Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: 0IibCR5ys4n3cUd3mCdnvlanuvQUQgi34dKqdzYZAK4=
Subject key identifier: 6C:B9:8B:8A:34:A7:7D:EF:D4:47:1B:E9:09:2A:E9:04:6D:7D:69:86
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 019D29292AEB21EFA7EFE8BAB654828B8582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 0B13
Signing time: Thu 26 Mar 2026 08:00:56 +0000
Manifest this update: Thu 26 Mar 2026 08:00:56 +0000
Manifest next update: Fri 27 Mar 2026 08:00:56 +0000
Files and hashes: 1: 7CXGDptf2okcN_TUuRa0vGLyCaQ.roa (hash: uAwFHhRb6M0iaad5i6SJTir06b/xHTrf77HmrAGNoN0=)
2: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: SHIz+Z8qlo8jVWryzr0sKKypnn5I+hejGxGVZmidHK4=)
3: mp7eBUGX1B69vxK-CwJzFulzqZk.roa (hash: yIxwbLnT118Vwlqh6tg/BfTUPJnypGV001BfjuX6b44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:2a:eb:21:ef:a7:ef:e8:ba:b6:54:82:8b:85:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Mar 26 08:00:56 2026 GMT
Not After : Mar 27 08:00:56 2026 GMT
Subject: CN=6cb98b8a34a77defd4471be9092ae9046d7d6986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:8f:8a:3b:a1:99:93:78:9b:81:43:d0:37:
9f:54:f7:e5:cb:0e:55:74:b1:40:41:b9:99:d1:82:
5b:f4:ae:b8:b4:2f:ca:01:c8:90:14:69:e9:31:77:
1c:5a:32:b4:85:f8:19:f0:de:27:77:67:0f:6c:3d:
ba:31:bf:09:07:55:16:d2:41:75:fa:52:e6:01:64:
72:d8:4a:ec:ae:5c:5c:d2:94:39:d5:3f:52:98:b5:
2d:fe:7f:c9:d3:ce:13:82:d8:95:b1:da:e3:b5:a3:
53:9a:94:39:ed:dc:c7:ce:57:60:0b:dd:2f:22:fb:
73:1d:f7:f5:07:1e:1a:ce:d0:fc:ad:d7:5f:20:f7:
5c:1c:d0:d5:76:97:7d:6d:bd:92:d6:d1:3e:4a:c6:
58:19:36:fb:91:19:fb:5b:c3:35:ce:a3:81:94:f2:
a2:d3:7c:cb:ac:2b:2b:20:ea:5c:fe:06:64:9d:87:
51:de:13:7c:39:79:59:1b:15:a2:82:3c:cb:3b:e4:
72:8a:bc:6e:df:c5:63:b3:d4:79:4f:94:f6:fb:f2:
ff:52:dc:26:ac:8c:88:26:2c:f3:b8:03:47:8a:d6:
85:92:41:27:83:a0:b9:fb:1e:76:c6:59:23:7a:fa:
d2:ec:6d:3a:ee:8c:94:43:d1:1c:c1:b7:54:e1:d6:
cf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B9:8B:8A:34:A7:7D:EF:D4:47:1B:E9:09:2A:E9:04:6D:7D:69:86
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3e:7c:1d:cb:a6:10:56:1a:ce:a5:8b:56:c8:87:7d:28:91:
33:50:af:54:6d:39:36:da:3a:1e:fc:b8:90:70:75:88:15:13:
81:d2:2a:67:46:64:ed:d1:4f:32:f8:eb:a2:1e:24:85:4e:62:
5e:51:e8:fb:a4:0c:f6:df:9e:e3:bc:24:35:18:1f:73:46:e5:
84:37:5e:22:aa:45:c1:82:7b:3e:38:f1:60:99:81:23:70:37:
0f:ae:9f:a5:72:5c:2c:2b:56:87:9b:c0:d5:00:11:8e:4b:d1:
9b:23:7f:0b:7e:63:80:a5:25:5b:e9:7f:91:3c:d8:9a:d3:f1:
37:8c:ce:e4:46:7d:88:b0:8b:e3:cd:3d:20:eb:b7:44:bd:27:
51:d1:21:6a:a7:80:ef:53:53:f8:2f:96:c5:79:f9:e0:e0:be:
e3:aa:d1:49:f0:ce:06:fe:09:dc:60:ac:4b:d3:a0:67:46:9f:
92:bd:b8:82:94:31:86:cc:6d:31:52:c0:23:86:a1:cd:24:1d:
03:bc:2b:d2:30:9f:d5:16:f5:59:ea:f1:59:b3:ed:f3:76:b9:
1e:d4:56:17:40:5c:25:b5:96:db:65:34:82:c0:9a:01:5a:3f:
1f:e5:73:36:76:f0:df:27:7b:33:f2:a9:4e:e2:30:bd:7f:7b:
1b:d5:68:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:59 2026 by rpki-client