Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json)
Hash identifier: 2Zk8CcfIEs0z5yq90Q7JcMIQqkBiC2vEvt79gKSYwKY=
Subject key identifier: D6:86:2D:33:E9:2D:B0:0C:1E:6C:B4:06:1F:7B:00:4D:C2:58:4D:30
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Certificate issuer: /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial: 019D992B7D102D4F439AD4079AEA0511363B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
Manifest number: 0A7C
Signing time: Fri 17 Apr 2026 02:00:57 +0000
Manifest this update: Fri 17 Apr 2026 02:00:57 +0000
Manifest next update: Sat 18 Apr 2026 02:00:57 +0000
Files and hashes: 1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: tnRoGzHOfCyqDlfjySqJLoVOO5+GQedVg9KoxS2QbKg=)
2: gWon8go1X1etoZ8VVC7MVcrh7rw.roa (hash: +h9DsffeSnMEN/znqbhxvFFiJiaGvYzj2iIhf/egNzg=)
3: nePHPrOEtQ2PBdl8CIDH53O4jYo.roa (hash: LtVuUBSEUcTSpEfdLMbOtpgX1qZbM9aciFJAh+jdl4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:7d:10:2d:4f:43:9a:d4:07:9a:ea:05:11:36:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
Validity
Not Before: Apr 17 02:00:57 2026 GMT
Not After : Apr 18 02:00:57 2026 GMT
Subject: CN=d6862d33e92db00c1e6cb4061f7b004dc2584d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:09:13:bc:8a:d5:7b:54:82:ac:3a:5f:5d:
69:b0:bd:66:c7:6a:2a:1c:ac:a0:13:65:d6:54:13:
02:d8:48:37:3f:22:03:d5:61:24:f1:f5:ad:9e:e6:
6c:8c:28:84:ad:e7:4f:be:37:a2:82:34:6e:c3:08:
49:0e:97:1e:f7:4d:e3:d7:d5:b9:50:f9:0c:2e:b3:
8b:96:88:b4:86:22:8f:ef:24:92:e2:5c:21:a2:9d:
22:4d:7c:da:c0:71:2b:43:e9:57:2f:44:c2:6a:58:
60:cb:63:d5:df:ee:87:40:a4:ae:4e:0f:12:2e:89:
09:4b:c8:be:e9:c6:08:c5:da:fd:12:8a:28:bb:73:
3d:f2:8d:37:61:dc:f5:41:56:f7:70:3a:8f:83:a1:
d0:33:1a:7d:b9:d3:9f:21:c5:ba:ea:a0:5f:80:e3:
92:9c:c6:1a:b4:93:c3:1d:b7:ed:d3:50:dc:d2:c6:
78:12:fe:52:11:dc:8a:9a:6b:e5:09:9a:0f:2f:27:
84:2d:af:f0:c5:87:3d:6e:36:b8:52:c0:48:21:3f:
4a:e9:eb:23:dd:4b:b6:a6:87:f9:cb:48:27:80:24:
fb:01:fb:69:65:17:d9:3a:5a:5b:a4:68:ed:7d:ce:
c6:3a:f1:af:51:85:8c:ed:38:af:e8:7a:a3:1f:c1:
e4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:86:2D:33:E9:2D:B0:0C:1E:6C:B4:06:1F:7B:00:4D:C2:58:4D:30
X509v3 Authority Key Identifier:
keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a0:bd:0c:48:0b:d7:87:44:cd:1d:40:5a:50:07:09:a9:35:
ae:2c:27:af:35:ee:3e:eb:4a:09:74:3b:7a:52:76:b8:59:84:
63:b5:d1:ef:54:55:74:89:79:ee:fc:84:0d:9e:f3:67:64:73:
6c:73:c2:f7:0c:68:e1:e2:ef:15:ff:9e:26:57:7b:4d:67:aa:
a1:61:d9:db:c6:24:e0:0b:98:ca:37:8b:00:c7:ed:f2:9d:57:
eb:50:77:42:30:9c:8a:40:98:40:ee:dd:ea:49:26:45:db:d4:
5d:f7:e6:ad:44:b4:f3:c3:87:de:4f:2f:aa:dd:65:1b:2f:d6:
99:c0:c9:95:25:51:ee:34:a0:fb:c8:1b:73:d2:02:48:6d:7d:
fb:41:c0:8c:31:c4:1e:ba:59:1e:00:46:a1:2a:2f:dd:d6:9c:
ea:d0:c5:2e:f1:ab:4a:c2:5f:c7:8d:2a:fc:b0:8f:06:52:ae:
2e:76:ed:53:a7:01:62:01:4a:57:39:b1:da:66:b5:dd:e7:ad:
a2:dd:54:27:48:d3:4f:5b:99:0a:43:a9:7b:e4:1d:2a:f5:5b:
1e:7c:4b:1a:83:30:38:05:95:8d:85:1d:26:de:8f:d2:bd:58:
e0:e5:05:46:ae:5d:16:0a:7e:1e:87:d9:3d:62:b8:0f:80:e4:
e2:04:f0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:04:45 2026 by rpki-client