Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: zYciIpXLTlFcpZDakUl+WhWsGCoEyo8AAxjBfl1IiMo=
Subject key identifier: 7F:A3:B0:17:A5:EE:04:A6:DE:0D:28:0C:0D:17:2A:42:87:A3:FA:AF
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 01A0D1C8F6450AF3024BEAF186C20D8F195E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 0CF9
Signing time: Thu 24 Sep 2026 05:00:03 +0000
Manifest this update: Thu 24 Sep 2026 05:00:03 +0000
Manifest next update: Fri 25 Sep 2026 05:00:03 +0000
Files and hashes: 1: 80ILhoqGZSBKNX5Iy2cNCAyJb74.roa (hash: k6RMwpsO22pGIm9dpIOntkuacDWIQ01zOqnH6Be8QXU=)
2: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: 4WezEir1S/TQ1cDLIzgq3PyGCCZKj6A7bq2Rv8fi7jY=)
3: UHBKB5DuCWOk2pbJd-90ewsu0MY.roa (hash: sEHGvoM4XfIy3O+HYwpWVDG3FHkWEr0D2jB6POjci38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c8:f6:45:0a:f3:02:4b:ea:f1:86:c2:0d:8f:19:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Sep 24 05:00:03 2026 GMT
Not After : Sep 25 05:00:03 2026 GMT
Subject: CN=7fa3b017a5ee04a6de0d280c0d172a4287a3faaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9c:15:db:f7:8f:22:37:aa:38:f6:e0:7e:04:
5e:2e:cb:de:c8:df:f2:39:f9:98:31:9d:4b:2a:01:
a8:1a:f7:d2:fa:f7:5c:7b:d2:a6:c2:0d:91:c7:72:
7c:1a:85:c6:f3:0b:46:47:49:0b:43:59:c0:bd:67:
80:2c:c8:59:28:8e:a6:d0:67:2a:21:97:32:98:1f:
e2:91:ea:53:12:c5:b7:d5:d7:72:51:7d:84:b8:29:
18:8a:d9:6f:ac:f2:8d:4a:bf:4e:fe:63:7a:84:c1:
98:28:4f:de:6f:79:d2:df:b5:37:b3:07:83:b1:2b:
83:9e:84:88:be:0d:95:26:fc:b6:96:ee:e8:40:87:
5b:3e:b5:a3:47:5c:11:fc:a7:df:a6:70:25:57:46:
0a:e7:e7:1c:d0:04:95:08:40:b4:15:4b:f1:5d:f0:
49:93:30:37:c4:3e:a8:5f:17:a4:8b:dc:23:40:7a:
af:c3:16:67:cd:6d:93:42:f5:a6:97:39:8c:3b:4b:
2c:d5:d2:b4:6a:1d:58:dc:37:c7:e2:e1:4c:93:e1:
80:d5:04:b1:08:b3:0d:c0:e2:26:31:68:6a:71:24:
4b:29:cb:44:fa:3b:ac:1c:30:5a:38:fb:33:2d:82:
68:67:b2:5b:df:e3:3e:01:45:d1:50:61:ef:37:c6:
f9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A3:B0:17:A5:EE:04:A6:DE:0D:28:0C:0D:17:2A:42:87:A3:FA:AF
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a2:1b:07:54:04:95:f0:6f:68:f2:ea:32:3c:20:0c:d6:a0:
2f:44:1d:57:8a:16:f4:df:8e:35:27:37:5d:33:f6:70:75:57:
f0:90:88:d5:99:ba:5b:f6:e0:72:bf:04:07:56:2d:2d:f9:14:
59:7c:65:c9:64:21:09:9c:ad:ad:3f:a3:5b:80:99:a1:d8:2e:
