Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
File: JNm7BTDf4yKPg7CGE5LihFk0tpg.mft (raw, json)
Hash identifier: auuf+MSSWoqwMfCetzpaq9LOC36q2RbagMwZUvx3mus=
Subject key identifier: 16:F7:A0:E4:6B:26:8B:0C:3B:94:54:19:75:9C:37:76:AD:35:67:C5
Authority key identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
Certificate issuer: /CN=24d9bb0530dfe3228f83b0861392e2845934b698
Certificate serial: 019FABD11355928545CE19F8E13FA9C81642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
Manifest number: 19D2
Signing time: Wed 29 Jul 2026 03:00:33 +0000
Manifest this update: Wed 29 Jul 2026 03:00:33 +0000
Manifest next update: Thu 30 Jul 2026 03:00:33 +0000
Files and hashes: 1: JNm7BTDf4yKPg7CGE5LihFk0tpg.crl (hash: hq37m2RnACAaMf2hKJac8wcc9efQr9MuGamN/h8hjKc=)
2: of1ZOsMHp_mh7IEEJP4_o4HLJfM.roa (hash: 1EXbUVtSBjioTg80JwxjnFqS0TnS0UjDFk3emb+9E38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:13:55:92:85:45:ce:19:f8:e1:3f:a9:c8:16:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9bb0530dfe3228f83b0861392e2845934b698
Validity
Not Before: Jul 29 03:00:33 2026 GMT
Not After : Jul 30 03:00:33 2026 GMT
Subject: CN=16f7a0e46b268b0c3b945419759c3776ad3567c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ac:12:3d:b2:d7:e4:34:53:0e:50:53:f4:67:
78:cd:c4:64:1a:00:a1:52:bd:fc:5f:29:8e:d6:50:
08:d9:f5:fb:23:06:2c:22:28:4e:14:61:0d:10:a3:
34:d9:3f:33:37:c4:72:97:1e:c5:d5:f0:16:16:82:
73:0b:ac:66:f0:f4:d6:f8:c4:64:83:7e:ab:a6:b6:
2e:d4:28:b5:9b:26:9e:c9:db:5e:84:5d:ad:0f:24:
72:3f:16:dc:a3:d3:0f:19:97:49:b3:77:62:dc:62:
d0:40:35:d8:bd:74:e9:37:9f:f7:a2:69:52:a8:03:
60:a6:c0:96:1d:93:b0:0b:01:3a:27:19:e5:5e:b3:
91:a6:29:94:9f:1f:8b:9b:c5:56:ed:1d:c9:72:c2:
22:72:dd:e5:ed:54:7b:2b:3e:17:40:cf:c2:be:a7:
14:07:12:b7:57:6e:0f:83:5a:3a:41:77:8b:3e:e6:
6f:12:7c:a1:41:60:d9:e1:75:cf:c1:cb:99:81:55:
e7:56:1a:4d:c6:39:26:87:a2:be:7d:b6:88:b6:10:
76:d3:5a:71:8f:dc:d2:51:fb:79:f3:b6:16:c4:a8:
42:46:2d:21:ab:6a:72:c6:6f:5a:fa:40:ad:fc:c2:
89:1b:1e:f0:6a:ac:26:36:0a:b4:fc:51:66:fc:43:
5e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F7:A0:E4:6B:26:8B:0C:3B:94:54:19:75:9C:37:76:AD:35:67:C5
X509v3 Authority Key Identifier:
keyid:24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6a:89:2f:be:28:9d:7e:47:b3:59:7e:8b:eb:9c:8a:31:76:
35:2c:c5:ee:16:e6:9e:fd:49:47:ec:ed:34:5f:0b:be:41:b3:
1f:27:68:9c:22:55:ab:04:61:c7:74:76:a9:25:a0:b3:67:46:
88:fa:14:6c:59:c6:f6:99:50:0d:c5:a9:10:ae:61:fe:4a:98:
64:be:5e:a4:5f:dd:24:95:5e:75:6f:a3:bf:a3:b7:17:cf:55:
04:33:8a:4e:a4:93:17:b3:50:fc:3e:70:64:33:e4:06:5d:17:
2d:aa:76:91:60:7d:d7:26:5f:b5:c1:fa:81:5b:09:5f:0b:fa:
cc:d2:ed:be:f9:b7:df:77:6d:50:cd:71:e0:77:9f:4e:d3:d6:
65:c9:ab:ae:83:dc:86:e6:bd:a0:ad:6f:b0:12:b2:37:9e:db:
8f:a9:49:20:b0:4e:eb:30:6a:ce:fe:86:c8:ec:f6:d8:17:09:
41:dd:59:2e:29:2e:d0:e2:d1:47:55:6b:de:c7:1a:34:8e:ad:
79:57:d7:89:1e:1f:a5:c5:d1:94:35:dd:cb:df:da:9d:4a:b8:
a8:e5:cb:9e:f9:70:18:03:2d:35:a6:43:a2:0b:ff:8c:fe:dd:
c2:61:fe:9c:f3:82:cf:be:fa:bf:d9:54:be:e3:55:e2:4f:10:
a1:ca:d7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:28:49 2026 by rpki-client