Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: j969+V34Ac3scXmwOGW3P7JGMyTlUkickOMCSNdCoZ4=
Subject key identifier: 8A:4D:37:94:06:45:B0:8E:DD:3A:D0:E4:5E:A5:C7:F7:00:9C:7F:C0
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 019FAC3ECA8E4D24B71DAC80670C3E150332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 0C61
Signing time: Wed 29 Jul 2026 05:00:23 +0000
Manifest this update: Wed 29 Jul 2026 05:00:23 +0000
Manifest next update: Thu 30 Jul 2026 05:00:23 +0000
Files and hashes: 1: 80ILhoqGZSBKNX5Iy2cNCAyJb74.roa (hash: k6RMwpsO22pGIm9dpIOntkuacDWIQ01zOqnH6Be8QXU=)
2: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: w3WyeeSxXwkV2+iZxAQXrGfv6AfbecsOy+sSvW4Lqm4=)
3: UHBKB5DuCWOk2pbJd-90ewsu0MY.roa (hash: sEHGvoM4XfIy3O+HYwpWVDG3FHkWEr0D2jB6POjci38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:ca:8e:4d:24:b7:1d:ac:80:67:0c:3e:15:03:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Jul 29 05:00:23 2026 GMT
Not After : Jul 30 05:00:23 2026 GMT
Subject: CN=8a4d37940645b08edd3ad0e45ea5c7f7009c7fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ef:3a:f4:52:4f:10:f9:39:71:99:c6:6a:f4:
ca:d1:c3:e7:bf:99:79:5c:c9:25:1a:fd:f4:75:1a:
9a:15:43:d3:e6:6f:4a:ad:42:bc:e1:c2:6f:aa:d8:
ba:4c:14:eb:3b:71:fa:98:a7:34:df:82:ae:c8:6a:
15:13:97:c0:45:df:5a:7d:77:24:f1:83:ba:a3:7f:
e4:76:df:f3:a8:06:ce:af:18:75:1c:b9:59:70:3c:
5d:f0:ae:49:c6:5b:ca:e0:2b:c6:df:11:9e:d2:ac:
a2:00:cd:2f:d9:de:99:7d:12:01:16:11:e5:f0:c0:
4f:38:25:f2:b4:2c:52:1e:4b:01:ff:51:3a:2b:18:
4a:d8:67:9f:68:b7:d6:4d:68:a6:8c:d8:65:e1:c6:
be:bd:88:bc:4c:eb:19:f3:b9:07:e7:72:0d:49:d7:
c3:f3:93:63:8d:e8:40:87:f6:9a:12:5c:5c:c0:ff:
5a:b8:ef:67:7a:13:86:fb:c9:d1:63:68:6f:3c:74:
f9:07:0b:f7:ee:0e:b9:b1:b0:a3:d0:d4:39:bf:48:
84:96:3f:32:ce:d9:e0:a8:96:41:6e:81:44:2d:a1:
e5:d6:e8:4b:e8:fd:23:88:7f:7c:a1:c6:e1:fe:fe:
b5:70:22:5b:d8:44:45:95:b1:f0:2f:e5:b3:9e:29:
c5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4D:37:94:06:45:B0:8E:DD:3A:D0:E4:5E:A5:C7:F7:00:9C:7F:C0
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:27:99:bd:98:59:3b:27:7e:fa:23:c5:51:99:88:f3:cb:7c:
94:c0:d2:2a:81:5b:4c:06:34:ef:98:25:ad:38:25:13:9e:e1:
43:ee:b7:7f:2b:2a:52:c8:7e:d0:48:48:e7:6b:c0:09:e5:bd:
c5:c4:9d:c9:26:2f:de:63:5a:ae:ec:ab:5f:c5:37:b1:e4:ec:
