Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: TeKJw2hfC1+fJ2MOtAxpAO2PCSBWajEYZHGiNZ2SN3k=
Subject key identifier: EA:E0:E6:01:87:F3:99:32:39:59:31:5B:92:7B:84:38:41:87:48:07
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 019D273B1DB92D81BB15A423986D272D6EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 0B12
Signing time: Wed 25 Mar 2026 23:01:18 +0000
Manifest this update: Wed 25 Mar 2026 23:01:18 +0000
Manifest next update: Thu 26 Mar 2026 23:01:18 +0000
Files and hashes: 1: 7CXGDptf2okcN_TUuRa0vGLyCaQ.roa (hash: uAwFHhRb6M0iaad5i6SJTir06b/xHTrf77HmrAGNoN0=)
2: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: X++uAtvsGwpsL09QHK01FNZeoLoL3vIk/4DDMOZr/M4=)
3: mp7eBUGX1B69vxK-CwJzFulzqZk.roa (hash: yIxwbLnT118Vwlqh6tg/BfTUPJnypGV001BfjuX6b44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:1d:b9:2d:81:bb:15:a4:23:98:6d:27:2d:6e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Mar 25 23:01:18 2026 GMT
Not After : Mar 26 23:01:18 2026 GMT
Subject: CN=eae0e60187f399323959315b927b843841874807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:da:30:c0:90:43:f9:5b:42:04:07:ec:45:b0:
df:c0:8f:aa:2c:30:3e:f9:87:bb:93:e2:f1:63:5f:
20:59:de:50:19:fe:3e:18:fa:18:5c:23:95:91:5d:
ee:5a:66:5c:25:09:b0:2a:5d:b0:c1:f7:04:68:08:
65:5d:7e:a8:34:a3:70:bb:79:51:33:14:97:c6:74:
0a:b6:fc:e7:ae:0a:16:a6:a1:c9:69:4b:f8:53:df:
6c:fb:98:67:ea:73:cb:06:8a:91:09:a7:cb:2a:ad:
8e:d2:c1:6b:82:d7:33:c2:08:c7:36:a8:1b:88:47:
da:14:ff:07:e9:ab:cc:e3:7d:5d:b3:e6:58:7c:39:
ea:4b:92:18:ae:37:6c:c5:a1:5c:58:aa:1c:52:82:
ad:4b:21:4e:53:21:d7:f7:5d:b7:15:a3:e3:59:c6:
2a:f4:bb:c3:6f:e1:67:09:ec:d4:f4:24:ef:ef:da:
e1:ab:4c:b6:ce:19:06:dd:6f:f5:3a:12:a9:e3:3b:
07:65:86:52:cf:6f:26:a7:60:aa:51:cc:94:eb:43:
5a:0b:c8:5f:fd:a0:fc:6d:25:92:cc:ad:ac:df:c9:
44:a4:9d:57:3f:ee:4e:16:53:ec:04:40:56:87:0f:
01:c8:17:11:31:64:69:52:80:79:d2:a7:ff:22:2e:
b8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E0:E6:01:87:F3:99:32:39:59:31:5B:92:7B:84:38:41:87:48:07
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b4:77:5c:cf:51:f1:59:9c:95:28:85:f8:4d:34:6a:1d:00:
62:32:df:c0:15:19:67:2b:77:c3:4d:68:29:3f:fa:73:3b:30:
fa:3b:d9:7a:bd:29:7b:65:96:e4:c7:11:24:3a:96:b5:ec:52:
88:33:f8:83:cd:52:b4:e0:b7:51:00:d2:08:40:8e:1c:9a:56:
a5:62:7d:2d:d0:e3:45:13:58:e1:7f:85:cb:ae:f4:44:57:94:
dd:b0:d2:f1:ee:e4:bd:9f:e8:50:cb:45:ab:2c:82:f9:cd:ad:
22:7b:78:22:e8:eb:cc:72:90:d8:5d:9e:d5:32:38:24:52:cd:
00:81:e7:7f:6b:b5:df:2f:71:14:2b:1a:ea:2a:c0:b5:a3:0f:
42:bb:29:fc:d4:d0:2b:cd:c5:36:fd:3b:c8:93:11:b6:da:34:
1e:c8:9f:7a:16:cd:00:75:bb:0f:fc:98:1c:cf:f1:01:9c:8a:
38:db:60:c9:ba:94:a7:d7:e9:55:f0:e7:d6:13:4f:85:0f:8d:
a3:c1:70:c6:20:da:a4:be:7e:22:85:9f:81:74:df:c5:5b:71:
07:21:f1:40:86:fe:9f:06:a9:da:ab:ed:4c:f0:f8:fe:90:eb:
2d:02:fa:70:ff:6b:a5:f3:41:b4:9d:3c:1b:3b:2e:d2:19:bc:
57:77:e2:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOx25LYG7FaQjmG0nLW7zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDQ3MDIxNGM2OWU0MzBmOGIzODVlMDkzNmFkOTYwMTY2
YWNkZjAwHhcNMjYwMzI1MjMwMTE4WhcNMjYwMzI2MjMwMTE4WjAzMTEwLwYDVQQD
EyhlYWUwZTYwMTg3ZjM5OTMyMzk1OTMxNWI5MjdiODQzODQxODc0ODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NowwJBD+VtCBAfsRbDfwI+qLDA+
+Ye7k+LxY18gWd5QGf4+GPoYXCOVkV3uWmZcJQmwKl2wwfcEaAhlXX6oNKNwu3lR
MxSXxnQKtvznrgoWpqHJaUv4U99s+5hn6nPLBoqRCafLKq2O0sFrgtczwgjHNqgb
iEfaFP8H6avM431ds+ZYfDnqS5IYrjdsxaFcWKocUoKtSyFOUyHX9123FaPjWcYq
9LvDb+FnCezU9CTv79rhq0y2zhkG3W/1OhKp4zsHZYZSz28mp2CqUcyU60NaC8hf
/aD8bSWSzK2s38lEpJ1XP+5OFlPsBEBWhw8ByBcRMWRpUoB50qf/Ii64OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrg5gGH85kyOVkxW5J7hDhBh0gHMB8GA1UdIwQY
MBaAFCTUcCFMaeQw+LOF4JNq2WAWas3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5Sd0lVeHA1REQ0czRYZ2syclpZQlpxemZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xYjk2MzctMjc5NS00ZTdjLWIzM2Yt
ZTI4Mjk1ZTU0YzNjLzEvSk5Sd0lVeHA1REQ0czRYZ2syclpZQlpxemZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xYjk2MzctMjc5NS00ZTdjLWIzM2YtZTI4Mjk1ZTU0YzNj
LzEvSk5Sd0lVeHA1REQ0czRYZ2syclpZQlpxemZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbR3XM9R
8VmclSiF+E00ah0AYjLfwBUZZyt3w01oKT/6czsw+jvZer0pe2WW5McRJDqWtexS
iDP4g81StOC3UQDSCECOHJpWpWJ9LdDjRRNY4X+Fy670RFeU3bDS8e7kvZ/oUMtF
qyyC+c2tInt4IujrzHKQ2F2e1TI4JFLNAIHnf2u13y9xFCsa6irAtaMPQrsp/NTQ
K83FNv07yJMRtto0HsifehbNAHW7D/yYHM/xAZyKONtgybqUp9fpVfDn1hNPhQ+N
o8FwxiDapL5+IoWfgXTfxVtxByHxQIb+nwap2qvtTPD4/pDrLQL6cP9rpfNBtJ08
Gzsu0hm8V3fiUA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:16 2026 by rpki-client