Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
File: JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json)
Hash identifier: fTRbs+7tIzcH+81JuivlypYdnDCuPOaXFPUygNmRefw=
Subject key identifier: 69:37:B8:0F:75:18:63:24:A9:D4:D8:D4:78:E2:2E:9A:AC:E5:13:C0
Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
Certificate issuer: /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Certificate serial: 01A0D8A81B33AB0A48B247B87378EBFFD17E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
Manifest number: 1A73
Signing time: Fri 25 Sep 2026 13:01:30 +0000
Manifest this update: Fri 25 Sep 2026 13:01:30 +0000
Manifest next update: Sat 26 Sep 2026 13:01:30 +0000
Files and hashes: 1: 30ysbftw_D4n6jWsjQTM0UTzylo.asa (hash: 6Se9XkdxHIZE7HtdPW3EYh1bEmfcbzom2szFR4ZRIdU=)
2: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: zEqaZtmP/K1Z44+IlTEWgL1kXt3KjSUEPZPrm92bsuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:1b:33:ab:0a:48:b2:47:b8:73:78:eb:ff:d1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Validity
Not Before: Sep 25 13:01:30 2026 GMT
Not After : Sep 26 13:01:30 2026 GMT
Subject: CN=6937b80f75186324a9d4d8d478e22e9aace513c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b8:9c:82:d5:18:db:f7:85:b2:c0:9f:e0:2a:
f1:c0:1f:a4:15:e3:dc:a8:5f:98:90:b6:ca:99:47:
3b:ce:b9:47:58:68:44:74:b8:7a:37:2b:08:36:53:
18:33:c0:bd:4a:2d:94:aa:57:6d:ea:9a:07:a8:db:
ad:b1:00:01:4c:7b:c4:63:c9:01:77:16:87:ee:91:
f4:82:9a:b4:f1:48:29:e7:bf:40:05:b6:21:f1:00:
fd:3c:35:9a:f7:7f:52:54:08:37:92:e8:00:f9:b2:
73:e6:39:9c:3e:63:e3:52:6a:b7:64:f9:cd:de:9c:
6f:4d:c5:e4:11:a1:b7:2a:1d:5f:e0:10:3b:8d:21:
1c:b0:9e:0c:ec:10:e0:1f:e8:c9:f5:1f:5c:b3:76:
60:76:17:33:da:fc:a0:d5:6a:2f:9d:da:de:46:c2:
b0:f1:ef:8f:67:f9:ec:21:c2:0c:b5:01:ee:50:eb:
8a:5f:5b:c8:2d:c4:dd:f3:9e:99:4e:81:ee:09:49:
b3:19:5b:92:92:b5:42:91:5a:e7:9e:41:fc:82:62:
69:61:40:d1:2d:7a:fa:51:14:84:3f:57:0e:cd:91:
4b:75:1f:33:ae:c7:29:81:24:33:53:e8:17:ef:f2:
bc:99:12:dd:7c:8a:3a:bc:0e:d9:eb:e2:60:d1:e0:
ab:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:37:B8:0F:75:18:63:24:A9:D4:D8:D4:78:E2:2E:9A:AC:E5:13:C0
X509v3 Authority Key Identifier:
keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e9:dd:6d:f9:30:9a:c2:5e:d2:cc:22:cd:12:a3:c2:54:87:
a8:a8:92:54:3f:ac:c6:16:e7:61:20:db:3a:30:3c:3c:9c:b3:
04:4b:14:43:68:e5:3a:bc:5d:75:a9:52:08:e0:ae:f6:94:86:
e8:18:13:7c:ab:83:5b:2e:9d:1c:68:e9:ac:aa:d7:a2:34:64:
6f:82:d1:1a:60:42:3c:be:71:9b:68:cd:b7:ea:b8:0c:81:28:
79:14:34:88:0c:cd:d1:4b:bd:71:23:90:f1:ff:b7:48:13:15:
28:36:6e:08:3d:f8:0c:37:e0:97:a0:c9:4a:92:ea:4a:f9:66:
6e:dd:ad:0d:6e:ac:6b:3b:d9:86:f7:a6:f3:aa:ed:b5:03:91:
7e:2e:39:e6:5f:ee:26:c1:88:05:5c:4d:1c:57:20:8d:ee:93:
5b:9a:f2:78:68:b1:3c:b1:b7:7a:37:19:74:34:c0:d6:8d:73:
4d:6d:a8:b8:90:29:9b:1b:7c:1c:9c:21:09:34:5f:27:a2:cf:
cc:e2:e0:97:2a:63:07:de:25:dc:47:72:de:7a:c1:a4:80:5c:
ec:53:02:ab:0e:00:00:ca:c3:b3:b7:14:4c:51:d1:ab:64:0c:
da:03:a0:18:09:33:93:a3:05:d3:5a:17:35:4a:04:46:e6:2d:
8d:96:23:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:46:20 2026 by rpki-client