86:48:46:04:8d:a2:55:49:3c:c7:29:ad:c8:fb:90:e6:57:f8:
51:a3:c2:f6:f9:05:95:4e:fa:1a:32:67:24:0f:ef:5d:5d:a5:
b8:46:72:0b:72:79:0f:6e:4f:35:d9:03:e4:ff:dc:3b:bc:ad:
17:e2:2d:66:e0:4d:dd:3d:d7:60:4b:bd:b4:fe:06:9b:63:8f:
04:1c:93:f3:78:4c:5c:86:93:c6:ec:0a:03:cb:dd:1e:3a:07:
0d:8b:36:7f:a6:57:02:92:18:10:3d:a5:c8:36:ff:99:0f:0c:
c6:86:7c:2c:2f:cf:7d:75:e7:aa:fb:3c:e8:ba:70:7d:40:1c:
d6:40:38:ef:0e:17:3f:62:da:20:25:d9:d7:8d:47:b7:f8:05:
8a:3a:ce:7f:a7:34:6d:d8:bf:30:20:03:65:0f:43:e6:9d:44:
63:8a:4c:0d:93:f9:e0:93:b6:5f:3d:27:85:67:bb:9e:bc:7f:
0d:cb:94:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sPsqOTSS3HayAZww+FQMyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDQ3MDIxNGM2OWU0MzBmOGIzODVlMDkzNmFkOTYwMTY2
YWNkZjAwHhcNMjYwNzI5MDUwMDIzWhcNMjYwNzMwMDUwMDIzWjAzMTEwLwYDVQQD
Eyg4YTRkMzc5NDA2NDViMDhlZGQzYWQwZTQ1ZWE1YzdmNzAwOWM3ZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+869FJPEPk5cZnGavTK0cPnv5l5
XMklGv30dRqaFUPT5m9KrUK84cJvqti6TBTrO3H6mKc034KuyGoVE5fARd9afXck
8YO6o3/kdt/zqAbOrxh1HLlZcDxd8K5JxlvK4CvG3xGe0qyiAM0v2d6ZfRIBFhHl
8MBPOCXytCxSHksB/1E6KxhK2GefaLfWTWimjNhl4ca+vYi8TOsZ87kH53INSdfD
85NjjehAh/aaElxcwP9auO9nehOG+8nRY2hvPHT5Bwv37g65sbCj0NQ5v0iElj8y
ztngqJZBboFELaHl1uhL6P0jiH98ocbh/v61cCJb2ERFlbHwL+WzninFNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpNN5QGRbCO3TrQ5F6lx/cAnH/AMB8GA1UdIwQY
MBaAFCTUcCFMaeQw+LOF4JNq2WAWas3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5Sd0lVeHA1REQ0czRYZ2syclpZQlpxemZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xYjk2MzctMjc5NS00ZTdjLWIzM2Yt
ZTI4Mjk1ZTU0YzNjLzEvSk5Sd0lVeHA1REQ0czRYZ2syclpZQlpxemZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xYjk2MzctMjc5NS00ZTdjLWIzM2YtZTI4Mjk1ZTU0YzNj
LzEvSk5Sd0lVeHA1REQ0czRYZ2syclpZQlpxemZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCeZvZhZ
Oyd++iPFUZmI88t8lMDSKoFbTAY075glrTglE57hQ+63fysqUsh+0EhI52vACeW9
xcSdySYv3mNaruyrX8U3seTshkhGBI2iVUk8xymtyPuQ5lf4UaPC9vkFlU76GjJn
JA/vXV2luEZyC3J5D25PNdkD5P/cO7ytF+ItZuBN3T3XYEu9tP4Gm2OPBByT83hM
XIaTxuwKA8vdHjoHDYs2f6ZXApIYED2lyDb/mQ8MxoZ8LC/PfXXnqvs86LpwfUAc
1kA47w4XP2LaICXZ141Ht/gFijrOf6c0bdi/MCADZQ9D5p1EY4pMDZP54JO2Xz0n
hWe7nrx/DcuU6Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:22:24 2026 by rpki-client