Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
File: JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json)
Hash identifier: Y3Rn/LCuIfDJmkgeckU4070XzQPuuBBJjzSyYgHssX8=
Subject key identifier: E8:E2:19:8D:E2:7B:25:32:B1:40:BD:DB:A4:2C:DC:A2:54:89:04:A5
Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
Certificate issuer: /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Certificate serial: 019FA7BD4D9EC7E194C7BD10F907B9F6BC36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 08:00:29 +0000
Manifest this update: Tue 28 Jul 2026 08:00:29 +0000
Manifest next update: Wed 29 Jul 2026 08:00:29 +0000
Files and hashes: 1: FCljHGHovqzN4BKCv8IM4kFItQI.asa (hash: NVB42NAGkeXqyUHIUWyyW/hOv6nAj+V3g5qKcFOSaJk=)
2: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: HwuFuiZxpkBPUdF+0mP4z2EdLxeh/QUSuls9OAsbkgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:4d:9e:c7:e1:94:c7:bd:10:f9:07:b9:f6:bc:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Validity
Not Before: Jul 28 08:00:29 2026 GMT
Not After : Jul 29 08:00:29 2026 GMT
Subject: CN=e8e2198de27b2532b140bddba42cdca2548904a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:01:a3:7b:7f:82:6e:ed:17:14:bc:30:87:
63:19:77:90:26:47:08:5b:fd:09:26:b6:80:70:63:
04:60:b4:28:16:30:2e:a3:a2:e1:95:71:5f:1e:08:
24:3c:64:f4:61:9e:91:ec:cc:8c:a4:de:bd:46:04:
53:07:f3:e5:7e:80:39:40:31:18:49:44:7e:5d:2c:
5e:a2:d5:83:70:4e:09:45:f6:7e:3a:6a:5d:44:29:
ae:42:4c:8b:a5:7d:44:3d:86:90:24:17:53:b3:bd:
b1:dc:d0:48:02:30:ae:e7:e7:56:ba:96:3f:69:65:
a0:16:b5:64:9d:a2:b5:c0:c7:44:fb:f5:e0:13:31:
1c:1d:96:ca:6f:81:48:fc:28:17:60:a0:b4:02:83:
74:6b:bc:d8:c8:57:49:89:4a:dd:a6:ef:97:02:be:
b6:f4:7f:2a:00:46:33:49:f1:c1:03:04:ef:e0:8a:
c3:ba:dc:d4:ec:0a:9b:23:40:af:c3:5c:7a:84:98:
e7:95:7b:9c:ba:39:b0:3b:3d:8d:2d:75:0a:14:f2:
c6:31:75:f8:df:df:b1:16:9d:78:37:ef:26:3f:17:
89:47:90:4e:f6:23:de:7d:c8:ef:f1:0b:9f:82:fe:
e5:16:c6:cd:c6:0b:19:91:74:f2:61:ef:ad:d8:04:
13:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E2:19:8D:E2:7B:25:32:B1:40:BD:DB:A4:2C:DC:A2:54:89:04:A5
X509v3 Authority Key Identifier:
keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d2:70:ca:27:55:b5:ca:2d:56:12:13:a5:b0:6c:31:11:19:
0b:95:66:6a:c0:e1:c0:51:1d:5c:ab:bc:4d:f6:ab:00:e9:b6:
42:09:20:c0:11:be:52:09:fb:92:8e:f2:be:ec:24:75:28:d2:
05:8f:58:40:fb:7c:12:65:6c:ae:1f:b2:c7:c7:71:31:43:bc:
7f:14:69:56:43:86:73:1f:44:97:9d:57:06:95:39:ad:f1:b0:
a8:99:d5:ea:bb:6a:01:dc:9e:ed:ed:15:96:a9:20:ad:7b:d0:
b9:9a:b7:33:88:23:41:01:64:7c:00:16:7a:51:20:16:4e:b2:
6a:9f:ba:f4:20:34:b9:54:e9:e7:fe:be:4c:47:6e:5c:81:49:
88:8e:f1:0b:67:15:61:ea:51:62:d8:3c:ab:cb:f7:6e:28:11:
2d:a1:d0:f5:31:55:cd:8c:ac:b0:7f:e8:6f:28:f6:72:05:22:
cf:87:d9:7b:c5:d6:8f:e0:74:21:9d:af:0a:cd:c5:54:56:54:
46:1c:7c:6d:26:f4:7b:06:ef:b0:96:f1:bf:55:41:39:88:ff:
00:56:0b:16:af:82:ac:09:76:81:e4:d0:b4:33:cd:c2:ea:b9:
1c:80:c1:a1:9a:90:41:81:30:94:a0:2f:3c:f4:4a:8b:0a:d5:
cc:4a:f9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:07:37 2026 by rpki-client