Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
File: JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json)
Hash identifier: HXzj1eRQooHfWpfUw7qLGZ2/vBIvpnQEHTUSqrPm8ok=
Subject key identifier: 57:54:6B:D6:EF:B7:B6:E7:E8:F2:E9:A5:65:B7:7C:50:A2:98:15:00
Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
Certificate issuer: /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Certificate serial: 019F8EA2D6AFA521A4689CE21BF9099875F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 11:01:04 +0000
Manifest this update: Thu 23 Jul 2026 11:01:04 +0000
Manifest next update: Fri 24 Jul 2026 11:01:04 +0000
Files and hashes: 1: FCljHGHovqzN4BKCv8IM4kFItQI.asa (hash: NVB42NAGkeXqyUHIUWyyW/hOv6nAj+V3g5qKcFOSaJk=)
2: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: XY6ttiGxAITXfpG2lfI//zBP/ASlRrMxLwmHaNn8g24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:d6:af:a5:21:a4:68:9c:e2:1b:f9:09:98:75:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Validity
Not Before: Jul 23 11:01:04 2026 GMT
Not After : Jul 24 11:01:04 2026 GMT
Subject: CN=57546bd6efb7b6e7e8f2e9a565b77c50a2981500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:bf:9d:2c:65:43:4a:f4:c7:19:80:d7:d8:
02:b7:d7:26:4d:f8:6e:91:38:91:d5:ea:96:3b:b1:
7c:aa:be:fd:9b:c7:c1:c5:86:a3:c6:b7:2a:bd:46:
c5:70:85:46:8e:b8:85:fe:d5:8c:68:d9:6b:ce:6d:
b7:32:6b:72:66:b7:f4:7e:47:6e:f0:64:99:a2:d6:
99:63:46:11:3b:7a:b8:bb:e9:a4:5e:9e:86:ca:0f:
be:49:5d:83:37:a0:d1:e2:9c:df:1a:26:bb:0e:7d:
59:8a:e7:69:84:7c:9d:4e:ad:70:83:4b:35:d8:95:
ce:1d:37:fe:fe:ac:ad:ba:e2:d8:42:97:ea:3e:1d:
d5:9b:29:4f:77:86:25:c9:3d:c7:e7:3a:d1:e1:99:
f4:56:1b:c7:68:23:6b:75:c6:b5:7d:af:04:ae:ff:
11:54:b6:40:91:14:34:9a:34:88:74:b2:64:5a:1d:
41:c9:74:ad:a1:34:a2:79:37:65:8f:44:9b:bc:d3:
69:e7:f8:88:3c:6c:59:ab:f7:e3:b6:ec:33:3b:7b:
bf:39:ec:2e:b1:c2:5b:e5:11:83:88:07:93:56:7d:
1a:ca:d9:1e:e9:7a:ac:31:14:51:fb:2b:83:4f:49:
3f:6f:3c:59:55:8b:f9:49:59:cb:38:fa:eb:4c:74:
c2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:54:6B:D6:EF:B7:B6:E7:E8:F2:E9:A5:65:B7:7C:50:A2:98:15:00
X509v3 Authority Key Identifier:
keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e9:3b:3a:4b:2b:4f:7f:b5:61:98:5c:e5:73:87:ed:48:3e:
8a:70:b3:16:45:bd:7b:da:ef:bb:b4:cd:9d:93:40:a9:3b:da:
8b:7f:1c:65:33:a4:45:96:3a:ad:81:c7:a2:a5:9c:14:ed:fa:
9b:e1:78:92:4c:8f:b9:a2:18:6a:52:65:d8:8d:f6:db:b2:f4:
24:2f:74:29:4e:26:67:f4:86:ac:9b:ef:ff:8e:99:e0:3c:76:
5b:65:16:09:81:cc:50:8f:aa:87:4d:56:05:7d:de:4d:55:40:
34:ea:b3:5c:74:ec:0d:31:b0:24:33:72:f0:df:ca:aa:8c:db:
4c:ee:63:72:b3:b2:7c:ed:03:6d:55:cb:0b:bb:6c:a6:a9:4d:
cb:ab:9c:6e:b6:f4:b5:e5:08:dd:12:e0:c0:99:26:4d:1c:8d:
c2:51:6d:e7:a2:c3:64:61:03:83:a1:2b:4c:f7:76:95:12:2d:
6e:a8:89:35:b1:bf:ae:ab:db:da:d6:6c:02:3b:91:1d:27:23:
bf:88:00:0f:79:5c:ec:cf:98:9e:56:c5:03:ef:4f:2f:85:92:
bd:37:85:ca:09:d5:f8:fe:53:c0:05:37:b5:16:5a:1f:9a:83:
b0:ee:54:00:a4:37:3b:83:35:59:20:60:c1:be:f5:bb:2a:65:
83:a7:f1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:12 2026 by rpki-client