Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: GoEMjOYQBnQixAjTKhJfyey8M483WkRhU4feT3FyzJ4=
Subject key identifier: 78:AB:0C:12:D9:0C:CB:94:A3:A2:0B:AD:79:8A:99:99:B7:D8:BB:E5
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 019E1C7E0636AB035F7C736E001E02453AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 0B91
Signing time: Tue 12 May 2026 14:01:21 +0000
Manifest this update: Tue 12 May 2026 14:01:21 +0000
Manifest next update: Wed 13 May 2026 14:01:21 +0000
Files and hashes: 1: 7CXGDptf2okcN_TUuRa0vGLyCaQ.roa (hash: uAwFHhRb6M0iaad5i6SJTir06b/xHTrf77HmrAGNoN0=)
2: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: FJ9Z+N7JvCqaBbr1IvtxvX3mDbSlk3u73wXByrm+h40=)
3: mp7eBUGX1B69vxK-CwJzFulzqZk.roa (hash: yIxwbLnT118Vwlqh6tg/BfTUPJnypGV001BfjuX6b44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7e:06:36:ab:03:5f:7c:73:6e:00:1e:02:45:3a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: May 12 14:01:21 2026 GMT
Not After : May 13 14:01:21 2026 GMT
Subject: CN=78ab0c12d90ccb94a3a20bad798a9999b7d8bbe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:de:9b:b1:b1:a5:41:68:e0:77:45:40:d5:fd:
d8:73:fd:44:e0:27:3e:6d:65:29:fe:38:e1:34:d6:
a1:56:2c:fd:1d:67:3e:51:a5:5d:e7:3c:01:73:0c:
95:ae:83:be:72:42:67:49:f0:71:88:58:83:36:fa:
70:b1:50:8c:1b:b8:04:61:60:fe:b6:00:14:96:83:
a2:c9:33:8f:ed:b1:ca:7b:7b:57:60:36:1e:37:ad:
47:06:ec:56:75:48:d5:be:bf:69:66:f3:d3:27:00:
73:20:d0:a6:4b:bd:6a:3c:63:22:12:d4:12:37:1d:
eb:e3:ed:ac:dd:91:5e:e4:1c:e8:82:ac:19:7c:2b:
39:ce:e6:aa:ea:42:f4:37:07:b7:fc:31:55:74:67:
9b:1b:e9:a4:0d:cc:d8:01:33:07:4e:03:12:5d:f2:
da:f2:f3:26:3b:cd:25:3c:fa:ab:83:6e:f6:ea:24:
f1:fd:fc:c4:2f:46:f4:04:d2:26:ac:c7:52:c0:b0:
a3:62:34:e7:25:e8:66:3b:a6:a5:ee:af:07:bf:e0:
10:05:35:4f:11:40:72:05:b9:39:99:c0:94:38:40:
87:be:22:96:80:87:52:77:33:ed:b2:5a:0a:cf:71:
47:a5:9e:e4:13:57:f3:6d:51:e4:32:b0:b2:7a:2d:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AB:0C:12:D9:0C:CB:94:A3:A2:0B:AD:79:8A:99:99:B7:D8:BB:E5
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:1e:cf:d2:db:66:fd:89:b5:ce:ab:9b:9c:2b:f9:c1:90:ee:
89:3a:22:2d:20:c3:61:bd:7a:4c:e6:2b:fb:3d:53:2e:ad:c5:
fa:00:1c:73:4d:20:3c:6e:df:f9:ce:12:ba:e7:7a:7f:72:11:
9a:ae:25:a5:96:df:8e:26:a4:39:44:e0:bf:ab:a9:c9:b0:24:
0f:b4:70:02:35:98:c1:cc:3e:e7:c5:17:fd:2d:4a:89:18:26:
4a:6b:f1:1a:71:f8:f2:2b:7c:f5:6f:1b:8c:38:90:fe:4b:f2:
e2:66:4f:12:b1:21:68:46:58:6b:73:b3:c5:35:eb:54:27:2b:
32:49:c2:c4:01:e4:44:5d:c9:08:85:8d:44:ef:3d:db:0d:79:
41:c9:e9:da:3f:e6:ec:ec:d3:c0:d8:cd:e0:f2:58:09:84:90:
31:d2:ce:20:c4:6f:82:02:5c:f2:fb:49:a9:1d:e2:63:bf:ce:
26:53:4f:82:9f:e8:4a:a6:82:f9:8f:5d:a7:9f:04:0e:6e:82:
b5:ca:fa:f1:65:38:da:90:21:7e:5d:b0:9f:b6:26:56:09:8c:
63:40:47:0f:15:8a:19:cd:1c:8d:e1:af:b0:00:23:7b:ee:ce:
ce:c3:a7:80:f0:92:70:11:9e:95:75:ac:46:d2:12:b3:b1:34:
df:d0:30:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:33:20 2026 by rpki-client