Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
File: JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json)
Hash identifier: KFiEP5OXewv6flIFtMjbS4ptTMrbXOd4yr4bB+gyREw=
Subject key identifier: 83:03:57:EE:2A:22:21:99:29:0C:56:D6:3E:C3:F2:3D:35:CB:6B:61
Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
Certificate issuer: /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Certificate serial: 019D265FC339AAFD790692276D2A541DBFDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 19:01:43 +0000
Manifest this update: Wed 25 Mar 2026 19:01:43 +0000
Manifest next update: Thu 26 Mar 2026 19:01:43 +0000
Files and hashes: 1: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: NC7LQHi0XaORoQZLjzlzaZNdzIb9IdtYnmtFrBKW/Rk=)
2: NcvqQEHq7t81xbxiR-3wQxKy6sk.asa (hash: T6uf6iqamEiscrQRCCpxXU6qFtuegEXN91mKxUf+/xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:c3:39:aa:fd:79:06:92:27:6d:2a:54:1d:bf:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Validity
Not Before: Mar 25 19:01:43 2026 GMT
Not After : Mar 26 19:01:43 2026 GMT
Subject: CN=830357ee2a222199290c56d63ec3f23d35cb6b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:61:25:5e:39:fd:3d:48:16:36:02:06:d8:
52:33:57:43:d1:fa:b7:c2:f9:f3:d5:ef:60:7b:4a:
08:0b:e8:50:7e:5e:d5:87:6c:33:c7:db:ea:54:c3:
7c:47:35:cf:0b:0a:ca:cb:d1:59:66:30:e1:12:27:
6f:7d:33:df:11:01:3f:e7:02:7a:62:7b:b2:6e:49:
2e:a9:00:43:7a:2e:32:80:2c:33:90:3b:a1:85:78:
95:06:05:ff:10:9e:5c:1e:e4:76:75:1a:21:49:0d:
b5:62:29:09:9a:21:f5:03:58:e3:2a:97:51:c4:90:
a4:d9:81:83:f1:18:f3:0d:22:26:4d:5b:d5:0f:99:
d7:46:a7:6d:6d:30:6b:20:4b:5c:c1:f8:a2:58:be:
84:44:04:df:c2:2e:04:1c:ff:a6:e7:6e:e3:13:0c:
22:c7:dd:e3:93:d6:14:fd:46:b4:2a:8c:d9:9d:e6:
1b:b7:92:43:bd:e0:95:37:20:86:3d:e8:96:50:aa:
5b:95:26:b4:ff:27:e8:87:9b:f7:23:3a:a7:b6:ac:
82:8e:03:21:ac:8b:98:c5:78:80:3f:21:57:72:0b:
78:fd:ec:52:92:61:10:ff:8d:8d:3f:25:a1:cc:16:
92:2f:e2:c1:e1:a6:3e:f2:03:04:88:09:9a:20:8b:
ad:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:03:57:EE:2A:22:21:99:29:0C:56:D6:3E:C3:F2:3D:35:CB:6B:61
X509v3 Authority Key Identifier:
keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:06:7f:16:00:8f:81:59:4c:98:f4:1c:bc:43:c6:2e:f8:83:
1a:67:4f:ae:82:80:f3:2b:be:11:8d:a1:3f:66:8c:64:20:c4:
f1:b3:97:81:33:46:1a:56:26:ad:60:1b:8b:3f:e4:53:91:54:
df:e7:81:6a:69:9a:85:a0:58:fd:88:30:e1:83:ad:1c:87:dc:
3f:3c:36:d1:0f:48:b6:f6:7d:9e:7b:83:91:d1:1c:53:09:32:
55:cd:d6:8b:15:7e:ed:01:e6:cf:dd:51:10:b9:b5:bd:f7:08:
50:06:43:bf:cb:fc:7a:36:da:39:57:3c:e4:99:33:f6:73:85:
c4:78:84:a1:90:f3:33:30:1e:b8:75:a8:36:21:1d:ba:9e:74:
93:64:a9:47:b0:2d:89:d4:ae:6c:34:72:5b:f1:8c:3e:7f:12:
be:da:0a:b4:f3:70:76:68:dc:e8:1a:a0:42:71:2b:f7:75:22:
a0:55:77:9a:24:dd:3e:61:bd:b9:ab:1e:f4:d5:20:72:09:0d:
57:57:5d:05:34:d9:31:8d:41:f4:0d:d0:b2:86:e1:8d:8c:0e:
14:f5:9f:c7:f6:74:ae:01:08:d1:47:21:3f:9c:f7:17:4f:19:
ce:ff:73:ba:e4:6c:24:d8:bb:e9:a8:99:99:03:3c:15:50:db:
cd:0c:d8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:21:46 2026 by rpki-client