Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
File: JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json)
Hash identifier: 10XhPgOG71yiJZpyl3LvCjQCMkqQRy32iW6bBFYPIM0=
Subject key identifier: 8F:33:CF:CA:68:DA:F4:6A:56:81:3E:75:6F:68:30:34:76:6B:A0:06
Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
Certificate issuer: /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Certificate serial: 01A1AB2783CC52932612191D956B1BE65F82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
Manifest number: 1AE0
Signing time: Thu 05 Nov 2026 10:00:55 +0000
Manifest this update: Thu 05 Nov 2026 10:00:55 +0000
Manifest next update: Fri 06 Nov 2026 10:00:55 +0000
Files and hashes: 1: 30ysbftw_D4n6jWsjQTM0UTzylo.asa (hash: 6Se9XkdxHIZE7HtdPW3EYh1bEmfcbzom2szFR4ZRIdU=)
2: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: en9XD7+ImWfb6TN5ocRAXfaALPIXE7dQ1aeCFHB0DZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:27:83:cc:52:93:26:12:19:1d:95:6b:1b:e6:5f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Validity
Not Before: Nov 5 10:00:55 2026 GMT
Not After : Nov 6 10:00:55 2026 GMT
Subject: CN=8f33cfca68daf46a56813e756f683034766ba006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:49:07:3f:0f:d2:54:9f:a9:5a:51:94:ab:78:
7d:4b:23:2a:ef:01:9a:6f:58:f8:e1:49:8c:0b:2e:
ef:03:9c:fa:f1:89:bb:10:6f:d2:b7:a2:7c:95:bd:
6a:fc:ff:9c:b9:3d:a1:b9:4e:07:11:6b:e5:e9:6c:
6f:e1:c5:b6:c4:61:53:e8:a5:68:0e:39:63:60:64:
40:32:7b:9a:59:d7:05:e8:8a:da:79:3c:f0:07:b9:
3a:a0:23:cb:6d:e8:a8:b3:21:06:51:d9:c4:f2:c2:
b1:4b:0c:bb:e8:72:d2:a3:e8:3e:ef:6d:1f:e3:19:
6b:d1:11:a8:2a:cc:40:bb:54:b4:7e:0a:76:9d:39:
0a:6c:8d:e9:9a:63:7d:02:69:14:4c:b8:77:6f:f4:
91:09:16:69:84:85:62:ce:3b:57:7f:b9:fd:ae:e9:
9e:74:36:be:5d:cb:f4:a4:92:4e:91:1a:32:01:43:
20:68:9b:f3:b0:74:f2:50:71:9a:80:27:f1:fd:aa:
24:bd:5f:df:cd:55:d0:0f:dd:e1:26:76:c6:04:15:
ec:9f:dd:59:02:9c:d4:3f:2e:54:27:09:06:f9:9e:
9d:8a:f3:77:ac:db:9b:82:c2:a3:b7:a9:be:e1:8d:
f2:ef:ea:bb:57:a1:9c:fd:cc:17:94:76:fe:01:69:
b8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:33:CF:CA:68:DA:F4:6A:56:81:3E:75:6F:68:30:34:76:6B:A0:06
X509v3 Authority Key Identifier:
keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:61:82:e7:f2:ca:f9:f0:37:76:2d:d9:10:5b:a5:80:46:35:
31:b2:be:8d:47:4b:73:c3:75:b3:84:ab:ae:d9:ac:a1:b4:e7:
b4:c1:c8:01:42:6f:f6:92:a7:2e:18:65:fe:d8:9c:e2:a0:82:
e6:6d:83:cf:80:f9:e9:3b:cc:92:ba:63:45:9e:c8:68:5d:67:
28:49:49:36:eb:35:6a:29:ac:a3:f5:d1:cc:22:f4:bd:74:d4:
e5:46:09:b1:9d:e0:f0:a4:3e:1d:8b:83:75:ee:8c:d2:a7:eb:
da:7f:f9:86:7c:77:85:87:f6:d5:9e:77:ae:51:3e:c6:3b:99:
4a:a0:d1:74:db:5a:45:14:01:c0:11:d5:55:30:1e:ed:34:67:
cd:ea:87:62:ba:6a:b1:47:28:b9:0c:92:c3:b7:7e:a5:ce:42:
0e:32:b4:ec:94:bf:a9:85:03:6b:a2:7e:92:4a:85:57:ae:90:
90:0b:18:5c:96:8a:d3:c0:32:3f:0a:2e:21:a0:0e:4b:c1:26:
76:ea:d3:d0:67:18:ae:65:62:4d:d1:8a:63:c5:8a:87:55:3c:
89:63:f8:2c:7e:0b:f5:19:8d:85:9f:20:d7:16:a0:d7:54:61:
cc:0d:7b:c5:30:4e:8a:8a:16:09:a8:a5:f6:84:29:5e:f1:a0:
cf:cb:96:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 20:01:08 2026 by rpki-client