Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: lzsctAf+Dwjz+BXOKV46iGSPegmkTd704ZKdiG1hkWU=
Subject key identifier: 53:11:63:D5:2A:C9:FC:6F:06:1C:39:07:E4:A7:07:18:74:63:1E:2C
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 019CA9B3F1F44214400967603A1DF6D79782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 0AD1
Signing time: Sun 01 Mar 2026 14:01:08 +0000
Manifest this update: Sun 01 Mar 2026 14:01:08 +0000
Manifest next update: Mon 02 Mar 2026 14:01:08 +0000
Files and hashes: 1: 7CXGDptf2okcN_TUuRa0vGLyCaQ.roa (hash: uAwFHhRb6M0iaad5i6SJTir06b/xHTrf77HmrAGNoN0=)
2: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: obfJMmTRiTX9DLXJAynTmHHYAcisr8PE2Yz3tU1fzg4=)
3: mp7eBUGX1B69vxK-CwJzFulzqZk.roa (hash: yIxwbLnT118Vwlqh6tg/BfTUPJnypGV001BfjuX6b44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:f1:f4:42:14:40:09:67:60:3a:1d:f6:d7:97:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Mar 1 14:01:08 2026 GMT
Not After : Mar 2 14:01:08 2026 GMT
Subject: CN=531163d52ac9fc6f061c3907e4a7071874631e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:3f:96:0f:fd:64:c2:c1:de:72:15:cd:c9:
08:57:e0:ba:7f:3f:96:31:d5:11:a2:d1:b8:88:c7:
0e:12:19:93:8e:4c:b7:18:d0:af:54:21:9c:bf:18:
d8:33:98:f7:97:22:9c:5a:15:7e:5f:47:f5:6c:84:
16:d7:ca:4d:5f:25:e0:c0:69:71:87:bb:25:c4:62:
7f:eb:53:c0:97:f0:7a:b8:4e:e1:ab:80:7b:0d:97:
08:ba:dd:3a:a6:56:5f:ea:74:35:8d:0c:e4:4d:84:
8d:72:fe:46:b8:80:aa:06:f3:f5:99:b5:36:c3:8d:
d9:1c:2a:9a:87:33:93:65:9b:44:41:eb:ed:fa:2a:
d0:77:61:88:c3:6c:55:b7:12:f2:50:b2:52:1a:38:
b7:42:90:e8:4f:77:b5:73:26:ec:40:a5:16:95:09:
f9:32:10:37:d5:03:8a:c0:e2:ab:08:0a:3a:c5:f4:
69:fd:5b:b2:8c:af:6d:95:24:8b:06:d5:41:36:15:
df:95:72:e1:cd:b8:18:54:cf:f1:98:57:b6:5d:69:
89:c4:7b:bc:24:f3:01:5b:bc:00:f8:4f:dd:21:d9:
21:d4:b9:ac:d5:3a:e3:b9:66:66:27:46:d2:73:8c:
7f:00:bc:48:92:cb:d9:e3:1d:15:ed:a7:86:11:c0:
28:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:11:63:D5:2A:C9:FC:6F:06:1C:39:07:E4:A7:07:18:74:63:1E:2C
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fc:11:49:8b:25:41:9e:97:0e:92:bc:fc:d7:ce:c8:ab:c1:
c3:52:5b:ca:88:52:a1:32:c2:b5:90:26:27:97:1b:3b:d5:04:
5f:ea:11:a4:d1:43:e8:c0:1c:b6:d9:2b:dc:7b:c0:d7:f3:98:
35:56:2e:73:e1:a2:47:9c:49:a1:86:41:fc:6b:59:7c:3c:cb:
3f:0e:f5:ac:d0:00:19:dd:15:47:20:b4:d0:74:6d:c1:a6:47:
96:a0:1f:43:e7:5c:74:38:a7:0a:5c:3d:01:ce:53:ea:1d:b2:
b8:c4:6c:ef:e6:f5:89:02:26:67:b9:1f:4c:f4:57:23:c5:99:
6f:0b:ba:37:1f:75:00:34:57:d9:b9:7b:48:3b:1c:24:76:88:
70:24:3c:f1:72:84:e1:2a:e9:6c:fa:06:35:c9:01:b5:ec:2e:
07:21:66:a7:88:d1:ce:6a:fa:ab:5e:0c:1e:12:ab:d6:6b:a1:
30:ae:7e:36:1f:73:2c:c0:76:b7:28:70:4d:ba:32:dd:d9:b4:
f5:ae:a8:ba:3a:7d:97:a4:c7:c9:36:9a:53:9e:7c:3f:6f:2b:
3e:d5:63:7d:15:3c:ff:44:af:ae:30:c5:94:7b:4f:43:0d:0d:
c2:39:24:02:55:97:0e:dc:75:ab:45:24:c1:b7:f9:26:24:8d:
59:82:05:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:23:38 2026 by rpki-client