Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: l62Fhthl/yAmr32EFnNPC2pz3UA/WhNy/7EpD+nvqRE=
Subject key identifier: CC:B1:BF:E2:E1:C3:A0:D0:C7:10:F5:9F:D8:01:3F:D7:CF:B9:81:DD
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 01A0C444E5030E13B313E40BA189D50C43B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 0CF2
Signing time: Mon 21 Sep 2026 14:00:44 +0000
Manifest this update: Mon 21 Sep 2026 14:00:44 +0000
Manifest next update: Tue 22 Sep 2026 14:00:44 +0000
Files and hashes: 1: 80ILhoqGZSBKNX5Iy2cNCAyJb74.roa (hash: k6RMwpsO22pGIm9dpIOntkuacDWIQ01zOqnH6Be8QXU=)
2: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: /Sbd0NcXz9dPULtWL+m9KJgwseEGoxf+WZYWn4tZTh8=)
3: UHBKB5DuCWOk2pbJd-90ewsu0MY.roa (hash: sEHGvoM4XfIy3O+HYwpWVDG3FHkWEr0D2jB6POjci38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:e5:03:0e:13:b3:13:e4:0b:a1:89:d5:0c:43:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Sep 21 14:00:44 2026 GMT
Not After : Sep 22 14:00:44 2026 GMT
Subject: CN=ccb1bfe2e1c3a0d0c710f59fd8013fd7cfb981dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:19:40:9b:83:6d:f1:8c:f8:8d:b4:35:ee:f3:
85:ca:ca:14:c9:0c:0c:e8:7b:21:c0:5b:63:fb:91:
c6:bf:86:36:c5:25:d6:fe:06:bb:8c:fb:9e:e0:df:
d0:8e:d1:e5:28:f8:0a:ef:ba:0c:91:e4:94:4d:6b:
89:b9:04:30:57:0c:b6:6d:d2:4a:81:b7:21:ac:4b:
04:5a:8f:56:9d:c0:1f:38:c3:9b:e9:1a:49:8d:e8:
42:06:ff:6d:e4:ca:8f:ea:e1:20:08:e5:db:3f:81:
38:62:28:96:6f:a1:67:69:c4:10:82:27:f2:2f:8c:
c5:1b:20:49:28:2b:e9:6c:bd:b4:3d:7c:6e:3d:08:
81:56:c3:45:8b:3f:63:98:63:26:09:f3:15:88:88:
f0:c6:23:33:bd:84:8e:b3:21:12:ad:4e:ef:c5:09:
9f:77:5e:71:37:f7:c3:56:5f:a6:23:7a:fe:db:d8:
6e:4d:a7:e4:fd:6a:c9:d6:b3:d2:c8:ae:c4:50:5e:
c9:ec:1f:65:ba:0f:f5:23:79:d1:51:1a:11:13:96:
fc:3b:81:88:21:0a:88:c6:5c:98:e0:05:2e:da:94:
5f:b0:c9:5e:f4:97:c8:de:17:d1:0c:96:16:0a:66:
ea:12:4f:2d:af:5a:1d:1d:22:09:3b:2e:7e:30:a5:
e7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B1:BF:E2:E1:C3:A0:D0:C7:10:F5:9F:D8:01:3F:D7:CF:B9:81:DD
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c0:3d:b9:49:dd:e2:99:be:bd:d9:47:4b:5f:4b:b5:4b:9b:
b0:c0:99:c1:be:5a:0d:0e:1c:ef:c2:9a:95:88:9a:3e:ab:6e:
93:78:ef:30:8c:bd:8a:62:01:a1:59:0f:ca:9d:d5:ed:37:cc:
3c:bd:e9:8c:ab:77:c5:56:3f:14:84:24:a5:9e:a0:7d:b6:3c:
69:40:5f:4d:d1:20:86:5c:80:1f:1e:a9:37:cf:24:ee:d5:c9:
c8:f7:b8:af:06:3e:69:1a:e2:28:f1:8f:50:7a:5c:2b:2f:98:
a5:34:6b:6d:d4:35:6b:e2:25:13:39:6e:f2:a0:99:1d:fc:a5:
56:54:e9:cf:15:9c:88:aa:88:bc:7d:4f:10:57:e8:01:e4:05:
3c:12:55:52:b9:35:b2:71:50:c1:d9:17:45:ae:2a:92:54:7c:
82:66:07:00:d6:a5:ed:fc:3a:19:72:e1:26:da:79:34:a2:08:
5c:5f:5c:01:0c:7f:11:f7:7a:45:ec:4e:1e:af:ce:72:51:2c:
c6:05:9a:52:5e:ee:d3:eb:30:ad:78:a0:a1:6f:21:00:49:87:
84:d8:c6:13:32:4e:95:e9:d9:5b:59:38:cb:5a:bb:0d:a5:38:
95:45:4c:a8:04:d4:92:0e:62:b8:58:25:bf:ca:b9:79:c2:e5:
12:c5:46:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:49:54 2026 by rpki-client