Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
File: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft (raw, json)
Hash identifier: 2yJGJNXYvFWKTwD/83HSAXMRaSwUgalDkwk1PByrNG8=
Subject key identifier: 42:72:16:C0:8B:BB:3D:38:1D:8F:65:98:D2:BF:79:A6:5F:6C:DF:60
Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
Certificate issuer: /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Certificate serial: 019FAC3F40DD5311CCAF520FD14FF4AF41A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
Manifest number: 1967
Signing time: Wed 29 Jul 2026 05:00:54 +0000
Manifest this update: Wed 29 Jul 2026 05:00:54 +0000
Manifest next update: Thu 30 Jul 2026 05:00:54 +0000
Files and hashes: 1: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl (hash: TzH7udZ+AFOdHz0rysVnGWk1OnL7wWvmqTQfF5qcl+s=)
2: eL4sddmNTd7PSzARjzADz_21RBc.roa (hash: 9PP/TpfqraKWqrmb3Ro9MwG6dH8Z8rYhFZu1I649JYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:40:dd:53:11:cc:af:52:0f:d1:4f:f4:af:41:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Validity
Not Before: Jul 29 05:00:54 2026 GMT
Not After : Jul 30 05:00:54 2026 GMT
Subject: CN=427216c08bbb3d381d8f6598d2bf79a65f6cdf60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ab:ce:2d:35:4f:04:89:f1:1c:e4:39:ab:e1:
b9:10:1c:55:3b:50:d0:2c:2b:98:51:13:f3:ca:d0:
9b:c4:a8:be:9c:aa:37:de:15:13:a1:28:d9:29:fc:
b0:a4:60:d8:f6:64:72:11:6e:2d:2c:6d:54:21:e5:
17:83:35:95:08:4d:68:b7:85:1a:41:53:f0:56:cf:
1b:8a:2c:4c:35:7b:9a:fc:db:f1:5d:3e:e7:58:b5:
d2:5d:b0:a2:53:11:6b:79:8e:9d:d6:a3:c0:f8:d7:
81:99:a8:82:c9:d0:a6:89:91:37:7e:49:75:47:1b:
d9:d3:5b:fb:e8:a2:31:fe:34:b2:e5:49:1e:79:19:
d7:5f:05:2b:65:19:d1:ec:11:a4:4f:8c:d8:c4:e0:
1b:1c:41:95:fe:a5:14:f8:6d:b7:36:81:2b:5e:6b:
61:a0:6f:0c:cf:b9:a4:62:a3:03:46:73:64:65:b8:
5e:5f:5f:b9:ad:98:24:be:1a:b7:af:d4:8e:85:cf:
ae:32:ac:b1:dd:34:5e:88:91:3d:b6:ef:83:db:5f:
44:dc:fa:81:3e:e9:2a:44:9f:0e:a6:4d:86:60:5d:
83:5f:58:4f:af:3d:5b:5e:cb:9c:5e:4f:9f:98:c8:
2a:93:e3:c3:d7:89:6b:08:4f:7d:d6:04:fb:09:45:
77:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:72:16:C0:8B:BB:3D:38:1D:8F:65:98:D2:BF:79:A6:5F:6C:DF:60
X509v3 Authority Key Identifier:
keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:59:75:e4:41:e7:af:fa:ba:51:d8:65:c1:e4:5f:3c:d3:5b:
eb:0e:7f:da:26:3b:54:25:93:2b:4c:b9:c7:4e:5f:a5:45:b8:
3a:60:85:5f:27:ec:08:53:c4:9c:6d:7a:b1:d6:b8:86:1d:13:
1c:53:82:aa:0c:a5:ef:c7:a3:8b:2d:f1:30:c1:cc:23:ab:95:
09:8c:fd:c8:81:b6:2c:0c:38:04:a5:6b:a0:4c:e3:15:98:45:
a3:69:8e:d8:12:6f:ab:fe:c9:9e:a0:5e:b5:5c:21:16:32:af:
d3:49:f5:07:85:03:6d:d5:84:43:2b:a1:d7:c5:6c:db:6e:11:
49:d8:41:af:7a:ea:b8:af:ec:93:48:d6:d7:33:02:e7:53:86:
c9:69:41:db:aa:f0:95:dc:50:e0:5f:6d:d1:a0:e7:05:e9:4e:
ad:c5:50:e1:26:33:0c:ff:0a:0d:23:63:90:e1:35:77:e0:7a:
7d:42:61:88:7c:e2:ac:98:b1:23:22:a4:d4:79:b0:d5:e3:e7:
ca:9f:38:9d:a3:b8:21:a4:8d:3e:b1:6a:3b:b1:35:a0:52:3c:
ff:96:c7:e0:0b:df:5f:99:c8:0e:bd:a9:6e:4b:34:1f:12:43:
12:81:a2:fa:ce:6e:dc:da:f1:b2:7f:d8:02:22:23:74:de:d8:
87:06:f6:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sP0DdUxHMr1IP0U/0r0GmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDI4MDdlYWUyNmE2N2QzZWJjMjVlZDUwZmZlNTQzNGJj
NjZjNTIwHhcNMjYwNzI5MDUwMDU0WhcNMjYwNzMwMDUwMDU0WjAzMTEwLwYDVQQD
Eyg0MjcyMTZjMDhiYmIzZDM4MWQ4ZjY1OThkMmJmNzlhNjVmNmNkZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KvOLTVPBInxHOQ5q+G5EBxVO1DQ
LCuYURPzytCbxKi+nKo33hUToSjZKfywpGDY9mRyEW4tLG1UIeUXgzWVCE1ot4Ua
QVPwVs8biixMNXua/NvxXT7nWLXSXbCiUxFreY6d1qPA+NeBmaiCydCmiZE3fkl1
RxvZ01v76KIx/jSy5UkeeRnXXwUrZRnR7BGkT4zYxOAbHEGV/qUU+G23NoErXmth
oG8Mz7mkYqMDRnNkZbheX1+5rZgkvhq3r9SOhc+uMqyx3TReiJE9tu+D219E3PqB
PukqRJ8Opk2GYF2DX1hPrz1bXsucXk+fmMgqk+PD14lrCE991gT7CUV31wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJyFsCLuz04HY9lmNK/eaZfbN9gMB8GA1UdIwQY
MBaAFCTSgH6uJqZ9Prwl7VD/5UNLxmxSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lNTM0NGQtNWVjMy00MGVlLTg2MTIt
Zjk5YTNkZDk5ODI2LzEvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9lNTM0NGQtNWVjMy00MGVlLTg2MTItZjk5YTNkZDk5ODI2
LzEvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj1l15EHn
r/q6UdhlweRfPNNb6w5/2iY7VCWTK0y5x05fpUW4OmCFXyfsCFPEnG16sda4hh0T
HFOCqgyl78ejiy3xMMHMI6uVCYz9yIG2LAw4BKVroEzjFZhFo2mO2BJvq/7JnqBe
tVwhFjKv00n1B4UDbdWEQyuh18Vs224RSdhBr3rquK/sk0jW1zMC51OGyWlB26rw
ldxQ4F9t0aDnBelOrcVQ4SYzDP8KDSNjkOE1d+B6fUJhiHzirJixIyKk1Hmw1ePn
yp84naO4IaSNPrFqO7E1oFI8/5bH4AvfX5nIDr2pbks0HxJDEoGi+s5u3Nrxsn/Y
AiIjdN7Yhwb2AQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:08:30 2026 by rpki-client