Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json)
Hash identifier: jCA520xFza9qU0/gC6DQP7ANVJoUMsQKjjzACoax3q8=
Subject key identifier: 43:61:8C:AB:DD:A4:C4:9A:5D:33:F8:7F:43:ED:C0:37:A7:5A:4C:B1
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Certificate issuer: /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial: 019CABA1B510DEF39D5E1639089B3DE08DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
Manifest number: 0A01
Signing time: Sun 01 Mar 2026 23:00:27 +0000
Manifest this update: Sun 01 Mar 2026 23:00:27 +0000
Manifest next update: Mon 02 Mar 2026 23:00:27 +0000
Files and hashes: 1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: TKDubkegDbvn8OKcDnpYaYUZnECCtBgK9lxSb3fePVA=)
2: gWon8go1X1etoZ8VVC7MVcrh7rw.roa (hash: +h9DsffeSnMEN/znqbhxvFFiJiaGvYzj2iIhf/egNzg=)
3: nePHPrOEtQ2PBdl8CIDH53O4jYo.roa (hash: LtVuUBSEUcTSpEfdLMbOtpgX1qZbM9aciFJAh+jdl4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:b5:10:de:f3:9d:5e:16:39:08:9b:3d:e0:8d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
Validity
Not Before: Mar 1 23:00:27 2026 GMT
Not After : Mar 2 23:00:27 2026 GMT
Subject: CN=43618cabdda4c49a5d33f87f43edc037a75a4cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:39:cc:eb:bb:6f:4c:1c:03:84:2a:11:07:d7:
e7:34:19:44:9c:12:86:66:e8:e2:d2:f8:a4:27:6f:
19:b9:06:2d:49:c6:c2:63:cc:67:b2:ed:b6:67:26:
db:d0:f6:cb:0e:49:51:a8:9d:df:ab:e2:2e:15:de:
ba:9e:26:16:3d:26:50:da:50:91:68:f4:01:60:a9:
c9:d5:2e:61:d8:d0:1f:ef:15:67:95:d4:28:e9:8d:
74:ee:a9:e5:0f:3f:2f:00:87:52:02:fd:31:3f:34:
be:95:56:a9:49:bd:d9:44:a1:1b:68:21:fd:8d:b5:
59:d1:af:9f:29:a8:2c:17:fe:a1:28:72:a3:88:9a:
18:2e:66:ef:54:77:f2:ba:27:e4:12:cd:c5:a2:e5:
e5:6b:2b:c8:8f:d8:74:b9:03:17:e1:16:52:b1:fa:
6a:d9:12:b4:d3:93:32:07:ca:bd:ec:19:88:6d:10:
53:e7:50:14:a5:45:6d:1a:ec:4e:78:cc:8d:ea:36:
65:67:71:2d:31:82:35:40:cc:0f:c2:96:9e:9c:61:
ba:a7:fb:8d:a0:9e:a3:34:56:f0:8e:b6:3f:e7:2b:
6f:31:36:fb:e2:67:3e:d3:1a:45:dc:55:9d:1f:6a:
a3:f9:4a:06:c8:7d:49:b0:e1:6b:ef:f7:0c:7e:01:
cd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:61:8C:AB:DD:A4:C4:9A:5D:33:F8:7F:43:ED:C0:37:A7:5A:4C:B1
X509v3 Authority Key Identifier:
keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ed:1f:81:8d:72:41:f0:37:69:7d:9f:af:f3:9b:73:3c:67:
c0:9b:8d:a6:aa:5f:67:6b:da:6c:b0:5f:c1:8c:39:e2:ea:1a:
00:47:9a:ac:2c:a8:85:63:5a:67:2d:96:8e:b4:3d:1c:c8:ab:
ae:ed:4d:a0:1f:f6:14:93:15:8f:a7:f0:5b:f0:d7:1d:f9:ee:
db:ec:7e:92:aa:ca:c8:5b:a2:89:35:62:46:f9:9c:69:7d:62:
3c:28:40:64:41:5b:ad:4f:71:b3:bd:ef:6b:65:2f:41:2c:19:
6c:b7:15:de:7d:7a:0a:15:ce:17:23:ff:ff:9e:b7:ec:b1:19:
e0:c8:ab:97:01:6f:ca:4a:33:3f:6a:89:0c:00:a6:b9:05:04:
6e:c0:a2:6a:d2:fc:8e:31:df:17:5e:c4:1b:aa:40:64:79:4d:
05:1b:b9:1e:d4:40:b4:c8:a1:df:a1:5a:dc:6b:07:22:59:21:
49:0b:a6:c4:97:9b:75:5a:b1:69:b7:5d:1e:02:df:c4:d1:db:
5d:e6:36:4a:76:12:22:15:9e:ec:d8:38:b4:19:c9:9f:51:8a:
e2:a4:f8:15:a7:a3:a6:ab:97:1e:19:4c:3b:31:65:ba:9e:c5:
6f:57:d8:26:5e:94:75:a0:ba:6c:fa:0e:cf:e0:cb:7f:8c:ce:
f6:e8:d1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:23:21 2026 by rpki-client