
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
File: JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft (raw, json)
Hash identifier: XxCis8WMOJDKoYr+g7yo6ON8tDQMFXJrAvrRfXdCnnI=
Subject key identifier: B4:CE:86:4A:04:2A:06:B1:97:B0:67:82:BA:F0:C4:02:89:D5:79:77
Authority key identifier: 24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84
Certificate issuer: /CN=24d26a5146996d220461081072c76396582fca84
Certificate serial: 019CAC10443133EA76D2F449D27AB73988A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
Manifest number: 0A56
Signing time: Mon 02 Mar 2026 01:01:13 +0000
Manifest this update: Mon 02 Mar 2026 01:01:13 +0000
Manifest next update: Tue 03 Mar 2026 01:01:13 +0000
Files and hashes: 1: JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl (hash: b/wdonAaWCFCztrd74WpMJyRvEx6hFD1p3t1Yi2jFvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:44:31:33:ea:76:d2:f4:49:d2:7a:b7:39:88:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d26a5146996d220461081072c76396582fca84
Validity
Not Before: Mar 2 01:01:13 2026 GMT
Not After : Mar 3 01:01:13 2026 GMT
Subject: CN=b4ce864a042a06b197b06782baf0c40289d57977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b3:83:7f:71:29:76:23:af:a8:43:e5:ab:e3:
63:6d:70:69:cc:5f:92:ad:ec:51:72:a0:6b:3b:44:
f5:3f:29:f0:4c:fb:f0:d5:24:e0:65:ad:68:c7:3c:
70:3e:ef:86:5c:87:e7:47:ff:eb:f9:0c:a7:01:eb:
10:e8:a6:86:24:38:e8:f5:74:bb:25:cb:e4:7f:41:
05:a4:35:6a:b0:bd:e4:50:f6:b5:24:40:29:9b:e9:
fe:10:b6:27:9c:30:1e:38:12:5b:e7:5e:39:7f:75:
fd:c3:1c:78:20:6b:0f:d1:bc:b3:86:12:7f:3c:d4:
20:6f:fb:ce:80:9f:4a:9a:0e:24:1e:44:cc:10:fb:
95:eb:6e:c7:cc:fb:fc:29:ae:a1:ee:33:ad:64:bb:
87:63:04:ed:f9:c4:41:9a:0a:f5:73:43:1f:e0:74:
f9:67:5d:56:17:35:68:f3:68:7e:9f:40:60:75:58:
ab:d9:5c:df:46:5a:dd:b0:8e:91:c9:c7:98:45:19:
17:a5:50:be:38:14:e1:74:f2:f7:fb:8e:68:ea:3b:
27:67:b0:f5:63:fd:f2:67:75:1b:9f:c6:3a:01:da:
30:60:86:ec:cd:40:08:49:05:3b:d8:a3:0f:b1:60:
c2:d9:68:e5:d5:79:c8:ab:42:bf:58:3c:ef:c1:88:
01:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CE:86:4A:04:2A:06:B1:97:B0:67:82:BA:F0:C4:02:89:D5:79:77
X509v3 Authority Key Identifier:
keyid:24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:6c:13:f6:8a:f8:a8:01:cd:a4:e0:d7:2d:6e:77:10:a4:6b:
13:09:b0:0e:34:6e:1f:67:cc:16:ac:16:9f:ef:54:c3:6f:03:
2f:25:50:6d:fe:1f:3a:ba:17:22:39:59:39:00:1a:49:a5:33:
63:db:87:40:2e:4d:bd:5f:60:bb:bd:ab:8d:5c:23:a1:f9:53:
83:87:8f:52:33:ff:f0:d9:fe:d4:8c:0e:18:b8:1e:93:c6:17:
12:19:19:5c:39:a5:6e:0f:ec:73:2c:25:0d:a2:e7:ba:63:6d:
13:e7:d5:c2:da:8f:dd:af:98:b5:e3:0d:ca:96:61:45:79:82:
b1:4c:2a:c2:c3:7e:c4:03:a3:83:ab:54:3c:a1:28:6a:43:a7:
a8:cc:10:0c:aa:2d:bc:57:7c:23:e1:9e:8d:80:9e:e8:4e:d0:
18:af:c8:49:92:98:11:40:cf:3a:0b:7f:1a:79:e4:74:42:61:
78:b2:8f:8e:df:34:e5:9e:0a:bb:1b:90:9a:d3:f3:51:80:1e:
a6:c4:65:76:77:50:4a:44:c5:56:74:6b:42:79:f5:6b:7e:7a:
30:f0:0a:7f:92:79:3c:01:e2:39:8c:5d:45:8f:21:3c:99:06:
ad:6f:49:69:d8:f0:16:6a:10:17:b0:3e:17:b9:b7:4a:ef:24:
58:4b:84:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEEQxM+p20vRJ0nq3OYilMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDI2YTUxNDY5OTZkMjIwNDYxMDgxMDcyYzc2Mzk2NTgy
ZmNhODQwHhcNMjYwMzAyMDEwMTEzWhcNMjYwMzAzMDEwMTEzWjAzMTEwLwYDVQQD
EyhiNGNlODY0YTA0MmEwNmIxOTdiMDY3ODJiYWYwYzQwMjg5ZDU3OTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7ODf3EpdiOvqEPlq+NjbXBpzF+S
rexRcqBrO0T1PynwTPvw1STgZa1oxzxwPu+GXIfnR//r+QynAesQ6KaGJDjo9XS7
Jcvkf0EFpDVqsL3kUPa1JEApm+n+ELYnnDAeOBJb5145f3X9wxx4IGsP0byzhhJ/
PNQgb/vOgJ9Kmg4kHkTMEPuV627HzPv8Ka6h7jOtZLuHYwTt+cRBmgr1c0Mf4HT5
Z11WFzVo82h+n0BgdVir2VzfRlrdsI6RyceYRRkXpVC+OBThdPL3+45o6jsnZ7D1
Y/3yZ3Ubn8Y6AdowYIbszUAISQU72KMPsWDC2Wjl1XnIq0K/WDzvwYgBPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTOhkoEKgaxl7BngrrwxAKJ1Xl3MB8GA1UdIwQY
MBaAFCTSalFGmW0iBGEIEHLHY5ZYL8qEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5KcVVVYVpiU0lFWVFnUWNzZGpsbGd2eW9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8zM2QyNDgtMjM0MS00YzhhLTlmZmEt
NWI5ODk2MjczNzg5LzEvSk5KcVVVYVpiU0lFWVFnUWNzZGpsbGd2eW9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8zM2QyNDgtMjM0MS00YzhhLTlmZmEtNWI5ODk2MjczNzg5
LzEvSk5KcVVVYVpiU0lFWVFnUWNzZGpsbGd2eW9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGwT9or4
qAHNpODXLW53EKRrEwmwDjRuH2fMFqwWn+9Uw28DLyVQbf4fOroXIjlZOQAaSaUz
Y9uHQC5NvV9gu72rjVwjoflTg4ePUjP/8Nn+1IwOGLgek8YXEhkZXDmlbg/scywl
DaLnumNtE+fVwtqP3a+YteMNypZhRXmCsUwqwsN+xAOjg6tUPKEoakOnqMwQDKot
vFd8I+GejYCe6E7QGK/ISZKYEUDPOgt/GnnkdEJheLKPjt805Z4KuxuQmtPzUYAe
psRldndQSkTFVnRrQnn1a356MPAKf5J5PAHiOYxdRY8hPJkGrW9JadjwFmoQF7A+
F7m3Su8kWEuElQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:47 2026 by rpki-client