Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
File: JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json)
Hash identifier: NbEUNEoYvJ6E3fle6K8vKovGRnFiRo1W2FFQM2xHvxM=
Subject key identifier: 19:A0:F9:B7:96:FE:FC:04:53:2E:59:30:1B:CC:25:65:6A:7D:13:5F
Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
Certificate issuer: /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Certificate serial: 01A0BF8CCB6B4FCEBAF22BCACD54796C8A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
Manifest number: 1A66
Signing time: Sun 20 Sep 2026 16:01:10 +0000
Manifest this update: Sun 20 Sep 2026 16:01:10 +0000
Manifest next update: Mon 21 Sep 2026 16:01:10 +0000
Files and hashes: 1: 30ysbftw_D4n6jWsjQTM0UTzylo.asa (hash: 6Se9XkdxHIZE7HtdPW3EYh1bEmfcbzom2szFR4ZRIdU=)
2: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: Y2gSxRkR3bwWpS9AjEdvta7W7BF4XPID/zNDtFSzUfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:8c:cb:6b:4f:ce:ba:f2:2b:ca:cd:54:79:6c:8a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Validity
Not Before: Sep 20 16:01:10 2026 GMT
Not After : Sep 21 16:01:10 2026 GMT
Subject: CN=19a0f9b796fefc04532e59301bcc25656a7d135f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:15:7c:05:76:70:f1:d4:7c:c8:ff:a2:be:95:
12:7d:39:b7:90:5f:3d:25:fd:95:1b:85:1f:cf:ae:
c4:09:bd:a9:df:7c:d1:ce:3f:d2:33:90:78:83:76:
13:48:36:59:ff:a3:66:26:18:5f:80:d5:61:2e:ef:
c8:6c:67:e4:76:92:e9:bd:16:26:2f:6c:79:67:5b:
3b:2d:73:78:f6:2b:7a:c8:6b:ab:d0:be:2d:ff:a7:
33:35:e0:67:2f:62:4c:45:7c:49:34:16:1d:76:29:
7d:37:f7:9f:a8:ac:3b:65:f1:05:6a:c9:2b:24:6f:
ea:40:96:56:d2:72:1a:ef:7c:1d:9f:1d:5b:17:a9:
56:0b:7f:69:77:49:03:75:41:70:c1:6e:b4:f0:4d:
2f:25:f6:a8:cd:54:f0:c6:e7:73:ac:49:08:b6:dd:
b6:21:3e:fb:9d:ec:e3:42:1d:dd:cf:88:1b:dc:50:
2a:31:a1:24:7d:ee:4b:d7:c7:b2:2c:24:09:70:34:
79:59:a8:a0:c3:32:d1:c5:5c:c7:89:61:59:ed:a6:
4a:87:bc:61:b5:48:fc:e3:4f:93:84:04:cd:be:3e:
cb:07:3f:c4:5c:fe:e7:00:d9:5f:ec:b9:88:26:10:
78:b2:3d:fd:c6:74:59:3d:37:be:be:7e:57:a9:5f:
76:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A0:F9:B7:96:FE:FC:04:53:2E:59:30:1B:CC:25:65:6A:7D:13:5F
X509v3 Authority Key Identifier:
keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f1:40:14:6d:9d:ed:dc:9e:8e:ba:fd:c1:07:83:93:0b:d3:
7d:80:31:da:00:43:0c:9d:22:67:38:1f:0b:7d:f0:0d:2e:83:
d7:87:87:df:cb:a6:66:aa:29:8b:34:ce:c2:81:c5:9f:7e:a3:
6a:a9:0c:11:ef:52:c3:75:36:fa:29:e2:6c:94:4e:e3:27:9c:
cf:41:4c:93:9e:3a:19:f1:6b:11:17:b1:db:08:d6:ff:eb:5b:
10:61:ef:df:c5:39:52:bf:dc:d8:b2:0c:f9:77:62:cd:56:03:
86:f5:9b:cd:c9:26:9d:79:be:1f:e4:45:5b:b3:fb:94:e2:b8:
19:19:ef:80:4b:c0:ec:23:77:92:86:f0:1d:72:46:ba:5b:1f:
45:7e:17:48:4e:22:6b:c3:06:49:d5:5f:c5:e9:1d:c2:55:94:
10:d5:11:58:50:be:48:5e:5c:49:40:3e:e6:0b:a4:85:21:c1:
80:49:e3:2c:c6:33:fa:f3:81:d3:9a:a2:7d:a2:f9:df:58:09:
00:75:86:83:e5:c0:9f:d7:61:4e:5a:1e:4c:f2:a1:af:0b:b9:
69:68:03:bb:ea:a9:74:23:b9:29:d2:de:25:4b:ec:17:05:8b:
f5:18:e4:6c:89:7f:04:2f:14:d4:aa:21:26:ae:44:5b:e4:7b:
98:fb:e1:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC/jMtrT8668ivKzVR5bIoSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NDM5MjNlNzczZWIyNzA0OTJhZWNjOGRhMTVjMmU1Y2E1
N2MyY2EwHhcNMjYwOTIwMTYwMTEwWhcNMjYwOTIxMTYwMTEwWjAzMTEwLwYDVQQD
EygxOWEwZjliNzk2ZmVmYzA0NTMyZTU5MzAxYmNjMjU2NTZhN2QxMzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxV8BXZw8dR8yP+ivpUSfTm3kF89
Jf2VG4Ufz67ECb2p33zRzj/SM5B4g3YTSDZZ/6NmJhhfgNVhLu/IbGfkdpLpvRYm
L2x5Z1s7LXN49it6yGur0L4t/6czNeBnL2JMRXxJNBYddil9N/efqKw7ZfEFaskr
JG/qQJZW0nIa73wdnx1bF6lWC39pd0kDdUFwwW608E0vJfaozVTwxudzrEkItt22
IT77nezjQh3dz4gb3FAqMaEkfe5L18eyLCQJcDR5WaigwzLRxVzHiWFZ7aZKh7xh
tUj840+ThATNvj7LBz/EXP7nANlf7LmIJhB4sj39xnRZPTe+vn5XqV92pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmg+beW/vwEUy5ZMBvMJWVqfRNfMB8GA1UdIwQY
MBaAFCZDkj53PrJwSSrsyNoVwuXKV8LKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmtPU1BuYy1zbkJKS3V6STJoWEM1Y3BYd3NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wNjMxYTctNDE2Yy00MWJlLThlNDUt
NzhjMzdjMGIwZDk3LzEvSmtPU1BuYy1zbkJKS3V6STJoWEM1Y3BYd3NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wNjMxYTctNDE2Yy00MWJlLThlNDUtNzhjMzdjMGIwZDk3
LzEvSmtPU1BuYy1zbkJKS3V6STJoWEM1Y3BYd3NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/FAFG2d
7dyejrr9wQeDkwvTfYAx2gBDDJ0iZzgfC33wDS6D14eH38umZqopizTOwoHFn36j
aqkMEe9Sw3U2+inibJRO4yecz0FMk546GfFrERex2wjW/+tbEGHv38U5Ur/c2LIM
+XdizVYDhvWbzckmnXm+H+RFW7P7lOK4GRnvgEvA7CN3kobwHXJGulsfRX4XSE4i
a8MGSdVfxekdwlWUENURWFC+SF5cSUA+5gukhSHBgEnjLMYz+vOB05qifaL531gJ
AHWGg+XAn9dhTloeTPKhrwu5aWgDu+qpdCO5KdLeJUvsFwWL9RjkbIl/BC8U1Koh
Jq5EW+R7mPvhVA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 22:26:45 2026 by rpki-client