d0:e4:b3:b0:07:c8:17:fd:b1:17:2e:df:7e:a5:b7:89:f8:2a:
9c:41:14:db:d1:27:39:d0:0d:cc:6d:7d:f1:e6:dc:a1:52:68:
b5:4a:c1:23:46:d5:a8:ba:49:ae:4d:70:84:21:e8:74:4b:fa:
4c:46:54:f9:55:e8:2b:a9:5e:6e:5f:39:1e:06:eb:51:ab:d6:
2a:b1:51:58:65:e6:62:92:df:2d:fc:87:57:f5:59:84:97:e0:
ee:af:16:9d:20:4b:33:7e:75:58:89:62:b1:91:d3:0e:66:3d:
3d:04:ae:c7:9e:68:85:32:1c:90:1d:67:81:bd:d4:bb:cc:db:
de:81:51:bd:75:3f:30:cd:a9:50:21:29:f2:3a:48:f0:24:c9:
74:2d:a8:f9:2c:41:6d:47:12:fb:30:8f:a7:fd:9e:7a:24:04:
f2:8a:c2:8d:3b:9e:56:4c:1a:25:aa:4c:77:48:4c:17:22:97:
7d:dc:37:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRyPZFCvMCS+rxhsINjxleMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDQ3MDIxNGM2OWU0MzBmOGIzODVlMDkzNmFkOTYwMTY2
YWNkZjAwHhcNMjYwOTI0MDUwMDAzWhcNMjYwOTI1MDUwMDAzWjAzMTEwLwYDVQQD
Eyg3ZmEzYjAxN2E1ZWUwNGE2ZGUwZDI4MGMwZDE3MmE0Mjg3YTNmYWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8pwV2/ePIjeqOPbgfgReLsveyN/y
OfmYMZ1LKgGoGvfS+vdce9Kmwg2Rx3J8GoXG8wtGR0kLQ1nAvWeALMhZKI6m0Gcq
IZcymB/ikepTEsW31ddyUX2EuCkYitlvrPKNSr9O/mN6hMGYKE/eb3nS37U3sweD
sSuDnoSIvg2VJvy2lu7oQIdbPrWjR1wR/KffpnAlV0YK5+cc0ASVCEC0FUvxXfBJ
kzA3xD6oXxeki9wjQHqvwxZnzW2TQvWmlzmMO0ss1dK0ah1Y3DfH4uFMk+GA1QSx
CLMNwOImMWhqcSRLKctE+jusHDBaOPszLYJoZ7Jb3+M+AUXRUGHvN8b5OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+jsBel7gSm3g0oDA0XKkKHo/qvMB8GA1UdIwQY
MBaAFCTUcCFMaeQw+LOF4JNq2WAWas3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5Sd0lVeHA1REQ0czRYZ2syclpZQlpxemZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xYjk2MzctMjc5NS00ZTdjLWIzM2Yt
ZTI4Mjk1ZTU0YzNjLzEvSk5Sd0lVeHA1REQ0czRYZ2syclpZQlpxemZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xYjk2MzctMjc5NS00ZTdjLWIzM2YtZTI4Mjk1ZTU0YzNj
LzEvSk5Sd0lVeHA1REQ0czRYZ2syclpZQlpxemZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlaIbB1QE
lfBvaPLqMjwgDNagL0QdV4oW9N+ONSc3XTP2cHVX8JCI1Zm6W/bgcr8EB1YtLfkU
WXxlyWQhCZytrT+jW4CZodgu0OSzsAfIF/2xFy7ffqW3ifgqnEEU29EnOdANzG19
8ebcoVJotUrBI0bVqLpJrk1whCHodEv6TEZU+VXoK6lebl85HgbrUavWKrFRWGXm
YpLfLfyHV/VZhJfg7q8WnSBLM351WIlisZHTDmY9PQSux55ohTIckB1ngb3Uu8zb
3oFRvXU/MM2pUCEp8jpI8CTJdC2o+SxBbUcS+zCPp/2eeiQE8orCjTueVkwaJapM
d0hMFyKXfdw3xQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:57:55 2026 by rpki-client