Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json)
Hash identifier: 5QI5N5XPqgggIcQpCtk+wxXsxfSNo6nXCYh+fzWkrqI=
Subject key identifier: 97:EB:7B:08:1D:C3:A7:F7:D1:8F:06:35:BD:6B:F2:50:1A:78:EA:B2
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Certificate issuer: /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial: 01A0E32BC8402061C9AA4740F5BAFA376BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
Manifest number: 0C30
Signing time: Sun 27 Sep 2026 14:01:32 +0000
Manifest this update: Sun 27 Sep 2026 14:01:32 +0000
Manifest next update: Mon 28 Sep 2026 14:01:32 +0000
Files and hashes: 1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: kR1wtlnFB/0kgZnm9rmdSmObYI7bDfYX/D1c7QgWGbo=)
2: gWon8go1X1etoZ8VVC7MVcrh7rw.roa (hash: +h9DsffeSnMEN/znqbhxvFFiJiaGvYzj2iIhf/egNzg=)
3: nePHPrOEtQ2PBdl8CIDH53O4jYo.roa (hash: LtVuUBSEUcTSpEfdLMbOtpgX1qZbM9aciFJAh+jdl4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:c8:40:20:61:c9:aa:47:40:f5:ba:fa:37:6b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
Validity
Not Before: Sep 27 14:01:32 2026 GMT
Not After : Sep 28 14:01:32 2026 GMT
Subject: CN=97eb7b081dc3a7f7d18f0635bd6bf2501a78eab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:82:c5:e5:5a:40:ee:ad:df:78:92:63:88:
31:52:33:62:ef:e9:a5:0e:87:b0:be:50:f6:75:d0:
15:9f:da:5c:00:33:41:dd:b4:35:ac:d5:49:37:a6:
e8:30:0c:3f:08:9c:c4:95:8e:69:fa:34:3e:a4:f9:
2a:a5:fa:71:ab:72:d0:d7:0f:3d:47:a0:38:66:1b:
9a:1b:92:1e:39:65:e2:ee:31:6b:3e:e9:4d:c3:7b:
cd:a8:72:a2:c0:dd:b1:8a:ca:b5:a2:14:80:c7:30:
85:bc:26:c9:41:40:fb:23:f0:4d:f4:3c:88:37:dc:
13:69:2c:2e:ea:c8:89:48:2c:76:03:8a:98:0d:7a:
ed:b1:96:b9:55:6f:77:e6:1d:35:63:34:b7:23:7d:
90:38:a7:3a:a2:9d:89:55:36:db:53:f5:4a:16:8a:
c3:77:cb:e4:10:f3:ed:4c:65:51:15:a3:a2:cb:bb:
55:1a:5f:1a:fd:be:42:67:cb:f4:84:de:5c:18:dc:
28:8a:c3:3f:b7:7c:e8:82:12:c4:0b:93:67:a4:60:
1a:d1:46:b8:bd:fc:5b:7a:31:12:c1:5e:92:7d:48:
a8:b2:18:59:96:82:3e:db:c7:c2:07:d1:82:df:f5:
61:13:d9:45:b7:50:3b:01:9a:15:43:9c:bd:e5:7f:
07:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EB:7B:08:1D:C3:A7:F7:D1:8F:06:35:BD:6B:F2:50:1A:78:EA:B2
X509v3 Authority Key Identifier:
keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:64:c2:94:42:42:46:23:90:35:6d:29:da:9e:19:3f:97:b5:
33:d1:8a:09:e8:32:ad:1f:dd:19:1d:f0:53:f6:22:c8:63:d5:
e6:84:2d:ca:01:e1:a0:6b:e9:1d:da:27:e6:f3:3f:3e:4e:1c:
23:32:83:05:4e:08:c1:31:4e:de:47:eb:0d:3f:5c:49:6d:de:
a7:c0:84:9a:fa:c0:66:eb:a3:77:c0:43:bc:44:3e:17:57:38:
8c:b5:20:08:52:fe:db:4c:a9:6e:a0:ad:9c:2b:d3:ec:22:e1:
f3:3d:c8:b0:02:4e:63:23:d7:df:29:52:23:62:2d:4f:b8:0a:
01:24:a9:7e:c1:6e:b6:eb:4a:c4:26:1d:64:3b:1d:03:02:ea:
3e:c2:7f:6d:34:4d:22:8d:d3:d0:3c:8b:15:f4:30:95:98:15:
2f:d3:ca:02:fc:d8:58:45:24:fe:a4:00:82:e7:27:7e:8c:8c:
e9:b5:3c:fe:08:cd:5e:d7:1d:83:b3:46:80:f8:13:42:72:3b:
48:cf:d8:6a:0a:18:73:f8:92:6f:c4:3f:ff:1f:53:cd:ad:e1:
e1:b7:46:ec:87:4f:9a:c0:c1:30:04:f0:3d:cb:2f:c3:59:d8:
4d:55:14:d0:a6:ac:6b:b4:81:49:66:66:40:7e:60:eb:d5:5e:
92:f4:a0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:05:37 2026 by rpki-client