Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
File: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft (raw, json)
Hash identifier: j822bRkLnMSD7Ow2Yn4lh6YfA68Lk11fVNDF/QwsXus=
Subject key identifier: A3:4F:29:E2:B1:5A:8A:51:19:D1:19:98:4E:B6:F9:88:F6:85:19:34
Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
Certificate issuer: /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Certificate serial: 019D2B176D08138C137E8403AA06708F0F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
Manifest number: 181B
Signing time: Thu 26 Mar 2026 17:00:48 +0000
Manifest this update: Thu 26 Mar 2026 17:00:48 +0000
Manifest next update: Fri 27 Mar 2026 17:00:48 +0000
Files and hashes: 1: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl (hash: eO4Rbv1grqFmRtrbZQWGhuagC4UEp1I0oic4KynnF6M=)
2: eL4sddmNTd7PSzARjzADz_21RBc.roa (hash: 9PP/TpfqraKWqrmb3Ro9MwG6dH8Z8rYhFZu1I649JYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:6d:08:13:8c:13:7e:84:03:aa:06:70:8f:0f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Validity
Not Before: Mar 26 17:00:48 2026 GMT
Not After : Mar 27 17:00:48 2026 GMT
Subject: CN=a34f29e2b15a8a5119d119984eb6f988f6851934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8b:e2:02:40:00:63:61:59:2a:09:d5:42:93:
d2:23:d1:ea:2d:fd:1e:dc:1f:b0:5d:33:52:dd:eb:
bd:9d:0f:bc:f7:3c:d8:3d:50:85:d9:4e:d5:4e:4e:
98:a1:98:f9:f0:1a:14:14:2c:f6:63:af:37:42:9b:
8f:6c:cf:9d:ee:58:06:d3:4f:e9:ce:d2:1b:f4:4c:
8e:b6:45:be:b9:54:40:c9:bb:6a:a5:37:1a:ba:fc:
5b:68:95:d3:de:25:e4:9a:2f:cf:6c:92:c1:7e:ab:
53:45:dc:2b:88:63:23:7d:66:ee:0a:4b:ce:75:dd:
65:0d:06:20:ec:c3:ec:98:ce:8b:0c:d6:70:3c:f8:
a9:1c:f6:4e:bc:1d:48:45:52:0b:77:7b:bf:4e:ed:
c9:98:7b:b1:69:cf:3b:a8:4b:96:d7:08:6d:4c:e0:
c4:91:52:05:50:ba:21:b4:ca:12:f4:da:5e:16:81:
bb:68:66:1b:a9:b7:b4:17:d8:7c:a0:0e:fa:7d:ff:
f2:7b:9d:1f:c1:c2:6d:d8:8c:c2:80:5e:d9:4e:ad:
7b:0c:5e:f6:88:b4:a2:25:56:6c:6a:40:d4:cb:fc:
ab:97:89:ab:12:f1:e2:49:8a:52:0a:59:c0:a8:16:
ee:46:f8:8f:71:e8:7c:83:10:53:6d:5e:63:04:06:
e4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4F:29:E2:B1:5A:8A:51:19:D1:19:98:4E:B6:F9:88:F6:85:19:34
X509v3 Authority Key Identifier:
keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:5d:26:4c:4f:11:ba:9e:67:cf:a9:07:7d:bb:68:d2:94:5c:
15:f4:92:07:4b:fc:60:8d:72:7f:73:48:af:b1:c1:1d:8f:f1:
86:63:7f:1f:60:9b:d7:25:8f:b7:97:96:88:a3:57:72:79:7a:
ac:9a:41:83:4f:86:13:1a:b2:b9:82:8c:12:83:d7:84:19:60:
59:72:cb:d3:1b:48:5a:b7:49:bb:f8:c3:68:bd:83:15:e6:e0:
45:ba:fa:02:d5:23:d2:67:2a:d8:7d:40:3d:e0:e8:47:7c:f6:
81:c7:73:98:ab:95:f4:c6:8f:52:c1:fc:9e:a3:cb:1a:91:b3:
9a:e0:a1:3c:5b:e5:37:55:43:33:ea:38:8f:1f:57:fb:06:38:
76:05:00:3d:85:0f:1f:b7:44:5d:06:30:ce:1a:57:f0:a7:0c:
3b:e4:17:49:47:19:d5:a3:11:cc:2f:19:a9:e6:e6:70:88:d5:
57:95:b5:ed:3c:2c:f8:4f:19:9d:73:04:d5:ac:dd:57:bc:14:
09:d0:bf:c3:dd:6d:ac:6d:a3:3f:50:ca:3f:45:65:d0:00:6e:
7e:e1:4c:73:d7:15:87:1a:c2:f0:93:fa:66:7d:9f:b7:16:3a:
23:4e:31:65:2a:8b:9f:1c:f7:f4:6f:f9:f5:50:35:a4:9e:fa:
6b:06:80:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rF20IE4wTfoQDqgZwjw8bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDI4MDdlYWUyNmE2N2QzZWJjMjVlZDUwZmZlNTQzNGJj
NjZjNTIwHhcNMjYwMzI2MTcwMDQ4WhcNMjYwMzI3MTcwMDQ4WjAzMTEwLwYDVQQD
EyhhMzRmMjllMmIxNWE4YTUxMTlkMTE5OTg0ZWI2Zjk4OGY2ODUxOTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooviAkAAY2FZKgnVQpPSI9HqLf0e
3B+wXTNS3eu9nQ+89zzYPVCF2U7VTk6YoZj58BoUFCz2Y683QpuPbM+d7lgG00/p
ztIb9EyOtkW+uVRAybtqpTcauvxbaJXT3iXkmi/PbJLBfqtTRdwriGMjfWbuCkvO
dd1lDQYg7MPsmM6LDNZwPPipHPZOvB1IRVILd3u/Tu3JmHuxac87qEuW1whtTODE
kVIFULohtMoS9NpeFoG7aGYbqbe0F9h8oA76ff/ye50fwcJt2IzCgF7ZTq17DF72
iLSiJVZsakDUy/yrl4mrEvHiSYpSClnAqBbuRviPceh8gxBTbV5jBAbk3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNPKeKxWopRGdEZmE62+Yj2hRk0MB8GA1UdIwQY
MBaAFCTSgH6uJqZ9Prwl7VD/5UNLxmxSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lNTM0NGQtNWVjMy00MGVlLTg2MTIt
Zjk5YTNkZDk5ODI2LzEvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9lNTM0NGQtNWVjMy00MGVlLTg2MTItZjk5YTNkZDk5ODI2
LzEvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbl0mTE8R
up5nz6kHfbto0pRcFfSSB0v8YI1yf3NIr7HBHY/xhmN/H2Cb1yWPt5eWiKNXcnl6
rJpBg0+GExqyuYKMEoPXhBlgWXLL0xtIWrdJu/jDaL2DFebgRbr6AtUj0mcq2H1A
PeDoR3z2gcdzmKuV9MaPUsH8nqPLGpGzmuChPFvlN1VDM+o4jx9X+wY4dgUAPYUP
H7dEXQYwzhpX8KcMO+QXSUcZ1aMRzC8ZqebmcIjVV5W17Tws+E8ZnXME1azdV7wU
CdC/w91trG2jP1DKP0Vl0ABufuFMc9cVhxrC8JP6Zn2ftxY6I04xZSqLnxz39G/5
9VA1pJ76awaALg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:18:35 2026 by rpki-client