Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json)
Hash identifier: 8ROHNiCPjtW/f2JUG7nv+IGy0z5Wo6Qp2bOgeXCArNM=
Subject key identifier: DE:07:67:48:91:8B:26:4E:CC:6D:00:95:DA:E2:63:6A:27:BE:15:C0
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Certificate issuer: /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial: 019FAC3F56E9485A5A9DCFC8353B10AED907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
Manifest number: 0B8F
Signing time: Wed 29 Jul 2026 05:00:59 +0000
Manifest this update: Wed 29 Jul 2026 05:00:59 +0000
Manifest next update: Thu 30 Jul 2026 05:00:59 +0000
Files and hashes: 1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: Ym/ukfUnRjiHzf5ViPscR5Vtdy3JudURJT8xuXJHL7k=)
2: gWon8go1X1etoZ8VVC7MVcrh7rw.roa (hash: +h9DsffeSnMEN/znqbhxvFFiJiaGvYzj2iIhf/egNzg=)
3: nePHPrOEtQ2PBdl8CIDH53O4jYo.roa (hash: LtVuUBSEUcTSpEfdLMbOtpgX1qZbM9aciFJAh+jdl4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:56:e9:48:5a:5a:9d:cf:c8:35:3b:10:ae:d9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
Validity
Not Before: Jul 29 05:00:59 2026 GMT
Not After : Jul 30 05:00:59 2026 GMT
Subject: CN=de076748918b264ecc6d0095dae2636a27be15c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:07:fc:b4:39:63:40:99:8f:95:eb:fa:d4:36:
31:a4:a6:ce:f0:c6:9c:cc:69:8c:b0:73:db:04:4a:
9a:47:0e:ba:6a:8d:6d:d2:91:bf:6c:0b:1d:85:1c:
d0:24:cb:db:cc:fb:ca:62:05:7b:38:6c:69:e4:f5:
c1:b1:59:06:e1:90:25:8b:56:95:76:e2:88:f7:9b:
f4:98:51:46:0b:1d:f7:f2:f2:fd:8f:3c:7e:12:06:
a6:b1:26:b0:8c:51:79:2e:b8:2b:c3:e8:ef:38:56:
89:32:ee:ed:65:a6:2d:e5:3d:25:18:0d:d6:33:14:
1f:9a:46:f8:0c:66:dd:01:0c:3f:04:bc:6a:a0:94:
60:35:c2:c3:22:17:00:63:86:0e:43:97:ea:7d:aa:
22:80:92:f2:d3:c6:d2:bb:19:55:9e:17:5b:39:7d:
6c:5c:fd:8b:ab:a3:06:fe:75:79:29:27:66:e8:f1:
66:d7:f7:1c:be:35:39:71:23:86:c0:f1:36:25:af:
dc:ac:60:e5:40:ba:3d:c2:bc:a9:7b:52:98:62:be:
e3:29:6e:fd:83:d0:a7:fa:ce:26:98:84:47:8b:88:
51:99:ba:e9:9f:84:d6:68:f6:0f:25:cd:ef:74:87:
0d:6c:41:51:a4:33:f2:b0:ee:72:98:11:3b:ea:30:
e4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:07:67:48:91:8B:26:4E:CC:6D:00:95:DA:E2:63:6A:27:BE:15:C0
X509v3 Authority Key Identifier:
keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:24:9f:56:b4:1d:74:64:46:31:e7:c2:a4:ed:43:69:f5:9f:
6d:fe:dd:07:21:38:19:e0:94:5e:25:7e:99:3f:f5:ca:a3:ca:
fa:03:a3:52:17:9b:79:2a:2f:b5:70:3c:12:bf:93:bf:3b:71:
7c:19:bf:e6:fe:4e:c4:97:d1:cc:82:0b:94:48:9d:5a:a5:45:
68:d8:fe:4e:80:b1:4a:53:ce:9e:cb:ff:16:ff:07:27:7b:42:
5b:7e:10:b9:8f:02:fc:fb:1e:a5:db:f9:e2:f4:3c:a3:76:4c:
f5:a6:01:5d:df:0f:7d:0a:2e:d4:31:21:b4:f4:07:45:4b:94:
f6:53:61:29:5c:47:e0:b0:cb:ea:a3:7f:66:cb:03:fc:a0:0d:
28:da:74:bd:dd:39:d1:fd:25:78:f8:d6:b1:36:d8:a5:2a:6a:
ec:47:ff:c4:de:15:a5:6d:d8:23:48:27:a2:a5:0b:9b:34:48:
94:4c:da:5e:34:d7:4b:f8:84:c6:89:74:6e:f0:a3:8d:2c:fd:
39:86:95:ea:bb:69:3f:b6:42:34:8d:5b:f9:53:0e:e6:b9:6c:
91:22:47:22:62:9e:e1:62:71:63:ea:43:76:a1:12:4e:ea:0a:
b4:f4:9f:e9:62:f1:b6:7e:b5:af:54:57:25:44:e9:bf:ae:32:
48:a7:d8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:45 2026 by rpki-client