Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: HbBjEZ00qqa5AR8FL+bY7nf3kODVzgvM5DF6RRFl4UQ=
Subject key identifier: 3B:A2:26:8E:B8:8E:2B:6B:3C:A3:94:22:23:FF:08:B5:66:56:DF:58
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 019F913554D578B0CA6586F3444F2D282AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 0C52
Signing time: Thu 23 Jul 2026 23:00:19 +0000
Manifest this update: Thu 23 Jul 2026 23:00:19 +0000
Manifest next update: Fri 24 Jul 2026 23:00:19 +0000
Files and hashes: 1: 7CXGDptf2okcN_TUuRa0vGLyCaQ.roa (hash: uAwFHhRb6M0iaad5i6SJTir06b/xHTrf77HmrAGNoN0=)
2: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: +JH9pFFHpcY35nRk5FBFbv6BOlfTg8RB8LO6AtAaILo=)
3: mp7eBUGX1B69vxK-CwJzFulzqZk.roa (hash: yIxwbLnT118Vwlqh6tg/BfTUPJnypGV001BfjuX6b44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:54:d5:78:b0:ca:65:86:f3:44:4f:2d:28:2a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Jul 23 23:00:19 2026 GMT
Not After : Jul 24 23:00:19 2026 GMT
Subject: CN=3ba2268eb88e2b6b3ca3942223ff08b56656df58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:78:c6:f0:21:57:3c:6e:ca:ea:b8:48:00:
6e:8f:f2:cd:b3:9e:f5:a1:31:7f:f9:4a:ea:4f:4c:
36:26:0f:a1:3b:24:9e:4b:a4:50:f2:71:ae:d5:65:
42:29:a6:ca:e0:ab:3c:f1:e4:58:4d:65:cf:2f:e1:
e0:32:22:99:96:49:e0:95:85:00:cc:67:14:57:97:
db:30:30:7f:3e:80:53:e5:5c:dc:08:07:42:bf:07:
d9:53:ee:1e:81:94:e9:3c:2a:9c:f8:a0:09:28:db:
48:4d:05:42:eb:6d:dc:53:74:b8:43:d0:70:9b:39:
80:dd:63:43:05:ac:25:e0:c8:a0:be:b5:6b:87:bb:
d2:4d:5a:2b:01:38:09:d2:aa:5c:c0:4f:20:b2:65:
25:89:15:b0:1b:4f:99:8c:00:e8:ad:27:5b:10:85:
28:77:8e:77:8f:1e:eb:05:7e:a1:8f:dd:01:02:1c:
6c:7b:ee:75:b1:7e:35:27:1a:d8:5d:f7:aa:51:2b:
eb:3f:c3:0f:c8:a1:e9:f3:23:e8:3f:03:f7:f2:f1:
a0:46:c7:a2:50:a0:64:a5:54:73:0a:1b:1f:94:17:
c7:76:b0:9b:58:17:41:27:4f:da:1c:71:c2:1b:2c:
7b:4e:52:9d:6e:15:54:8a:24:8d:61:10:fa:a6:b8:
14:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A2:26:8E:B8:8E:2B:6B:3C:A3:94:22:23:FF:08:B5:66:56:DF:58
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:01:7f:e6:23:9d:2b:d7:50:0d:9c:7a:46:5d:e1:f4:27:6b:
78:c5:29:3c:6c:4f:36:16:0d:a5:e7:66:00:f9:06:1c:a0:05:
db:f4:29:1d:90:7c:13:5b:28:94:d8:b5:14:60:2a:ff:f8:e9:
1f:ad:3b:a6:1d:21:70:0f:76:b7:73:55:bd:0e:70:c9:2b:c8:
0f:b0:74:18:db:a8:8b:8e:25:59:ac:2e:ba:e4:09:0a:14:27:
51:1a:55:0f:50:64:8e:a4:39:e4:86:6a:fc:00:6d:66:42:ef:
b2:a9:26:e4:b0:04:22:ae:c2:a1:a5:f9:b0:71:2e:02:97:48:
e1:24:90:7c:2e:97:3c:d5:b3:ec:1a:86:f4:e7:7d:8b:bc:df:
30:4c:d2:db:9e:8e:7c:26:e4:98:85:ce:e9:b3:94:aa:97:a4:
73:71:5d:5c:1b:90:76:b7:9b:b7:c5:9f:51:4f:94:32:53:79:
f3:9a:fa:03:46:8a:3c:a9:41:f0:ed:3b:84:95:ce:f3:68:55:
2a:ad:9f:e1:ba:54:53:ce:88:1a:2f:7d:2b:68:27:73:de:35:
c3:94:43:1b:8b:cf:6f:cb:af:eb:1f:20:b6:e2:e6:8c:0f:a7:
19:ac:fd:b4:98:3d:3a:8f:cc:e1:02:79:9a:03:f1:22:ae:fa:
2e:08:b1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:44:59 2026 by rpki-client