Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: M+NLKLkXpHCk2iuU+QCxMyakp5pSpqcfpH+j1tXoAos=
Subject key identifier: ED:67:B5:B3:C2:D7:BB:F1:DC:5E:DF:18:C1:4E:6B:76:4F:D5:E0:D3
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 01A0D3B8D58F44E7F9A61DE4CAB663E519A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 0CFA
Signing time: Thu 24 Sep 2026 14:01:40 +0000
Manifest this update: Thu 24 Sep 2026 14:01:40 +0000
Manifest next update: Fri 25 Sep 2026 14:01:40 +0000
Files and hashes: 1: 80ILhoqGZSBKNX5Iy2cNCAyJb74.roa (hash: k6RMwpsO22pGIm9dpIOntkuacDWIQ01zOqnH6Be8QXU=)
2: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: uh+wtPEoGnTiK5gCbGMJyKbEOwRImu26DGVqxScamgo=)
3: UHBKB5DuCWOk2pbJd-90ewsu0MY.roa (hash: sEHGvoM4XfIy3O+HYwpWVDG3FHkWEr0D2jB6POjci38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:d5:8f:44:e7:f9:a6:1d:e4:ca:b6:63:e5:19:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Sep 24 14:01:40 2026 GMT
Not After : Sep 25 14:01:40 2026 GMT
Subject: CN=ed67b5b3c2d7bbf1dc5edf18c14e6b764fd5e0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5b:47:88:f5:32:ec:9b:77:28:f1:c9:53:2a:
8f:9e:73:6e:ca:63:17:32:dc:5f:03:c6:26:dd:64:
4b:4b:d5:ce:d3:1c:32:27:f5:e8:84:42:d2:3d:05:
c7:a6:5e:a3:5c:dd:89:03:05:5a:0a:07:8a:ce:74:
a8:17:1d:d6:4f:df:a4:61:63:4e:a0:18:00:e3:2d:
cf:b7:ea:24:52:33:a6:16:3d:d0:f4:8a:d8:e7:08:
38:16:d8:41:8d:95:9d:c4:31:b5:1d:02:9b:7f:17:
9f:f6:92:01:f1:87:fb:ba:87:d7:90:98:a9:00:be:
f0:8f:36:07:93:69:3e:b5:96:48:90:7b:8c:0c:e4:
55:6a:2a:d8:5e:0c:5d:29:c5:5c:e8:14:1a:89:54:
84:9d:28:06:c3:cb:f0:7b:0f:31:3c:89:4a:13:f4:
03:cf:6e:11:bc:85:0d:ea:ff:3e:4c:d4:bd:55:c5:
94:84:1d:04:65:33:ad:2d:f0:9c:c1:ca:d5:e6:1c:
f7:ec:07:e3:fb:b3:16:83:e2:33:56:d3:e0:09:7a:
a0:94:70:e0:e8:86:7d:7f:50:3c:e3:ae:b4:7b:9f:
d4:83:cf:f6:2f:7c:4f:77:4f:ab:72:a2:26:ba:cb:
b4:76:59:a3:17:42:e2:b8:cb:25:f8:44:ee:0e:b0:
81:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:67:B5:B3:C2:D7:BB:F1:DC:5E:DF:18:C1:4E:6B:76:4F:D5:E0:D3
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:92:47:0f:0d:55:d0:1c:08:4f:ea:77:05:b1:10:9f:a9:9d:
f8:12:42:f5:98:1e:e0:1c:7a:64:4c:4a:17:3d:49:f9:b0:ae:
21:c0:da:2c:d1:95:78:00:b3:2f:81:20:e5:d4:cc:e7:28:9c:
f1:4b:d0:df:00:9d:9f:9f:fe:1f:ca:11:c8:b6:ce:57:ef:d7:
