Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
File: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft (raw, json)
Hash identifier: na2x2/HSVrR9US3alakG0BdG3k2pSsbZRfZ+f8MIxv4=
Subject key identifier: 80:96:51:39:41:31:C8:6B:1F:A9:F7:9D:BA:52:1A:2A:62:03:E7:97
Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
Certificate issuer: /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Certificate serial: 019F9512AFA7AB1DABD662AF2B0AE683E4ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
Manifest number: 195B
Signing time: Fri 24 Jul 2026 17:00:57 +0000
Manifest this update: Fri 24 Jul 2026 17:00:57 +0000
Manifest next update: Sat 25 Jul 2026 17:00:57 +0000
Files and hashes: 1: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl (hash: bRYIPtBrThkatciQDz5jf9H5VwV2CfHQ1lbk4fIsh1g=)
2: eL4sddmNTd7PSzARjzADz_21RBc.roa (hash: 9PP/TpfqraKWqrmb3Ro9MwG6dH8Z8rYhFZu1I649JYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:af:a7:ab:1d:ab:d6:62:af:2b:0a:e6:83:e4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Validity
Not Before: Jul 24 17:00:57 2026 GMT
Not After : Jul 25 17:00:57 2026 GMT
Subject: CN=809651394131c86b1fa9f79dba521a2a6203e797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:4e:da:8f:07:a3:c8:dd:2d:52:6c:f3:c4:
cd:ef:83:67:c9:dd:1b:3a:58:6b:89:7b:c9:52:cb:
9e:13:c5:9a:d3:2f:d3:cb:49:80:b0:d7:e2:bf:73:
e9:6b:bf:a8:00:cd:dd:21:10:cb:2f:46:6e:7b:8e:
b3:17:73:b2:c9:58:f6:7b:72:c5:2a:b1:0a:98:28:
b2:72:1f:10:9f:fb:e1:95:65:98:8b:61:94:8e:da:
b5:ff:1b:ae:a3:49:e3:97:01:2c:29:d1:4c:55:c4:
35:a0:78:bd:5b:fc:45:5e:15:4d:8b:3c:a0:e1:73:
fd:3b:9d:70:ef:21:ec:31:8d:50:8c:12:30:2b:c2:
6d:47:e0:6c:27:a0:7f:63:a2:04:b2:25:de:32:1a:
2c:12:40:a9:30:b6:58:aa:48:99:2c:79:c8:d9:9b:
3a:25:ba:3e:d4:6c:3c:91:da:2a:e1:c9:3e:2e:98:
da:16:3f:8a:13:c5:1e:86:aa:5d:2c:33:bd:09:30:
bd:16:6d:84:d1:dd:05:d7:52:e9:7a:6d:69:e4:3b:
cb:d4:62:9e:57:33:f0:9c:46:e3:3f:ee:bd:ad:50:
f7:7d:38:85:98:9a:54:82:5e:6c:21:1e:b3:4f:16:
d9:e4:90:d6:f1:74:0a:bc:e6:e5:d8:6d:5a:31:ec:
50:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:96:51:39:41:31:C8:6B:1F:A9:F7:9D:BA:52:1A:2A:62:03:E7:97
X509v3 Authority Key Identifier:
keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:69:aa:0d:eb:7a:ca:9e:0d:1b:59:5d:7e:21:21:40:b8:df:
d0:26:0c:9f:01:76:af:8e:4b:62:53:fc:ea:3b:db:a9:96:55:
d1:80:38:de:9c:75:7d:5d:6e:78:ce:6f:1b:6f:ad:21:c5:ae:
ee:29:58:cf:95:22:12:09:c8:3d:c0:08:bd:7d:cf:18:a3:55:
45:bb:8d:ca:be:57:d1:cf:4a:e8:43:8e:fc:14:62:f9:d2:c4:
58:b8:c8:6b:e5:8b:e1:b5:bc:5d:4e:1c:2a:2b:6d:9e:c6:e3:
00:25:23:28:29:2b:5f:5b:1b:26:e5:62:df:73:38:80:42:01:
93:dd:b6:8d:fa:2e:ec:6c:ce:ca:fc:48:fc:b6:d9:b3:f9:ad:
4e:77:93:40:b5:43:9b:42:64:85:c4:22:1a:b5:39:2d:94:ef:
42:7f:c7:0d:3a:90:59:bb:4c:98:e6:5c:1f:8a:e9:97:d4:13:
d1:b2:c0:b5:0e:f2:c4:41:b6:ab:28:2e:d9:7b:13:83:4c:5c:
a5:02:d1:75:2b:9e:02:86:a9:85:9c:a9:20:24:96:a5:d4:e7:
a7:0b:9e:7b:58:c4:ba:52:02:8a:10:a8:e0:5d:18:3b:51:68:
a7:d4:36:7c:dd:76:e6:93:af:75:ca:c7:d0:a6:78:65:fe:08:
91:49:59:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:28:06 2026 by rpki-client