Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
File: jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json)
Hash identifier: afDJn+/JtM8Hzw59Tt3YcD8+cJ1lALB1l6Q7iLfH1vU=
Subject key identifier: 4C:29:AD:A3:03:F3:8F:83:9B:F0:DF:0A:E1:70:F5:AB:F2:A2:63:D5
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 01A0C2FB5AC1F9CAE5BCD076C1F3B76CF362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
Manifest number: 1394
Signing time: Mon 21 Sep 2026 08:00:47 +0000
Manifest this update: Mon 21 Sep 2026 08:00:47 +0000
Manifest next update: Tue 22 Sep 2026 08:00:47 +0000
Files and hashes: 1: GPFcG47nIYBiH_vSd-Zet9HInTY.asa (hash: HNMbYsk9UfUyN+47iHB5pyXq6stkZEZHOhwEC4uh0DQ=)
2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: kMUfCRRx6TeIltM3gHgmAYCMLj9gTbz7COGGMp45FUM=)
3: r_qY6TIFDc-2C46p1mCYOq9l7j4.roa (hash: eoGRneGgUw90MpEMiAODUHzFCL/oN3PFTCCGwv4cx5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:5a:c1:f9:ca:e5:bc:d0:76:c1:f3:b7:6c:f3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: Sep 21 08:00:47 2026 GMT
Not After : Sep 22 08:00:47 2026 GMT
Subject: CN=4c29ada303f38f839bf0df0ae170f5abf2a263d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:22:82:e3:63:36:8d:3c:15:f8:1a:9b:cb:9a:
bc:f0:25:4b:65:ad:16:01:f2:04:14:9b:25:39:3d:
69:f6:30:23:86:80:1c:e8:df:db:72:5a:3a:45:3a:
80:1e:fa:8a:b8:07:67:6d:67:6a:c1:8a:fe:6d:f7:
cd:5c:9a:a0:1d:2e:f1:b5:f2:97:a8:db:ab:13:ac:
d4:3d:39:90:ab:0b:36:7b:40:73:07:84:2c:d5:e0:
a3:37:c3:29:21:c6:0e:47:1a:73:87:9a:69:81:c2:
50:c1:25:28:f5:62:ec:08:a8:45:17:56:3d:c7:80:
24:28:50:e5:d4:3d:c8:ce:43:30:a2:32:54:42:88:
28:d9:09:02:93:60:be:63:b7:18:59:85:0e:61:f1:
f2:65:6a:05:9d:e3:4b:5a:19:68:1b:11:ad:a7:c0:
c8:b6:92:78:50:41:f9:9c:2d:6d:42:11:76:ab:1e:
f9:2b:48:b3:71:7c:19:0b:25:ef:0f:cd:ac:1c:fc:
2a:11:a3:18:5d:83:2f:af:8a:a2:bb:4e:be:60:4e:
14:e6:3f:32:26:79:73:c6:9c:77:11:eb:1e:f4:78:
57:2e:1c:0a:2c:2c:05:6f:16:33:cc:dd:e6:2d:df:
0d:4f:86:c6:0d:93:d6:19:b5:e4:1b:4c:b7:ee:c7:
7b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:29:AD:A3:03:F3:8F:83:9B:F0:DF:0A:E1:70:F5:AB:F2:A2:63:D5
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f3:e5:dc:f6:1b:b7:3b:32:5a:da:27:e1:d0:8b:7f:14:4a:
78:51:43:11:27:eb:4a:59:ee:ea:2e:cf:ad:6a:9d:96:f1:76:
eb:40:2e:bc:00:a2:c8:77:af:2e:04:a5:61:b4:dd:ab:0b:5a:
f0:c1:31:21:7d:ed:4f:ca:b4:bf:35:92:2f:c8:f2:ed:08:7b:
0c:b4:85:02:0a:a4:26:eb:de:99:f3:5e:8e:5a:d9:ab:16:f6:
8e:77:63:50:39:26:e0:06:08:fe:38:5c:5c:5a:2c:74:ff:2d:
fa:bf:22:03:04:38:51:d3:6c:ce:92:6e:c3:e8:c4:5f:c7:8e:
3c:fd:8a:a8:98:67:6e:81:5a:97:a1:c2:e3:ec:9b:56:4a:37:
50:4f:cb:52:97:ca:30:34:63:6b:1c:fa:6c:dc:eb:9f:a2:9d:
7b:29:bf:b6:1d:ba:2e:c7:bb:6f:c0:d3:a1:38:5f:11:be:21:
6d:cc:cd:3d:63:d9:7e:62:ec:2b:f9:6c:79:2d:23:17:88:0b:
49:6f:e5:ac:6f:c3:cf:07:31:d2:af:56:34:9c:7a:83:fc:22:
42:5c:85:1a:e0:bd:15:de:a3:49:89:61:c3:90:ed:fd:d7:82:
47:17:e6:73:1d:df:24:ba:00:64:98:b5:28:10:8a:e8:48:2c:
ae:7e:bc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:58:55 2026 by rpki-client