1f:f3:16:98:79:e2:63:b7:d6:60:5a:42:1a:68:ce:52:39:8a:
ba:d1:f8:3a:44:fc:d3:6e:89:8e:88:82:ed:a7:9b:5f:b7:6c:
8d:b4:ff:31:8b:25:3e:6d:5e:e9:c9:30:ba:84:f9:b5:28:7e:
7b:11:95:14:f5:da:a4:c6:6b:b5:44:dc:f2:50:dc:97:8d:90:
a6:27:f5:ec:78:9c:2b:38:1f:09:9c:d7:ee:06:3b:45:53:e2:
ed:2d:b0:6b:01:69:80:d4:5b:f2:74:71:d8:37:3f:2e:42:15:
03:40:13:5d:ec:13:86:ca:f4:38:08:89:34:e8:6f:b8:cd:27:
70:83:f1:c2:9d:36:c6:fc:bf:33:e0:25:7b:1f:84:47:69:cc:
81:10:15:0d:76:8d:f9:7a:97:72:cd:d3:35:00:e7:2f:4e:90:
bd:88:34:db:02:b5:b8:ee:fb:3b:83:fd:55:3a:ad:43:3a:c0:
69:f1:b3:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTuNWPROf5ph3kyrZj5RmgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDQ3MDIxNGM2OWU0MzBmOGIzODVlMDkzNmFkOTYwMTY2
YWNkZjAwHhcNMjYwOTI0MTQwMTQwWhcNMjYwOTI1MTQwMTQwWjAzMTEwLwYDVQQD
EyhlZDY3YjViM2MyZDdiYmYxZGM1ZWRmMThjMTRlNmI3NjRmZDVlMGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21tHiPUy7Jt3KPHJUyqPnnNuymMX
MtxfA8Ym3WRLS9XO0xwyJ/XohELSPQXHpl6jXN2JAwVaCgeKznSoFx3WT9+kYWNO
oBgA4y3Pt+okUjOmFj3Q9IrY5wg4FthBjZWdxDG1HQKbfxef9pIB8Yf7uofXkJip
AL7wjzYHk2k+tZZIkHuMDORVairYXgxdKcVc6BQaiVSEnSgGw8vwew8xPIlKE/QD
z24RvIUN6v8+TNS9VcWUhB0EZTOtLfCcwcrV5hz37Afj+7MWg+IzVtPgCXqglHDg
6IZ9f1A84660e5/Ug8/2L3xPd0+rcqImusu0dlmjF0LiuMsl+ETuDrCBHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1ntbPC17vx3F7fGMFOa3ZP1eDTMB8GA1UdIwQY
MBaAFCTUcCFMaeQw+LOF4JNq2WAWas3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5Sd0lVeHA1REQ0czRYZ2syclpZQlpxemZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xYjk2MzctMjc5NS00ZTdjLWIzM2Yt
ZTI4Mjk1ZTU0YzNjLzEvSk5Sd0lVeHA1REQ0czRYZ2syclpZQlpxemZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xYjk2MzctMjc5NS00ZTdjLWIzM2YtZTI4Mjk1ZTU0YzNj
LzEvSk5Sd0lVeHA1REQ0czRYZ2syclpZQlpxemZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJJHDw1V
0BwIT+p3BbEQn6md+BJC9Zge4Bx6ZExKFz1J+bCuIcDaLNGVeACzL4Eg5dTM5yic
8UvQ3wCdn5/+H8oRyLbOV+/XH/MWmHniY7fWYFpCGmjOUjmKutH4OkT8026JjoiC
7aebX7dsjbT/MYslPm1e6ckwuoT5tSh+exGVFPXapMZrtUTc8lDcl42Qpif17Hic
KzgfCZzX7gY7RVPi7S2wawFpgNRb8nRx2Dc/LkIVA0ATXewThsr0OAiJNOhvuM0n
cIPxwp02xvy/M+Alex+ER2nMgRAVDXaN+XqXcs3TNQDnL06QvYg02wK1uO77O4P9
VTqtQzrAafGz8w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:54:13 2026 by rpki-client