
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
File: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft (raw, json)
Hash identifier: 3Uwiq8krSaf/8jXBraSlQx0WPmTQYYzDTLlgbJhUufU=
Subject key identifier: 87:47:B9:AF:64:74:42:3D:1F:37:78:FA:B9:C2:32:08:F9:56:EF:C8
Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
Certificate issuer: /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Certificate serial: 01A1306A8BE2F3AAFDD95B5BC75B5260FC83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
Manifest number: 1A30
Signing time: Mon 12 Oct 2026 14:00:51 +0000
Manifest this update: Mon 12 Oct 2026 14:00:51 +0000
Manifest next update: Tue 13 Oct 2026 14:00:51 +0000
Files and hashes: 1: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl (hash: 9AU+7Pg52zstcnPpCZafhVrcO/6/WtdhZYf7SEYJXX8=)
2: eL4sddmNTd7PSzARjzADz_21RBc.roa (hash: 9PP/TpfqraKWqrmb3Ro9MwG6dH8Z8rYhFZu1I649JYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:6a:8b:e2:f3:aa:fd:d9:5b:5b:c7:5b:52:60:fc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Validity
Not Before: Oct 12 14:00:51 2026 GMT
Not After : Oct 13 14:00:51 2026 GMT
Subject: CN=8747b9af6474423d1f3778fab9c23208f956efc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:dd:29:f4:81:5e:32:33:a9:aa:46:50:75:
dd:4d:54:7a:9f:85:92:1c:87:87:b4:85:04:f6:6d:
a2:02:ea:d7:ac:f7:2a:de:d5:aa:94:c4:b4:80:7b:
af:f1:5d:08:91:de:3e:84:65:f4:e7:cf:3b:c3:7e:
2e:c8:b5:13:ce:e5:88:3a:b0:2a:81:e1:e2:2e:9b:
a2:4f:dd:1e:96:e2:c4:c1:5b:12:69:82:0c:ef:52:
06:18:31:ff:56:ad:6e:22:26:a4:d5:21:25:78:c5:
74:81:ae:74:2a:6e:2e:78:09:af:d2:1c:81:d3:1b:
4a:e8:7c:05:ac:8d:56:6a:be:ed:f5:1e:a7:85:d8:
04:e0:c1:0b:f7:41:74:2f:62:49:9e:34:63:18:72:
df:e4:6a:90:46:fc:67:ad:c1:53:e9:60:94:73:1a:
77:da:ec:aa:44:21:65:2f:ce:89:ee:ca:25:9b:84:
5f:44:64:55:0d:ff:c9:c5:da:52:17:99:3a:5d:8b:
81:16:2f:ff:e6:4a:70:9d:8c:7d:24:50:f2:f8:b9:
15:2c:72:03:14:f5:18:22:be:0c:32:72:72:e4:8a:
59:f1:61:4a:bc:3a:a4:65:e4:cd:d6:9a:f0:8e:76:
a4:0a:f5:8d:a0:1d:15:92:a2:2b:70:d1:2f:da:a0:
68:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:47:B9:AF:64:74:42:3D:1F:37:78:FA:B9:C2:32:08:F9:56:EF:C8
X509v3 Authority Key Identifier:
keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7a:2e:7c:b3:bc:b4:17:26:c3:e3:dd:ae:74:59:f8:40:5f:
78:6e:e4:a1:ca:3b:df:53:53:8c:b5:57:bb:ce:1e:88:7a:9d:
80:03:40:07:e7:46:2c:47:23:ac:19:1e:a3:3a:51:e9:42:fe:
89:5b:21:a8:c4:da:5d:6c:56:83:10:a9:49:5f:05:d5:26:52:
95:fb:4a:53:36:1f:4f:8a:1b:a0:10:d7:92:1e:e7:2d:4c:4a:
bc:d6:c8:bb:d4:f3:20:19:be:c0:b1:69:88:3b:39:6a:c0:cc:
f8:cf:3a:07:a4:10:bb:d4:b6:ff:99:b1:65:65:5a:d5:51:d5:
cb:31:73:e8:b6:9e:ed:b0:84:ce:eb:8d:32:59:d9:56:c1:37:
e2:91:ff:5b:e8:b8:24:27:0c:b4:15:ce:97:6d:96:a2:10:1d:
0d:71:be:de:4c:bd:99:4b:e0:0b:63:be:3b:4d:04:b0:58:dd:
54:54:c8:41:03:b4:38:5d:44:73:44:6f:09:c3:b1:a1:8b:34:
1f:51:01:01:63:f7:e5:6f:45:f1:e7:6f:80:80:3a:f7:e0:0d:
2c:16:b1:1c:23:24:d2:4e:f9:37:5f:cf:cf:7c:79:9a:43:1c:
ae:04:31:c1:84:ce:9a:e5:4a:67:d7:c6:a4:bf:17:69:2a:5c:
06:e4:d0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:24:32 2026 by rpki-client