
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json)
Hash identifier: RFVHErik2TmkbnCWooZXNHpW34ebkgFJa6Du0Jfw3Ug=
Subject key identifier: C3:CF:BF:D6:B1:9E:D4:28:2A:75:4C:E1:FD:59:90:84:69:F8:CC:CD
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Certificate issuer: /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial: 019EC2921DC771F5314EE6A4595C96C182CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
Manifest number: 0B16
Signing time: Sat 13 Jun 2026 20:00:16 +0000
Manifest this update: Sat 13 Jun 2026 20:00:16 +0000
Manifest next update: Sun 14 Jun 2026 20:00:16 +0000
Files and hashes: 1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: w62ZnW0xtDAZf/75BZomRpeypqeo8vys3q3Yk0YjroU=)
2: gWon8go1X1etoZ8VVC7MVcrh7rw.roa (hash: +h9DsffeSnMEN/znqbhxvFFiJiaGvYzj2iIhf/egNzg=)
3: nePHPrOEtQ2PBdl8CIDH53O4jYo.roa (hash: LtVuUBSEUcTSpEfdLMbOtpgX1qZbM9aciFJAh+jdl4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:1d:c7:71:f5:31:4e:e6:a4:59:5c:96:c1:82:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
Validity
Not Before: Jun 13 20:00:16 2026 GMT
Not After : Jun 14 20:00:16 2026 GMT
Subject: CN=c3cfbfd6b19ed4282a754ce1fd59908469f8cccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:96:09:11:dc:b0:96:a2:9b:8e:e0:3c:2f:f5:
be:66:3f:81:83:31:13:be:6a:aa:6a:ff:d1:97:7e:
86:52:c1:e1:3f:bf:9a:db:d6:85:5c:15:e9:2b:22:
68:2e:a2:f9:72:3d:47:f9:bb:8c:e7:80:1c:97:88:
04:07:0c:0f:8a:21:9b:3e:5c:14:03:5f:10:59:6d:
8e:3f:6a:d9:17:98:0d:60:38:ec:d4:b8:04:20:c9:
78:05:78:9c:d1:1f:43:61:89:5e:01:ac:3e:a9:c9:
df:53:d2:81:fb:27:65:35:59:a8:7e:91:05:b1:71:
68:30:78:b5:2c:86:bb:ba:7b:f8:19:60:8c:66:92:
16:ee:9f:ec:b3:23:69:12:bf:de:3d:9f:f5:ad:cf:
d3:84:7b:e0:28:f0:b1:99:51:61:ad:e9:67:e0:3d:
00:db:08:55:93:56:43:61:76:4e:12:55:e6:1f:5b:
05:28:35:40:14:0a:0d:23:8d:c1:44:4d:14:d2:87:
d4:20:69:1c:28:c1:39:1e:43:f2:ca:55:e8:86:7d:
cb:27:be:ce:df:a2:56:49:a4:84:46:c7:9b:82:72:
c4:32:7b:41:86:f4:28:6c:20:37:5d:10:2e:eb:f6:
aa:06:23:ca:37:a8:4b:9a:bf:6a:c9:c5:fd:35:27:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CF:BF:D6:B1:9E:D4:28:2A:75:4C:E1:FD:59:90:84:69:F8:CC:CD
X509v3 Authority Key Identifier:
keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:9b:4a:dd:03:5c:ab:b5:22:ca:dd:f9:c2:fb:94:ea:96:73:
7b:a4:9d:7b:a0:92:49:47:a5:0a:94:00:4d:59:b0:fe:aa:b2:
d8:5a:fc:db:82:f7:96:2f:fa:19:78:09:e1:d0:a3:8d:b5:d1:
1e:d1:42:81:c6:2f:0e:e4:af:1a:fe:29:4f:6d:57:8a:e4:69:
0a:9c:a7:4b:9e:66:2c:da:ae:50:ec:8c:1b:5d:25:d9:25:38:
6f:fa:2b:e7:5f:ca:ba:d7:83:3b:d1:8a:22:58:43:5f:f3:b5:
84:0c:a4:5f:ff:cf:39:2b:0f:b9:2e:81:05:64:ac:4e:a9:84:
ec:2e:69:41:f7:8f:e4:c0:93:4b:10:3b:16:02:fc:ab:b3:5a:
f8:f2:3a:f7:3e:91:01:1c:5c:ef:7a:7a:66:e0:bb:4e:83:59:
c4:dd:0f:06:37:6e:4d:77:90:5e:cf:5b:5a:f1:46:69:10:ee:
b7:41:96:86:64:a9:db:d8:ef:51:89:7b:e4:eb:82:87:9b:f9:
51:68:9a:4d:cd:78:24:9b:1b:71:a5:cd:e6:b4:bd:a8:89:ef:
5d:3a:ef:9a:85:4c:36:86:4b:14:79:67:a6:dc:c7:fb:74:d6:
f0:6b:69:16:1d:bd:7d:2d:a3:fd:a7:76:e4:41:26:38:48:61:
72:1b:a7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:32:42 2026 by rpki-client