
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
File: jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft (raw, json)
Hash identifier: FLFVTJT1f9xoZydW9HtsaHIHWYqFgIthdwv18pyKKGY=
Subject key identifier: 43:73:AA:8C:13:A3:4C:CF:30:66:87:27:D8:61:1E:FE:9C:EA:AB:33
Authority key identifier: 8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC
Certificate issuer: /CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
Certificate serial: 01A0DA961688589FBB46C168E17EC3068973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
Manifest number: 0A83
Signing time: Fri 25 Sep 2026 22:01:04 +0000
Manifest this update: Fri 25 Sep 2026 22:01:04 +0000
Manifest next update: Sat 26 Sep 2026 22:01:04 +0000
Files and hashes: 1: hzS81GvZENh5FRkGbicEF2LdARk.roa (hash: q8906Tblj2ap141UnuPHJfh6mZPh8QOzg/WX4QoWW8Q=)
2: jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl (hash: +IW8FxekplRtPxk4CeQrtxHJrUz/ffSBJb+au3IPnhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:16:88:58:9f:bb:46:c1:68:e1:7e:c3:06:89:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
Validity
Not Before: Sep 25 22:01:04 2026 GMT
Not After : Sep 26 22:01:04 2026 GMT
Subject: CN=4373aa8c13a34ccf30668727d8611efe9ceaab33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b4:35:e3:84:62:65:92:f3:6d:54:29:77:7f:
f9:dc:b1:8b:b1:fc:b5:6d:1a:f6:a4:0f:a4:77:08:
98:bf:b6:24:fb:8d:f8:4c:c7:45:0b:c2:23:7e:90:
c3:84:03:29:2c:72:04:c7:db:b4:fd:9e:3e:f6:93:
41:35:03:81:2a:61:d9:f8:d0:71:d6:12:6d:c1:c7:
df:c6:b7:4a:d7:8d:9a:24:77:01:e1:b8:40:f0:d1:
a1:a0:59:11:79:5a:b7:41:d5:73:cd:13:77:19:5e:
c3:a3:31:11:a4:7f:9a:0e:b6:66:96:2c:9e:b8:89:
20:3e:65:20:e3:c9:17:13:4c:ab:af:f8:cb:5f:91:
94:73:49:91:42:78:f6:fd:e0:cc:24:87:5c:3c:45:
33:35:c3:cf:d2:83:cb:46:0f:fe:e5:ab:57:60:d2:
21:89:0d:c4:cd:03:16:11:3a:00:15:c3:8d:d3:fa:
98:6a:b2:f4:fb:ef:9e:49:c8:24:5b:76:3d:73:7d:
80:cb:d3:9d:cb:0a:49:6d:b2:89:f7:30:e6:a9:47:
79:d3:6b:33:0d:e7:61:8b:42:61:e1:1d:b6:88:1d:
93:d1:8c:19:80:09:47:94:bc:e7:7e:35:10:25:ba:
c1:1f:5b:9a:62:4a:35:2d:41:87:9b:c9:0b:08:26:
59:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:73:AA:8C:13:A3:4C:CF:30:66:87:27:D8:61:1E:FE:9C:EA:AB:33
X509v3 Authority Key Identifier:
keyid:8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:2c:9d:b6:22:f5:9d:7e:5a:28:ea:18:b7:ea:cc:dc:59:ae:
52:56:1a:2e:d9:aa:cb:2d:49:13:6e:87:ed:57:8c:34:d8:e9:
5d:62:13:94:60:f8:8e:ca:d2:d3:52:ab:83:55:79:09:d5:ec:
6e:5b:a9:db:89:2e:83:b7:03:cf:1f:32:b5:bb:33:22:4f:0e:
26:a9:cd:d8:81:88:4b:8a:12:58:0c:af:60:67:01:b2:54:5e:
c7:86:73:a8:9e:ce:8f:63:70:82:51:d6:38:32:a8:5c:33:21:
c5:22:71:46:76:f9:37:dc:8c:1a:0b:80:16:40:71:e6:11:66:
14:be:38:cf:50:28:72:2a:20:cb:23:ad:2e:78:24:66:2d:fa:
08:51:cb:b1:7d:b5:b1:be:fc:6b:d1:f1:a3:36:40:38:fe:4e:
89:8a:55:be:cb:38:26:41:d2:ad:16:ad:99:be:84:7f:60:7d:
c6:de:92:c5:40:2d:13:13:a9:09:de:25:93:9d:3b:e7:2c:23:
e3:8a:a1:84:98:0e:b8:11:99:9a:d9:37:cd:2b:f4:92:41:f7:
97:36:8e:ec:a2:0d:83:c2:be:c7:54:65:35:44:36:6a:82:2b:
88:9e:b0:b8:4d:b5:9b:d4:73:14:dd:4b:22:b5:f8:2b:91:a0:
26:4c:19:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:02:35 2026 by rpki-client