:44:d1:8e:ff:54:9e:11:5b:1c:52:2e:a3:20:13:d8:64:
57:ea:1e:68:24:4f:7e:7a:be:a1:f6:a1:3a:29:67:62:8f:c2:
5e:96:cc:b6:c0:f7:21:b6:92:f5:09:d1:22:88:3d:ca:81:5a:
b5:a4:d3:8b:9d:4c:e1:11:05:b4:e5:5f:89:c3:5a:1f:e9:bd:
64:3e:ee:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkIgvjpzQbj7U1rHG2wuiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDI4MDdlYWUyNmE2N2QzZWJjMjVlZDUwZmZlNTQzNGJj
NjZjNTIwHhcNMjYwMzAyMDgwMDU2WhcNMjYwMzAzMDgwMDU2WjAzMTEwLwYDVQQD
Eyg0ZmZlNWMwMTFjZTIxYjkyNThjYzNhNDIxMjQ2MWQ0MWI5OTFlNjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTBVvt+6GLCn4VQW2zHNQkYnbbe2
eV1oY9y5lLF3OMByzdO6aGE05bFHY4c16dftQNjdBWlbKgLenpUz6zKvJhCRxlDy
xG3HjHzx44eNZZCArAKPltpUspBOZnAX/uGH6bNZF2syjrk3+3JS9pBH30PMSouW
H34Rp5kWqOKKyg53t6gIxB49nwhk4T4LHIgnSTuLvMhAWV7VJfvcdwXxrH7z3WXE
SFhHZEgRPuIF+wuONZbuC6DnW5qQlXgBZ7dTV6StYBQdJf+yJiT/XmLSWV3x8GIt
hhNuxNwwNxKjq+pOrfTZlvI/GcezPoXen8kkZw7NhfD24bKvvMUeNH4QGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/+XAEc4huSWMw6QhJGHUG5keZKMB8GA1UdIwQY
MBaAFCTSgH6uJqZ9Prwl7VD/5UNLxmxSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lNTM0NGQtNWVjMy00MGVlLTg2MTIt
Zjk5YTNkZDk5ODI2LzEvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9lNTM0NGQtNWVjMy00MGVlLTg2MTItZjk5YTNkZDk5ODI2
LzEvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnkcDJiW
fOXemiXNBfnuJ7XrtG4Hh4gxbK7oytWM/VWsG54ntVYz4sigXTn5WNx/nCaojY8O
5rzlfsQ3eCO8+13QtHTE78k3VmrkBbZ1NW0W97B+C5FWOuzEWjGTOWXnT5CbJ/Wx
vrL6yHrybWc/tFbYnlEGsLnvgWSpr8bTMhVCEdSONgn7dapU633NV3uplJQVaUdG
M7VtwDAWjLV3vl5pFT/36LIp4OQWDFHiugGTnv/okcFE0Y7/VJ4RWxxSLqMgE9hk
V+oeaCRPfnq+ofahOilnYo/CXpbMtsD3IbaS9QnRIog9yoFataTTi51M4REFtOVf
icNaH+m9ZD7uIg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:58:44 2026 by rpki-client