Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
File: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft (raw, json)
Hash identifier: FkIMGeRN/jD80zl5N0S0y8EtCaeO+CEut6OZVErZo4g=
Subject key identifier: 1C:1A:21:8D:91:DA:0D:0F:9A:25:16:91:87:BD:3F:0D:98:30:30:93
Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
Certificate issuer: /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Certificate serial: 01A13C006E3F67FD451C4EFA03C3AEE6EB40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
Manifest number: 1A36
Signing time: Wed 14 Oct 2026 20:00:23 +0000
Manifest this update: Wed 14 Oct 2026 20:00:23 +0000
Manifest next update: Thu 15 Oct 2026 20:00:23 +0000
Files and hashes: 1: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl (hash: q7GchkcBqMl+tgbFrhRVbvkcDVH0cZmqhZzuY6HEAY0=)
2: eL4sddmNTd7PSzARjzADz_21RBc.roa (hash: 9PP/TpfqraKWqrmb3Ro9MwG6dH8Z8rYhFZu1I649JYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:00:6e:3f:67:fd:45:1c:4e:fa:03:c3:ae:e6:eb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Validity
Not Before: Oct 14 20:00:23 2026 GMT
Not After : Oct 15 20:00:23 2026 GMT
Subject: CN=1c1a218d91da0d0f9a25169187bd3f0d98303093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3f:e7:11:22:31:14:5c:9f:98:13:e5:3b:67:
71:ef:fa:c7:55:d3:e9:64:3c:08:dc:7e:84:53:e5:
6e:99:63:30:14:37:39:1b:cf:f1:aa:22:31:9c:e1:
b6:f1:ef:9b:f9:41:a0:e3:8e:a8:0e:46:9b:b2:84:
10:bc:f5:7d:08:56:20:ca:88:04:26:48:3f:5c:e5:
92:07:a8:b7:86:03:13:6b:56:1a:8f:32:1d:6e:6d:
cb:89:2d:71:51:a5:fd:74:81:5b:9b:d4:d1:dc:d1:
ab:ae:93:d5:9d:99:24:cd:22:a9:17:18:58:2c:da:
91:49:23:82:cd:05:52:24:ad:88:31:64:a7:e2:a9:
67:4f:7c:5f:f1:59:5b:04:b0:04:45:0b:bf:73:ab:
e2:b6:1d:b0:04:d7:d5:73:e5:7b:ae:82:e1:d3:de:
ba:dc:3d:f2:89:8a:d3:12:f6:e4:66:fa:49:0d:fe:
58:df:0d:9b:ce:a8:17:c1:04:88:f4:94:4c:f6:88:
de:70:c2:67:b3:83:8c:81:2e:db:6a:e6:39:88:82:
22:eb:0c:13:80:2d:4c:22:3d:43:e6:fc:88:b8:ec:
1a:03:2d:02:95:04:95:11:93:9a:0d:1d:c2:e6:35:
ee:d3:32:28:8d:09:b7:01:9e:3c:5c:c4:b2:05:5c:
8e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1A:21:8D:91:DA:0D:0F:9A:25:16:91:87:BD:3F:0D:98:30:30:93
X509v3 Authority Key Identifier:
keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:87:9d:db:8c:d4:87:e0:7c:50:a5:6b:04:33:37:bd:67:9b:
89:4d:3f:59:8e:f6:0c:00:40:70:0c:a1:08:5d:a2:03:25:37:
85:b7:81:19:a6:36:ab:e8:8a:cf:8d:78:f5:de:a9:20:b7:65:
16:21:1a:24:d9:f7:60:50:8f:94:93:37:1f:a0:8e:ad:72:2b:
30:df:79:d5:c6:58:e9:6e:63:62:2f:3b:6c:d2:12:bb:ff:73:
7b:b0:6c:de:f9:95:cb:50:42:5a:3d:0c:41:36:f3:f1:95:f0:
f8:47:81:50:57:f8:30:7e:07:c8:ca:c5:da:74:50:66:fd:f1:
af:33:b5:ad:33:9f:d7:52:cb:4e:67:51:25:4d:72:69:24:f0:
cf:14:a7:7e:4e:a9:b3:d8:d3:18:5c:bf:71:ff:5b:45:97:33:
7c:e3:af:25:e6:9d:99:e7:1a:9f:d3:c4:5f:10:09:5b:e2:6d:
55:01:0c:09:42:41:32:7f:7c:60:61:61:d6:cc:ec:f1:b2:27:
41:6f:ee:9f:f8:8a:95:6a:93:8c:05:02:60:8b:7b:67:6d:b8:
85:ef:5c:6c:2d:f7:1a:e6:06:7a:58:9b:d7:62:e2:ec:63:c3:
9e:b5:50:8e:56:ec:f3:01:fc:7e:fd:22:26:48:4d:cc:12:7a:
67:30:3c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:43:44 2026 by rpki-client